Resource Center

According to our research, for many organizations, determining who will fix a security issue takes as much time as actually fixing it. This means that half of the time allocated to meeting security SLAs is spent simply routing issues to the correct team. This lack of clarity creates friction at every stage of the remediation process, leading to inefficiencies, delays, and strained relationships between security and development teams.

We are excited to share that Heeler’s initial OWASP® Foundation Global AppSec in San Francisco was nothing short of incredible! The energy and expertise of the application security community were truly inspiring. From thought leaders to fellow startups, it was a fantastic opportunity to engage with others who share a common goal: solving today’s most pressing AppSec challenges.

Heeler Security Inc., a pioneering startup in the application security space, today announced the successful closing of an $8.5 million Seed Series funding round, led by Norwest Venture Partners with significant participation from Storm Ventures.

In today’s rapidly evolving threat landscape, a massive gap exists in application security. This gap stems from the lack of a unified data layer that integrates code, runtime, and business context, making current security efforts labor-intensive and difficult to scale. Without this context, prioritizing security becomes impossible, and crucial activities like impact analysis, threat modeling, and developer guidance are only performed in an ad hoc manner.

In application development, keeping track of where software is deployed, which versions are running, and ensuring they're secure pose formidable challenges. A vast majority of teams still depend on manual processes, using spreadsheets and documentation to catalog their Apps and APIs. One recent report outlines that 74% of companies are still using traditional documentation and 68% relying on spreadsheets to catalog their apps and APIs. As deployment velocity increases, driven by AI-assisted coding and a push for greater developer autonomy, the complexity of accurately managing these deployments intensifies.

The Heeler team dedicated several months collaborating with research partners from various organizations to identify the most significant gaps in application security. A recurring theme emerged: the absence of context was a major issue, and obtaining this context was costly, often necessitating the involvement of key personnel from both security and development teams. Furthermore, this substantial time investment did not yield lasting value due to the dynamic nature of applications in cloud and agile environments, rendering these context investigations transient and expensive.