Scribe Security

About Scribe Security

Scribe Security, established in Israel in 2021, operates in the cybersecurity sector, focusing on securing the software supply chain. The company was founded by CEO Rubi Arbel, CTO Danny Nebenzahl, and Field CTO Guy Chernobrov, a team of veterans from the Israeli cyber and cryptography community. Arbel previously served as a senior commander in Unit 8200 and held a VP role at Argus Cyber Security. Both Nebenzahl and Chernobrov have extensive backgrounds within Matzov, the IDF's defensive cyber center. This collective experience in high-level cybersecurity and cryptography underpins the company's mission to address vulnerabilities within the software development lifecycle (SDLC).

The company's core offering is a SaaS platform that provides end-to-end protection for the software supply chain, from development to deployment. It caters to security-conscious organizations, including enterprises with compliance mandates, software vendors, and companies handling sensitive data in sectors like finance and telecom. Scribe Security's business model is based on delivering its platform to help clients build, distribute, and maintain code, while also verifying the integrity and authenticity of third-party components. The firm has secured approximately $11.6 million in funding through rounds led by investors such as Elron Ventures, Tal Ventures, and YYM Ventures.

Scribe Security's platform is engineered to integrate into a client's existing CI/CD pipelines with minimal friction. A key function is the generation of Software Bill of Materials (SBOMs) at multiple stages of a build, providing transparency into all software components. The platform automates the collection and cryptographic signing of security evidence, creating attestations that verify the integrity of the code and development processes. This allows organizations to enforce security policies as code, setting up automated guardrails and gates that can flag or block builds based on predefined risk criteria. The system also incorporates AI-driven analytics to help prioritize vulnerabilities and suggest remediation, moving beyond simple detection to active prevention of tampering and unauthorized modifications. By offering continuous assurance and verifiable proof of compliance with standards like SLSA and SSDF, Scribe helps clients build trust with their own customers and meet regulatory requirements.