AIBRIEF
The Tel Aviv company says attackers now exploit flaws before fixes ship, and is using the round to extend its runtime blocking platform to AI agent applications.
Attackers are exploiting software flaws before patches reach production, and Oligo says the answer is to block attacks inside the running process rather than wait for a fix. The Tel Aviv-based company has raised a $60M round to extend its runtime-security platform to AI-agent applications, where autonomous code calls models and APIs on its own.
The window between a vulnerability disclosure and live exploitation has collapsed to "a negative amount of days," co-founder and CEO Nadav Czerninski told ISMG. In other words, attackers are using the bug before defenders finish the fix. That compression pulled the round together, led by Ballistic Ventures, Greenfield Partners, and Lightspeed, with Canon Capital, Red Dot Capital, and TLV Partners. Total raised now stands at $140M.
Oligo's product, built around "deep app inspection," watches cloud-native applications in production. Czerninski frames the company as the "only solution that can block attacks without taking down the application in runtime", competitive marketing rather than an independent market claim. The company's own breakthrough-year blog post and a self-published OneTrust case study make the same case from the customer side, but neither is third-party validation of efficacy.
What remains unknown is whether peer vendors and independent threat data, including CISA KEV and Mandiant M-Trends, confirm the "negative days" framing at scale, and whether in-process blocking holds up under the same kind of scrutiny that has humbled other "shift left" promises.