Xeol’s technology secures an organization’s end-of-life software
Xeol, the New York City-based cybersecurity company, announced that it raised $3.2 million in Seed funding led by Shield Capital with Y Combinator and 468 Capital also participating.
CIO INFLUENCE News: Astound Business Solutions and CoreSite Set Alliance to Deliver High-Capacity, Secure Connectivity
Cyber attacks against private enterprises’ software supply chains multiplied sevenfold over the past 3 years. Software supply chains must be secured just as industrial supply chains are secured from components to assembly to delivery. This is becoming even more pressing as open source software use and attack surfaces widen.
“Now is the right time to come out of stealth mode to tackle the software supply chain problem with foundational standards like Software Bill of Materials (SBOM) and Supply-chain Levels for Software Artifacts (SLSA) gaining traction,” stated Xeol CEO, ShiHan Wan. “These standards allow us to go much deeper and be much more accurate with supply chain risks like outdated software”
Xeol’s focus is to secure software throughout its lifecycle beginning at the code repository all the way through delivery to customers. The team starts by managing enterprises’ end-of-life software whose publishers no longer provide security patches. Attackers typically gain access to vulnerable systems by phishing, then exploiting unpatched software. PCI 4.0, a security standard for handling payment card data, will mandate that companies have a program to manage end-of-life software, highlighting the growing threat surface.
CIO INFLUENCE News: SCYTHE Latest Version 4.1 Introduces Enhanced Deployment and AI-Driven Productivity Boost
Since launching the company four months ago, Xeol has already signed its first Fortune 500 customer. For this customer, the team was able to identify more than 2,000 end-of-life software components and reduce the company’s exposure by 60%.
“Xeol is building the next generation of protection for the software we rely on every day to run our businesses. This software makes up a part of our national critical infrastructure and must be protected,” said Mike Brown, SHIELD partner and former Symantec CEO.
ShiHan is the co-founder and CEO of Xeol. He helped build 2 startups (Ada and Electric) from early stages to unicorn. ShiHan was previously Director of Platform Engineering at Electric responsible for application security, infrastructure security, SRE, and frontend and backend platforms. Before that ShiHan was the founding engineer at Ada building out the messaging and bot platform that handled 100M of messages a day.
CIO INFLUENCE News: Snowflake Advances its Trusted Data Foundation to Unite All Data and Extend Its Powerful Governance Capabilities
[To share your insights with us, please write to sghosh@martechseries.com]
