API security startup Cequence raises a $60M Series C led by Menlo Ventures, bringing its total funding to $89.5M
Application programming interface security startup Cequence Security Inc. announced today that it has raised $60 million in new funding to support enhancements to its solutions expand its product offerings.
Context & Ripple Effects
Cequence's raise lands at the peak of a fast-building API security funding cycle: Salt Security's $30M Series B a year earlier seeded the discovery-and-detection category, Neosec emerged from stealth with a $20.7M Series A in September, and on this very day rival Noname Security closed a far larger $135M Series C at a $1B valuation.
The lineage runs through web application security — Signal Sciences' 2019 round marked that earlier generation — and the shift from protecting apps to protecting the APIs beneath them is what has VCs writing nine-figure checks across a half-dozen startups within two years.
First-order effects
- Cequence gains $60M to enhance its existing solutions and expand its product line, directly answering the feature breadth that better-capitalized Noname can fund.
- Menlo Ventures adds a second security platform bet alongside the Obsidian Security Series C it led months later, deepening its application-security portfolio position.
Second-order effects
- Noname's $1B valuation sets the pricing benchmark for the category, pressuring Cequence and Neosec to raise again sooner or differentiate on remediation rather than discovery alone.
- Security buyers now face a crowded field of overlapping API-discovery vendors, pushing procurement toward consolidation-friendly platforms and forcing startups to compete on integration depth.
Third-order effects
- If the funding cadence holds, the category is set for consolidation: point-tool API security vendors become acquisition targets for broader appsec platforms, repeating the web-application-security pattern Signal Sciences rode.
- APIs harden into the default enterprise attack surface, making API security a budget line distinct from — not a subset of — traditional web application firewalls.
The trend: Application security is migrating from web apps to the API layer underneath them, with venture capital racing to back discovery-and-remediation platforms before the category consolidates.