Tel Aviv Security Firm Oligo Raises $60 Million to Catch Hackers in the Act
Oligo Security has now raised $140 million total to build software that watches running apps in real time and blocks attacks the moment they happen, rather than waiting for a patch.
Key points
- Oligo Security raised $60 million in a new funding round announced today, bringing its total funding to $140 million.
- Founded in 2022 and based in Tel Aviv, the company sells software that monitors applications while they are actively running and blocks attacks in real time.
- Investors include Ballistic Ventures, Lightspeed Venture Partners, and five other firms.
- The platform claims to stop supply chain attacks, where criminals hide malicious code inside software packages that other developers trust and install.
- Oligo says the gap between a software flaw being discovered and criminals actively exploiting it has shrunk sharply in the AI era.
Most security tools work like a smoke alarm: they tell you after something already started burning. Oligo Security is betting that is not good enough.
The Tel Aviv-based company, founded in 2022, builds what the industry calls runtime security. Think of it this way: instead of scanning an application before it launches, Oligo's software watches the application while it is actually running, serving real customers, and handling real data. If an attacker tries to exploit a flaw at that exact moment, the platform can block the move before any damage is done.
Why does this matter to ordinary people?
Every app you use, from a bank's mobile site to a hospital's patient portal, runs on software built from dozens of third-party code libraries. One flaw in any of those libraries is a door criminals can walk through.
The practical problem security teams face is that patching, which means applying an official fix from the software maker, takes time. IT teams have to test patches, schedule downtime, and coordinate with other departments. Meanwhile the clock is ticking. Oligo's pitch is that its platform can apply a "virtual patch", essentially a temporary block on the vulnerable function, while the real fix is prepared. That buys time without taking anything offline.
How does it actually stop an attack?
Oligo uses something called code execution observability, which means the software watches every instruction the application runs at a very low level. When a known-bad pattern appears, such as an attempt to exploit a zero-day (a flaw the software maker hasn't yet fixed or even found), the platform flags it and can block it automatically.
It also claims to handle supply chain attacks, where criminals sneak malicious code into a widely-used software package so that any company installing that package unknowingly brings the attacker inside too. That attack style, made famous by the 2020 SolarWinds incident, is notoriously hard to catch because the malicious code arrives disguised as something legitimate.
| Milestone | Detail |
|---|---|
| Founded | 2022 |
| Headquarters | Tel Aviv, Israel |
| New round | $60 million |
| Total raised | $140 million |
| Lead investors | Ballistic Ventures, Lightspeed Venture Partners |
| Stated use of funds | Product development and global expansion |
Ballistic Ventures partner Jake Seid called runtime "where the business lives" and said Oligo "solved one of security's hardest problems by protecting production environments without forcing organisations to choose between security and uptime."
That is reasonable venture-capital enthusiasm, as first reported by SecurityWeek. The real test is whether the platform holds up when a genuinely novel exploit hits a customer's environment at 2 a.m. on a Sunday.
The funding will go toward faster product development and wider sales operations, the company said.
The operational takeaway: if your security team can only watch for threats before deployment, you have already lost the race on zero-days.
