Dazz vs Duckie

About

Dazz is a cloud security remediation platform founded in 2021 and headquartered in Palo Alto, California. The company was founded by Merav Bahat, Tomer Schwartz, and Yuval Ofir, former Microsoft Azure and Intel security executives, to solve a problem that had grown acute as organizations deployed more cloud security scanners: the remediation backlog. Modern security teams ingest findings from dozens of tools — CNAPP platforms, SAST, DAST, SCA, container scanners, and cloud posture tools — but have no unified way to deduplicate, prioritize, or route those findings to the right developers for fixing.\n\nDazz raised $110 million in funding from investors including Greylock Partners, Cyberstarts, and Microsoft's venture arm M12. Its platform connects to all major security scanning tools and the developer toolchain, then uses AI to correlate findings across tools, eliminate duplicates, trace findings to root causes in source code, and generate developer-friendly remediation tickets with context and suggested fixes. The goal is to turn a security team's finding backlog into a prioritized, actionable engineering backlog that developers can work through efficiently.\n\nThe platform's root cause analysis capability is a key differentiator: rather than sending developers individual vulnerability alerts, Dazz identifies that multiple alerts often share a single root cause — such as a misconfigured Terraform module or a vulnerable base image — and creates a single remediation task that fixes many findings at once. Dazz integrates with Jira, GitHub, GitLab, ServiceNow, and major CI/CD pipelines, and supports role-based workflows so security findings route to the appropriate developer or team based on code ownership.