Noname Security, which automatically discovers and remediates API vulnerabilities, raises $60M Series B led by Insight Partners, bringing total raised to $85M
Where does your enterprise stand on the AI adoption curve? Take our AI survey to find out. — Noname Security …
Context & Ripple Effects
This June 2021 raise sits at the start of a fast arc for API security. Six months earlier, rival Salt Security had raised a $30M Series B led by Sequoia Capital for overlapping API-discovery tooling, and Noname's $60M from Insight Partners was the answer — a bet that automated discovery plus remediation could win the category before it consolidated.
The follow-on coverage shows how that race resolved: Noname hit a $1B valuation within six months in a $135M Series C led by Georgian and Lightspeed, then agreed nearly three years later to be acquired by Akamai for about ~$450M — well below peak. The Series B is the moment the category looked like a standalone-startup market; everything after traces whether that held.
First-order effects
- Insight Partners converts its lead position into an early stake in API security just as Salt Security, Sequoia-backed, is scaling the same discovery-and-detection pitch — the two firms now compete for the same enterprise security budgets.
- Noname gains the capital to push beyond finding APIs toward automatically remediating their vulnerabilities, widening the gap between full-loop tooling and detection-only rivals.
Second-order effects
- Salt Security faces pressure to match the remediation half of the loop or cede the 'fix it, not just find it' claim that enterprises increasingly treat as table stakes.
- Category validation at this funding pace invites edge and infrastructure vendors — later Akamai — to treat API security as an acquisition target rather than a build-it market.
Third-order effects
- The trajectory from two competing 2021 Series B rounds to a sub-peak sale suggests standalone API security startups struggled to hold unicorn valuations on their own, pushing the category toward consolidation inside broader application-security and edge platforms.
- Automated remediation — deciding which vulnerabilities get fixed without human triage at scale — becomes the durable differentiator the next funding cycle chases, as seen years later in AI-agent remediation plays like Cogent Security's Series A.
The trend: API security moved from venture-funded standalone specialists in 2021 toward absorption by larger security platforms, with automated remediation emerging as the lasting competitive line.