Tel Aviv Security Firm Oligo Raises $60 Million to Catch Hackers in the Act
Oligo Security has now raised $140 million total to build software that watches running apps in real time and blocks attacks the moment they happen, rather than waiting for a patch.
Key points
- Oligo Security raised $60 million in a new funding round announced today, bringing its total funding to $140 million.
- Founded in 2022 and based in Tel Aviv, the company sells software that monitors applications while they are actively running and blocks attacks in real time.
- Seven investor groups participated, including Ballistic Ventures and Lightspeed Venture Partners.
- The platform claims to stop supply chain attacks, where criminals hide malicious code inside software packages that other developers trust and install.
- Oligo says the gap between a software flaw being discovered and criminals actively exploiting it has shrunk sharply in the AI era.
Most security tools work like a smoke alarm: they tell you after something already started burning. Oligo Security is betting that's not good enough.
The Tel Aviv-based company, founded in 2022, builds what the industry calls runtime security. Instead of scanning an application before it launches, Oligo's software watches the application while it's live, handling real customer data. If an attacker tries to exploit a flaw at that exact moment, the platform can block the move before any damage is done.
Why does this matter to ordinary people?
Every app you use, from a bank's mobile site to a hospital's patient portal, runs on software built from dozens of third-party code libraries. One flaw in any of those libraries is a door criminals can walk through.
Patching takes time. IT teams have to test fixes and coordinate downtime. Meanwhile the clock is ticking. Oligo's pitch is that its platform can apply a "virtual patch", a temporary block on the vulnerable function, while the real fix is prepared. That buys time without taking anything offline.
How does it actually stop an attack?
Oligo uses something called code execution observability, which means the software watches every instruction an application runs at a very low level. When a known-bad pattern appears, such as an attempt to exploit a zero-day (a flaw the software maker hasn't yet fixed or even found), the platform flags it and can block it automatically.
It also claims to handle supply chain attacks, where criminals sneak malicious code into a widely-used software package so that any company installing it unknowingly brings the attacker inside too. That style, made infamous by the 2020 SolarWinds incident, is notoriously hard to catch because the malicious code arrives disguised as something legitimate.
| Milestone | Detail |
|---|---|
| Founded | 2022 |
| Headquarters | Tel Aviv, Israel |
| New round | $60 million |
| Total raised | $140 million |
| Lead investors | Ballistic Ventures, Lightspeed Venture Partners |
| Stated use of funds | Product development and global expansion |
Ballistic Ventures partner Jake Seid called runtime "where the business lives" and said Oligo "solved one of security's hardest problems by protecting production environments without forcing organisations to choose between security and uptime."
Reasonable venture-capital enthusiasm, as first reported by SecurityWeek. We covered a similar real-time blocking claim from Sweet Security on 30 July, and the pattern is consistent: investors are paying for the promise, not yet the proof under novel conditions at 2 a.m. On a Sunday.
Funds go toward product development and wider sales operations. If your security team can only watch for threats before deployment, you've already lost the race on zero-days.
