Casco newsletter · Jul 2026
Casco's newsletter highlighted the Series A, the company's bug-finding challenge, and broader security commentary.
Company research
Public company, workplace, funding, and market signals
Updated Jul 30, 2026
Overview
Casco is a 2025-founded, San Francisco-based AI security startup that provides autonomous and human-supervised penetration testing for web apps, APIs, infrastructure, and AI systems, with the goal of replacing point-in-time pentests with continuous year-round security testing.
Primary product
Autonomous security testing platform for web apps, APIs, infrastructure, and AI systems
Founded
2025
Headquarters
San Francisco, CA, United States
Team size
11-50
Work style
Remote
Industry
Data Security Software Products
Sub-industry
Autonomous application security testing
Offices
San Francisco, CA, United States
Seattle, WA, United States
Business model
B2B SaaS
subscription software
penetration testing services
usage-based pricing
Funding
People & investors
Leadership
Founder & CEO
Founder & CTO
Head of Customer Success
Work & culture
Mission-driven, founder-led, fast-moving, security-obsessed, and heavily influenced by ex-AWS talent. The company emphasizes practical shipping, real security outcomes, and high-ownership work.
Work style
Remote
Visa sponsorship
No
Compensation
Public job posts show a $200K base salary plus meaningful equity for software/security roles, and a Technical Account Executive role with $350K OTE plus equity. The company also advertises an annual learning budget for security roles.
Benefits
Remote-first US roles
Meaningful equity
Annual learning budget
Founder-led interview process
Product & market
Pricing
Tiered subscription pricing with usage-based fees for certain product tiers; demo-led selling for enterprise and supervised pentest engagements.
Differentiators
- —Continuous year-round testing instead of annual point-in-time pentests
- —Autonomous agents that run actual code/runtime behavior rather than static checks
- —Optional human supervision from experienced security engineers
- —Lower false-positive rates with verified findings
- —Clear remediation guidance with reproduction steps and business impact
- —CREST-accredited penetration testing
- —Direct engineer communication and one-click retest
Technology
TypeScript
Next.js
AWS
Kubernetes
Metasploit
Stripe
Hugging Face
Slack
Microsoft Teams
Customers
Startups
Enterprises
CrewAI
Gusto
Novig
Accrual
Scout
SixtyFour
Vouch Insurance
Competitors
Traditional manual pentesters
Annual penetration testing firms
Legacy code security tools
Human pentesters
Point-in-time security assessment vendors
Scale & contact
Latest news
Casco blog · Jul 2026
Casco announced a Series A at a $100M valuation led by Standard Capital, with participation from FundersClub, Y Combinator, and Rebel Fund, and said total capital raised reached $17M.
Casco blog · Apr 2026
Casco published a vulnerability disclosure describing a database takeover in ElectricSQL found by its agents, illustrating the company's product in use on real targets.
Casco blog · Apr 2026
Casco announced CREST accreditation, positioning its supervised penetration testing offering as CREST-approved and emphasizing higher standards for testing methodology and ethics.
Casco blog · Sep 2025
Casco announced it became a Gold Sponsor of OWASP AI Exchange, reinforcing its focus on AI security tooling and community engagement.
Jobs and careers at Casco
0 jobs at Casco
No open positions
Check back later for new openings