Company Overview
About Corgea
Corgea is a United States-based AI-powered application security automation company — backed by Y Combinator (S23) with $2.6 million in seed funding in January 2025 led by Shorooq Partners with participation from YC, Propeller, Decacorn, Unbound Ventures, Jawed Karim (YouTube co-founder), and Sam Kassoumeh — providing security engineering teams with an automated vulnerability remediation platform that integrates with existing SAST (Static Application Security Testing) tools (Snyk, Semgrep, Checkmarx, SonarQube) to automatically generate AI-written code fixes for identified vulnerabilities, submit pull requests for developer review, and reduce the time from vulnerability detection to remediation by 80% while cutting false positive burden by 30%. Recognized as an IDC Innovator in DevSecOps in November 2024, Corgea serves security teams who face growing vulnerability backlogs that manual remediation cannot clear at the pace of modern software development.
Business Model & Competitive Advantage
Corgea's remediation automation addresses the security engineering bottleneck created by SAST tool proliferation: security-conscious engineering organizations deploy Snyk, Semgrep, or similar SAST scanners that identify hundreds or thousands of potential security vulnerabilities (SQL injection risks, XSS vulnerabilities, insecure deserialization, hardcoded credentials) per scan — but each identified vulnerability requires a human developer to understand the context, write the code fix, test the fix, and submit it through the code review process. Security teams that can't clear vulnerabilities as fast as they're discovered accumulate backlogs where known vulnerabilities age open for months. Corgea's AI automatically analyzes each flagged vulnerability in context (reading the surrounding code, understanding the data flow, identifying the fix pattern appropriate to the vulnerability type and language), generates a syntactically correct code fix, and opens a pull request with the fix and an explanation — enabling developers to review and merge security fixes at 10x the speed of manual remediation.
Competitive Landscape 2025–2026
In 2025, Corgea competes in the DevSecOps automation, vulnerability remediation, and application security platform market with Snyk (application security with limited auto-fix, $530M raised at $7.4B valuation), Veracode (AppSec platform, acquired by Broadcom, NASDAQ: AVGO), and Mobb.ai (AI-powered vulnerability fix, $6M raised) for security engineering team automation adoption. The DevSecOps automation market has grown as organizations face the dual pressure of increasing vulnerability discovery (more developers, more code, more SAST scanning) and decreasing security team capacity relative to the total codebase under management. Jawed Karim's angel investment (YouTube co-founder who has deep engineering infrastructure experience) and Shorooq Partners' MENA-US dual focus reflect both the technical validation and regional expansion potential. Y Combinator S23 backing positions Corgea in the developer tools and security infrastructure investor community. The 2025 strategy focuses on enterprise deployment within existing Snyk and Semgrep customer environments, building the language-specific remediation quality for Java, Python, JavaScript, and Go codebases where vulnerability patterns are most common, and growing the compliance-driven remediation for SOC 2 and PCI DSS security requirement workflows.
Recent Activity
View all →The typosquatted Go module github.com/shopsprint/decimal copied the popular shopspring/decimal API, then weaponized version 1.3.3 with an init() goroutine that polls DNS TXT records and executes returned commands.
A malicious 18.95.0 release of the Nx Console VS Code extension executed a hidden npx task on workspace activation, fetched an obfuscated Bun payload from a dangling nrwl/nx commit, harvested developer and cloud credentials, and installed macOS persistence.
WebdriverIO BrowserStack Service versions through 9.23.2 interpolate attacker-controlled Git branch names into execSync() calls during test orchestration smart selection, allowing command injection on CI runners and developer machines.
Corgea's weekly briefing for 12-19 May 2026 covers the durabletask PyPI compromise, the Mini Shai-Hulud expansion into AntV and related npm packages, the Nx Console extension compromise, WebdriverIO command injection, and other important supply-chain, kernel, and application-security research from the week.
Three malicious PyPI releases of Microsoft's durabletask Python SDK, versions 1.4.1 through 1.4.3, executed an import-time Linux dropper that fetched rope.pyz, harvested cloud and developer secrets, and attempted lateral movement through AWS SSM and Kubernetes.
TeamPCP's Mini Shai-Hulud campaign expanded on May 19 with hundreds of malicious npm releases across the AntV data-visualization ecosystem and related packages including echarts-for-react, timeago.js, size-sensor, and jest-canvas-mock.
Five Strapi advisories published in mid-May affect npm packages across the Strapi CMS stack, including a critical unauthenticated admin reset-token oracle in @strapi/strapi and a critical Content-Type Builder SQL injection in @strapi/content-type-builder and @strapi/plugin-content-type-builder.
Cemu v2.6 Linux GitHub release assets were deleted and re-uploaded with a Python zipapp payload tied to the TanStack and Mistral TeamPCP supply-chain campaign, exposing users who ran the AppImage or Ubuntu ZIP to credential theft and possible destructive behavior.
Three npm releases of node-ipc, versions 9.1.6, 9.2.3, and 12.0.1, were published with an obfuscated CommonJS payload that steals developer and CI credentials and exfiltrates gzipped archives through DNS TXT queries.
CVE-2026-46300, nicknamed Fragnesia, is a new Linux kernel XFRM ESP-in-TCP local privilege escalation that lets unprivileged local attackers corrupt read-only file contents in page cache and execute a root shell from a patched-in-memory system binary.
GemStuffer is a RubyGems registry-abuse campaign that published 155 junk package artifacts containing scraped UK council portal data, using hardcoded RubyGems API keys and valid .gem archives as a public data drop.
This week's Corgea changelog highlights Harness Code integration, sharper secret scanning, and stronger endpoint discovery in the scanning engine.
Key Differentiators
Emerging Innovator
Corgea is an emerging player bringing innovative solutions to the Security market.
Frequently Asked Questions
Estimated Visibility Trend (Beta)
Simulated 8-week rolling score
Based on estimated brand signals. Historical tracking coming soon.
Similar Brands
Reality Defender
Reality Defender is an AI-powered deepfake and synthetic media detection platform protecting enterprises, media organizations, and government agencies from AI-generated voice cloning, video manipulati
Tracecat
Tracecat is a San Francisco-based open-source security automation platform — backed by Y Combinator (W24) with $500,000-$2 million in seed funding from Y Combinator, Pioneer.app, Pioneer Fund, and Sur
1Password
1Password is an enterprise password manager and secrets management platform enabling individuals, teams, and businesses to securely store, manage, and share credentials, credit cards, and sensitive in
Bitwarden
Bitwarden is a Santa Barbara-based open-source password manager and identity security platform — backed with $100 million raised in a Series C led by PSG in September 2022 — providing individuals, tea
Anduril Industries
Anduril Industries is a defense technology company building autonomous weapons systems, surveillance infrastructure, and AI-driven defense platforms for the US military and allied nations. Founded in
Browser Use
Browser Use is an open-source project that provides a Python library allowing AI agents and large language models to control web browsers as a tool. The library sits between LLM APIs and browser autom
Compare Corgea with Competitors
Side-by-side AI visibility scores, platform breakdown, and market position.
Claim This Profile
Are you from Corgea? Claim your profile to see full AI mention excerpts, get weekly visibility change alerts, and optimize how AI systems describe your brand.
Claim Corgea Profile →Track AI Visibility in Real Time
Monitor how ChatGPT, Gemini, Perplexity, and Claude mention Corgea vs competitors. Get alerts when AI recommendations shift.
Start Free Tracking →