Corgea research · Jul 2026
A research advisory explaining how a Linux XFS reflink race could enable local root on affected systems.
Corgea finds, and fixes insecure code and packages autonomously.
Company research
Public company, workplace, funding, and market signals
Overview
Corgea is a San Francisco-based, AI-native application security platform that finds, prioritizes, and fixes insecure code across code, dependencies, infrastructure, and containers, with PR- and IDE-based remediation plus agent-driven pentesting.
Primary product
AI-native application security platform for autonomous vulnerability detection, triage, and fix generation
Founded
2023
Headquarters
San Francisco, California, United States
Team size
1-10
Work style
Remote
Industry
Computer and Network Security
Sub-industry
Application Security / DevSecOps
Offices
San Francisco, California, United States (HQ)
United States (distributed workforce)
Jordan (distributed workforce)
Spain (distributed workforce)
Business model
B2B SaaS
Freemium / free trial
Per-seat subscription
Enterprise custom contract
Funding
Stage
Seed
Total raised
$2.7M
Latest round
Seed · Nov 2024
Latest amount
$2.6M
People & investors
Leadership
Founder & Chief Executive Officer
Founding GTM
Founding Engineer Product Designer
Work & culture
Developer-first, security-obsessed, AI-native, research-led, and fast-moving; public messaging emphasizes autonomous remediation, high-signal findings, and meeting developers where they work.
Work style
Remote
Compensation
Public YC job postings show Senior Software Engineer compensation around $120k-$220k plus equity; other roles are advertised with remote options and location-specific openings.
Product & market
Pricing
Freemium and seat-based SaaS pricing with Free, Growth, Scale, and custom Enterprise tiers.
Differentiators
- —AI-native AppSec with business-logic awareness
- —Reachability-aware prioritization
- —Developer-ready fixes via PRs and IDE integrations
- —3x fewer false positives / 2x more true positives claim
- —Agent-driven pentesting and autonomous remediation
Technology
GitHub
GitLab
Azure DevOps
Bitbucket
Harness
GitHub Actions
VS Code
Cursor
Visual Studio 2022
IntelliJ
JIRA
Slack
APIs
Webhooks
Terraform
Docker
Kubernetes
Grafana
Prometheus
Datadog
Customers
Zapier
Yageo
Top 5 Energy Company
Top 100 Commercial Bank
Competitors
Snyk
Checkmarx
Semgrep
GitHub Advanced Security
Claude Code Security
Scale & contact
Estimated revenue
Public estimates range from about $440K ARR (GetLatka) to about $880K/year (Growjo).
Estimated monthly visits
14.5K
Traffic estimate as of Jul 2026
Latest news
Corgea blog · Jun 2026
Announced agent-driven pentesting that maps attack paths and validates exploitability.
Corgea blog · Jun 2026
Introduced a new scanning capability aimed at AI agent skills and instructions as part of the security surface.
Corgea blog · Jun 2026
Launch-week product announcement for an AI-native workflow that catches design-level threats at the PRD stage.
Forbes Middle East · Nov 2024
Funding announcement covering Corgea's seed round led by Shorooq Partners with participation from YC and others.
Jobs and careers at Corgea
0 jobs at Corgea
No open positions
Check back later for new openings