Tel Aviv-based WhiteSource, which helps enterprises secure their open source software components, raises $75M Series D, bringing its total raised to $121.2M
Chris Metinko / Crunchbase News :
Context & Ripple Effects
WhiteSource's $75M Series D is the scale-up step in an arc that began when it raised a $35M round led by Susquehanna Growth Equity in 2018 for tracking open source code for vulnerabilities — the new round roughly doubles its total raised to $121.2M as enterprises treat third-party components as a first-class attack surface.
It also lands inside a deepening Tel Aviv/Israeli cluster attacking adjacent layers of the same problem: Cycode's $56M Series B for protecting source code, Sentra's seed for cloud data visibility, and later stealth exits like Valence Security (SaaS supply chains), Native, and Act Security all fund different slices of software-supply-chain defense.
First-order effects
- WhiteSource gains capital headroom to push from vulnerability tracking toward broader open source governance, while its enterprise customers get a better-funded vendor as component-security budgets consolidate around fewer platforms.
Second-order effects
- The Israeli cohort it anchors — Cycode, Sentra, and the newer SaaS/cloud entrants like Valence Security — competes for the same enterprise security buyer, forcing each to differentiate by layer (source code vs. data vs. access surface) rather than by geography or talent pool.
Third-order effects
- If funding cadence holds, software supply chain security consolidates into platform vendors that span code, dependencies, and runtime — with Israel's security ecosystem functioning as the default R&D base for that category.
The trend: Security spending is migrating from network perimeter tools to defending the software supply chain itself, and Israeli startups are capturing a disproportionate share of the rounds funding that shift.