Skip to main content

depthfirst

Category: AI in Cybersecurity

An applied AI lab building 'General Security Intelligence' through autonomous agents designed to identify, analyze, and remediate software vulnerabilities at scale. depthfirst was founded in 2024. The company is led by Qasim Mithani. Based in San Francisco, USA. Team size: 101-500. Total funding raised: $120M. Latest round: Series A ($40M, Jan 2026). Key investors include Meritech Capital, Accel, Forerunner Ventures, The House Fund, Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC, SV Angel, Jeff Dean, Kirsten Green.

Founded
2024
Headquarters
San Francisco, USA
Team size
101-500
Total funding
$120M

Value proposition

Automates the end-to-end security lifecycle—from discovery to remediation—using AI agents that outperform traditional security scanners by 90% on industry benchmarks, significantly reducing manual security debt.

Products and solutions

General Security Intelligence (GSI) / AppSec Operating System, dfs-mini1 (first in-house security model; smart contracts / OpenAI EVMBench), Code Scanner (business-logic & exploit-chain reasoning), Dependency Firewall, Agentic Pentester (exploit validation & re-test), Security Reviewer (merge-ready PR remediation), Secrets & Sensitive Data detection, Supply Chain risk analysis

Unique value

Moves beyond traditional 'static analysis' by utilizing agentic AI that mimics the reasoning of human security researchers to not only find bugs but autonomously generate fixes.

Target customer

Enterprise software companies, DevSecOps teams, and organizations managing large-scale cloud infrastructure and complex codebases.

Industries served

Cybersecurity, Cloud Infrastructure, Software Development (DevSecOps), Enterprise SaaS

Technology advantage

Proprietary AI models optimized for security logic that achieve a 90% performance lead over legacy scanners on CyberGym benchmarks; founded by a 'super-team' of experts from DeepMind, Databricks, and AWS.

How they differentiate

Utilizes 'General Security Intelligence' (GSI) and agentic AI that mimics human reasoning to not only detect but autonomously remediate vulnerabilities, outperforming traditional scanners by 90% on CyberGym benchmarks.

Main competitors

Snyk, Wiz, Cognition AI (Devin)

Key partnerships

Meritech Capital (Lead Series B Investor), Accel (Lead Series A; Series B participant), Forerunner Ventures, The House Fund, Named enterprise customers: AngelList, Lovable, Moveworks, ClickUp, Supabase, Persona, incident.io, Open Defense Initiative (OSS credits program, May 2026)

Notable customers

AngelList, Lovable, Moveworks, ClickUp, Supabase, Persona, incident.io, Fortune 500 software companies (undisclosed)

Major milestones

Founded October 2024 by Qasim Mithani, Daniele Perito, Andrea Michi (DeepMind/Databricks/Faire/AWS), Product generally available late 2025; signed AngelList, Lovable, Moveworks, Supabase, Persona, $40M Series A led by Accel (Jan 14, 2026), $80M Series B led by Meritech Capital (Mar 31, 2026); total raised $120M, Launched dfs-mini1 in-house security model (smart contracts), Open Defense Initiative: up to $5M credits for OSS zero-day find/fix (May 2026)

Growth metrics

Raised $120M total (Series A $40M + Series B $80M in <90 days after stealth exit); LinkedIn company size 51-200; claims 90% fewer false positives vs traditional tools, ~80% of fix recommendations accepted/merged; named enterprise customers including AngelList, Moveworks, ClickUp, Supabase.

Market positioning

AI-native 'Agentic Security' pioneer focusing on autonomous vulnerability research and automated patching.

Geographic focus

North America (Headquartered in San Francisco), with a global focus on enterprise cloud infrastructure.

Patents and IP

No registered patents publicly disclosed as of January 2026; focus is on proprietary model architectures and agentic workflows.

About Qasim Mithani

Qasim Mithani is a seasoned engineering leader with a decade of experience scaling critical infrastructure at top-tier tech companies. Before founding depthfirst, he spent 5 years at Databricks as a Senior Engineering Leader, where he was instrumental in scaling core engineering during their hyper-growth phase. Prior to that, he spent 4 years at Amazon Web Services (AWS) as a Senior Engineering Manager focused on secure cloud services and infrastructure.

Latest news about depthfirst

More AI in Cybersecurity companies

Official website: