Wasp disclosed a case-insensitive OAuth IDs vulnerability (CVE-2025-49006) affecting Wasp 0.16.5 and earlier for some Keycloak configurations; a fix shipped in 0.16.6.
SourceConfiguration language for building enterprise web apps 10x faster
Public company, workplace, funding, and market signals
Updated Jul 29, 2026
Wasp is a Zagreb-based, YC Winter 2021, open-source developer-tools company building a full-stack app-specification framework for the AI era. It wires React, Node.js, and Prisma together with built-in auth, jobs, email, and deployment so teams can ship full-stack web apps with far less boilerplate.
Primary product
Wasp full-stack web framework / Web App Specification (DSL)
Founded
2020
Headquarters
Zagreb, Croatia
Team size
1-10
Work style
Remote
Industry
Information Technology & Services
Sub-industry
Developer tools / full-stack web frameworks
Offices
0 jobs at Wasp
Check back later for new openings
Business model
Leadership
CEO & Co-founder
CTO & Co-founder
Senior Framework Engineer
Software Engineer
Investors
Remote-first, small, open-source, and developer-centric. Public posts and hiring materials emphasize clean code, practical problem solving, community engagement on Discord, humor/memes, and a conversational hiring style rather than algorithm tests.
Work style
Remote
Compensation
No official company-wide salary bands were found publicly. A 2026 third-party remote Operations posting listed roughly $93K-$114K/year, but Wasp does not appear to publish a formal compensation policy.
Benefits
Pricing
Free and open-source; monetization is not publicly framed as traditional per-seat SaaS pricing.
Differentiators
Technology
Customers
Competitors
Estimated revenue
≈$1.2M estimated ARR (2024)
Estimated monthly visits
84.6K
Traffic estimate as of Feb 2026
Wasp disclosed a case-insensitive OAuth IDs vulnerability (CVE-2025-49006) affecting Wasp 0.16.5 and earlier for some Keycloak configurations; a fix shipped in 0.16.6.
SourceWasp · Jun 2026
Wasp's Launch Week #12 detailed the TypeScript-native 'TS Spec' transition, plus SSR/pre-rendering, a rebrand, and easier deployment support.
Wasp · May 2026
Wasp announced a major product shift: replacing its custom DSL with a TypeScript-first approach while keeping the framework's core full-stack workflow.
Wasp · Jul 2025
Wasp highlighted customer case studies including Kivo, MicroInfluencer, and CTO Box to show how builders use its boilerplate-reducing framework and Open SaaS template to ship faster.
Wasp · Jun 2025
Wasp disclosed CVE-2025-49006, a case-insensitive OAuth ID vulnerability affecting some Keycloak setups in Wasp 0.16.5 and earlier; the fix shipped in 0.16.6.
TechCrunch · Apr 2025
TechCrunch reported Wasp had raised a previously unannounced $3.7M round led by HV Capital, bringing total funding to $5.2M and framing the company as a full-stack developer tool with startup and Fortune 500 customers.