AI safety agency Enhance raises $4m and snaps up rivals

Boost Security, an AI-native software program growth lifecycle (SDLC) defence platform, has introduced the acquisitions of SecureIQx and Korbit.ai, alongside $4m in new funding.

The extra capital was supplied by White Star Capital, Amiral Ventures, Accelia Capital, and Sorensen Capital, and shall be directed in direction of additional growth of the corporate’s platform.

The 2 acquisitions convey complementary capabilities to Enhance Safety’s current providing. SecureIQx, a startup based at MIT, created a Software program Composition Evaluation reachability engine capable of study each binary and supply code throughout greater than twelve programming languages, serving to organisations assess whether or not susceptible elements inside their functions are genuinely reachable and exploitable.

Korbit.ai, in the meantime, developed an AI-driven pull request assessment platform designed to catch safety vulnerabilities, efficiency issues, and coding errors through the assessment stage. Its expertise has been educated on a whole lot of tens of millions of traces of code drawn from hundreds of firms. Taken collectively, the 2 acquisitions add superior reachability evaluation, AI-native static utility safety testing (SAST) capabilities, and code assessment applied sciences to the Enhance Safety platform.

The broader context for the offers is a quickly shifting software program growth panorama, during which AI instruments are producing ever-greater volumes of code and engineering groups are more and more reliant on expansive ecosystems of third-party packages and libraries. Safety groups face the problem of assessing rising portions of code while figuring out which vulnerabilities genuinely current a threat in reside manufacturing methods.

Enhance Safety’s platform addresses this by combining Developer Endpoint Safety, Software program Provide Chain Safety, and AI-Native Utility Safety Posture Administration (ASPM) right into a single answer. The platform is designed to defend the AI toolchain, stop provide chain threats from being ingested, and mechanically remediate susceptible code, enabling engineering groups to develop at pace with out safety changing into a bottleneck.

White Star Capital accomplice Catherine Ouellet-Dupuis mentioned, “Latest high-profile provide chain assaults are simply the opening act. The deeper threat is that each engineering workforce on the planet is now transport code written by AI brokers that may unknowingly introduce vulnerabilities at machine pace and machine scale, and you may’t ask the identical agent that wrote the bug to be your final line of protection. Enhance is likely one of the few platforms constructed from the bottom as much as sit exterior that loop, intercepting threats earlier than they ever attain manufacturing. That’s the safety structure this new period calls for.”

Enhance Safety founder and CEO Zaid Al Hamami mentioned, “We’re in a brand new period. By some estimates, 15 instances extra code was produced in 2025 than in 2024, and most of it wasn’t written or reviewed by people. On the identical time, provide chain assaults have gotten extra frequent and extra subtle. With these acquisitions, we’re bringing deeper agentic capabilities into the Enhance Safety platform to fulfill that actuality.”