Veria Labs GTM brain

Veria Labs sells continuous AI-assisted application security testing and remediation workflows to software security and engineering teams.

category

Continuous AI penetration testing

market profile

  • text: Security teams with frequent releases face a gap between periodic penetration tests and continuously changing applications.
  • text: The product joins vulnerability findings to developer remediation and review workflows.

personas

  • title: Head of Application Security
    pains:
    • Annual point-in-time tests quickly go stale
    • Finding validation and triage compete for scarce security time
  • title: VP Engineering or engineering manager
    pains:
    • Developers need actionable findings in existing workflows
    • Remediation can stall between security reports and code changes
  • title: Security leader at a regulated software company
    pains:
    • Must demonstrate ongoing security due diligence
    • Small teams cannot manually review every release

icp

  • text: Software-first fintech, healthcare and crypto companies that ship frequently and face meaningful security exposure; company size should be qualified in discovery.
  • text: Engineering organizations with source repositories and established vulnerability remediation workflows; named customers include Ramp and PostHog.

message pillars

  • text: Continuous security testing targets gaps between periodic reviews.
  • text: Make findings usable within existing engineering systems.
  • text: Help developers move from discovery to reviewed remediation.

objections

  • objection: Will this replace our mandated pentest?
    response: Clarify the relevant audit requirements and use continuous testing to complement any independently required assessment.
  • objection: Will the team be overwhelmed by noisy findings?
    response: Pilot on an agreed scope and compare validated findings, false positives and developer time with the existing workflow.

competitors

  • name: Semgrep
    why: Application security scanning alternative explicitly discussed in Veria's launch.
  • name: Snyk
    why: Developer security scanning alternative explicitly discussed in Veria's launch.
  • name: Synack
    why: Offers AI-assisted penetration testing alongside human researchers.
  • name: Casco
    why: Offers continuous AI-native security testing.

influencers

  • name: Stephen Xu
    url: https://www.linkedin.com/posts/stuxf_we-spun-out-of-the-1-hacking-team-in-the-activity-7426710577949077504-P1YB
    why: Veria co-founder announcing the seed round and security mission.

keywords

  • continuous penetration testing
  • AI application security testing
  • automated pentesting software
  • security findings developer workflow
  • AI vulnerability remediation
  • continuous appsec validation

voice

  • Direct and security practitioner oriented
  • Confident and results focused

signals

  • text: An engineering team deploys frequently but relies on infrequent point-in-time pentests.
  • text: A security team is looking to connect prioritized findings to Slack, Linear and pull requests.

stack

  • Slack
  • Linear
  • GitHub

pricing

model: unknown

motion

sales_led

channels

  • LinkedIn
  • security conferences
  • research content
  • YC directory

confidence

high

Founders

  • name: Cayden Liao
    title: Founder
    role: Founder
    bio: I've previously done work in the Web3 security space writing fuzzers for crypto and zero knowledge protocols. NCAA varsity swimmer and part of the #1 CTF (competitive hacking) team in the US. Prevented the largest hack in crypto history $94B.
  • name: Jayden Sarveshkumar
    title: Founder
    role: Founder
    bio: working on the future of security @ Veria Labs. web hacking @ .;,;. (#1 US competitive hacking team).
  • name: Stephen Xu
    title: Founder
    role: Founder
    bio: CEO & Co-Founder @ Veria Labs Previously doing Offensive Security @ TikTok, and play on the #1 CTF (competitive hacking) team in the US. Also used to do computational physics research at some point.

Back to YC companies