D

depthfirst

Cybersecurity · San Francisco, United States · Founded 2024

Patcherai, operating as depthfirst, is an applied AI lab developing security solutions to address modern, AI-era threats. Founded in 2024 by CEO Qasim Mithani, Daniele Perito, and CTO Andrea Michi, the San Francisco-based company aims to secure software systems against automated and autonomous adversaries. The founding team combines experience from prominent tech organizations, including Google DeepMind, Databricks, Faire, and Amazon. Mithani previously built infrastructure at Databricks and AWS, Perito was a co-founder of Faire and led security at Cash App, and Michi was a Research Engineering Lead at Google DeepMind. The company's core product is the General Security Intelligence (GSI) platform, an AI-native security system that analyzes a company's code, infrastructure, and business logic to identify and remediate vulnerabilities. By building a comprehensive contextual understanding of a system, the platform is designed to find complex vulnerabilities, such as business logic flaws and backdoors, that traditional static analysis tools might miss. Patcherai claims its agents uncover eight times more true-positive vulnerabilities while reducing false positives by 85% compared to conventional tools. The platform provides developers with actionable, ready-to-merge fixes directly within their workflows, aiming to enhance the efficiency of security and engineering teams. Patcherai operates on a Software as a Service (SaaS) business model, offering its platform through subscriptions. In January 2026, the company announced it had raised $40 million in a Series A funding round led by Accel, with participation from investors including Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC, and SV Angel. This capital is intended to accelerate research and development, expand its go-to-market strategies, and grow its team in areas like applied research, engineering, and sales. Early customers include companies such as AngelList, Supabase, Moveworks, and Lovable. Keywords: AI-native security, General Security Intelligence, vulnerability detection, application security, code analysis, false positive reduction, automated remediation, software security, cybersecurity AI, deep context analysis, business logic flaws, infrastructure security, developer security tools, DevSecOps, continuous security, threat detection, AI-powered defense, code vulnerability management, software supply chain security, automated security