The perimeter is not where the breach happens anymore. Attackers have figured out that scanning-based defenses — the tools that check code before it ships — leave a wide-open window once software is actually running in production. Oligo Security is betting $60 million that closing that window is the next major battleground in enterprise cybersecurity, and investors are convinced enough to fund the fight. The Israeli startup announced a Series B round of that size, a figure that signals real institutional confidence in the runtime security category at a moment when agentic AI threats are straining every layer of the defensive stack.
According to Calcalist Tech, the round was led by prominent venture backers and brings Oligo’s total funding to approximately $80 million since its founding. The company was established by alumni of the Israeli intelligence community, a pedigree that has produced a string of credible cybersecurity firms over the past decade. Oligo’s core pitch is simple but pointed: traditional application security tools analyze code statically, meaning they inspect what a program looks like before it runs. They cannot see what a program actually does at the moment of execution — and that is precisely where modern attackers are now operating.
Why Runtime Is the New Frontline
The shift in attacker behavior driving Oligo’s growth is not subtle. Threat actors increasingly weaponize open-source libraries and third-party dependencies — components that may pass a static scan cleanly but carry exploitable behavior that only surfaces when the application is live under real conditions. The rise of AI-assisted attack tooling has accelerated this dynamic dramatically. Automated systems can now probe running applications for behavioral anomalies and logic flaws at a speed and scale that human red teams could never match manually, compressing the window between vulnerability discovery and exploitation to hours rather than days.
Oligo’s platform sits inside the running application itself, using eBPF — a Linux kernel technology that lets software observe system behavior with minimal overhead — to monitor what code is actually doing in memory, which network calls it is making, and which file paths it is touching. That level of visibility lets the platform catch attacks that exploit legitimate functionality rather than known malware signatures. It is a fundamentally different model from legacy application security testing, which was built for a slower, more predictable threat environment than the one enterprises now inhabit.
$60 Million and a Market Looking for Answers
The funding arrives at a moment when enterprise security budgets are under pressure to consolidate tools while simultaneously covering more attack surface. AI workloads in particular have introduced new runtime risks: model inference endpoints, vector databases, and orchestration layers all represent live, network-exposed targets that static analysis tools were never designed to protect. Oligo has been vocal about positioning its platform as purpose-built for exactly these environments, arguing that the same observability gap that exposed traditional web applications now threatens the AI infrastructure layer being bolted onto enterprise stacks at speed.
The $60 million will reportedly go toward expanding Oligo’s engineering team, deepening integrations with cloud-native deployment environments, and accelerating go-to-market efforts in North America and Europe. For a company operating in a category that has historically struggled to explain itself to buyers accustomed to thinking about security in terms of scanning and patching, the commercial challenge is as real as the technical one. But with AI-driven attacks making the limitations of pre-runtime defenses impossible to ignore — and with incidents tied to vulnerable open-source components now regularly making headlines — the window for that education may finally be open. Oligo is spending $60 million on the assumption that it will not stay open long before the market catches up.
