Backslash Security

Backslash Security, founded in 2022 by CEO Shahar Man and CTO Yossi Pik, is a cybersecurity company specializing in securing AI-native software development. Man, a founding team member at Aqua Security, and Pik, who previously sold his startup Farmigo, met while working at SAP and later established Backslash to address emerging risks in modern development.

The company has secured a total of $27 million in funding, including an $8 million seed round followed by a $19 million Series A in February 2026. The Series A was led by KOMPAS VC, with participation from Maniv, Artofin Venture Capital, and existing investors StageOne Ventures and First Rays Capital. This capital is being used to expand R&D, enhance platform capabilities, and scale its market presence in the United States and Europe. The company also appointed Ron Zoran, former Chief Revenue Officer at CyberArk, to its board of directors.

Backslash addresses the security challenges posed by the shift to "vibe coding," where AI agents and tools like GitHub Copilot and Cursor autonomously generate and modify code. This creates a new attack surface that traditional security solutions may not adequately cover. The company's platform provides a holistic, end-to-end solution for what it calls the "vibe coding security" market, giving security teams visibility and governance over how software is created, modified, and deployed in AI-driven workflows. It protects the entire AI development stack, including Integrated Development Environments (IDEs), AI agents, Model Context Protocol (MCP) servers, and Large Language Models (LLMs). By combining Software Composition Analysis (SCA), Static Application Security Testing (SAST), and other security controls, the platform helps enterprises apply consistent guardrails and respond to malicious behavior without slowing down development.

A core feature is the Backslash App Graph, a technology that creates a digital twin of an application to visualize its structure, dependencies, and execution paths. This graph-based approach enables advanced analysis beyond traditional static scanning by identifying "reachable" and "triggerable" vulnerabilities—those that are actively in use and exploitable. This allows security teams to prioritize genuine risks, reduce false positives, and focus on actionable threats. The platform also helps detect "phantom packages," which are hidden dependencies that could introduce vulnerabilities. Backslash serves enterprise clients, including Fortune 100 companies, helping them adopt AI-native development practices while maintaining security and compliance.

Keywords: application security, AppSec, AI-native development, vibe coding, cybersecurity, cloud-native security, code risk prioritization, threat modeling, AI coding agents, Model Context Protocol security, Static Application Security Testing (SAST), Software Composition Analysis (SCA), vulnerability management, reachability analysis, triggerability, digital twin, App Graph, DevSecOps, software supply chain security