Boost Security Raises $4 Million for SDLC Defense Platform

Software development life cycle (SDLC) defense provider Boost Security has announced raising $4 million in funding, and two acquisitions meant to expand its platform’s capabilities.

Bringing the total raised by the startup to $16 million, the new investment came from White Star Capital, Amiral Ventures, Accelia Capital, and Sorensen Capital.

Founded in 2022, Montreal, Canada-based Boost Security has built an SDLC defense platform that aims to secure developer endpoints and the software supply chain, while leveraging AI to find and resolve software vulnerabilities throughout the development lifecycle.

The AI-native solution can automatically address code vulnerabilities, secure AI tools, and block supply chain threats before they are integrated into code.

In addition to the fresh funding, the company announced the acquisition of SecureIQx and Korbit.ai to add advanced reachability analysis and SAST capabilities and code review to its solution.

An MIT-founded startup, SecureIQx has built a Software Composition Analysis (SCA) reachability engine that analyzes code across over a dozen programming languages.

Advertisement. Scroll to continue reading.

Korbit.ai is a Montreal-based startup providing a code-review and engineering-insights platform that identifies security, performance, and code flaws.

“By some estimates, 15 times more code was produced in 2025 than in 2024, and most of it wasn’t written or reviewed by humans. At the same time, supply chain attacks are becoming more frequent and more sophisticated. With these acquisitions, we are bringing deeper agentic capabilities into the Boost Security platform to meet that reality,” said Boost Security founder and CEO Zaid Al Hamami.

Originally published by SecurityWeek

Full Analysis