Who leads security at Endor Labs

What the company sells

Endor Labs sells AURI, a security intelligence layer for AI coding agents. AURI plugs into the coding agent harness to block malicious packages before install, verify code is secure, fix vulnerabilities, and flag secrets before they are leaked. AURI inventories every coding agent, model, MCP server, and skill. AURI learns architecture from context files such as AGENTS.md and CLAUDE.md, design docs, and custom prompts. Endor Labs replaces disconnected scanners, triage queues, and remediation handoffs with one continuously managed workflow.

Endor Labs describes a problem in which coding agents require privileged access but can expose sensitive data, credentials, or run unsafe commands. Endor Labs states that coding agents are already writing code, installing dependencies, and shipping changes across an organization, and that most security teams cannot yet answer for any of it. Endor Labs also states that every model, skill, MCP server, and tool call extends the supply chain.

Endor Labs anchors every finding to its code context graph, a continuously updated model of application behavior across code, dependencies, secrets, and containers. AURI can orchestrate its own agents, with their own sub-agents, that navigate the code context graph to detect, triage, validate, and remediate vulnerabilities. AURI by Endor Labs combines LLM-based reasoning with program analysis trained on ground-truth vulnerability data. AURI maps how data flows through source code, through direct and transitive dependencies, and into container base images. AURI security agents are catching emerging malware campaigns across npm, PyPI, Maven, and other package ecosystems in real time. AURI is the engine behind the AI SAST of Endor Labs.

Developer, architect, and security engineer agents review every PR for architectural risk. Pre-built workflows triage findings and remediate dependencies using codebase context from AURI. The pre-built workflows run on the customer's infrastructure, read-only by default, with every change approval-gated. Every agent action is checked against policy before it runs, with the outcomes allow, block, or ask a human, and every action is recorded. AI Coding Agent Governance shows which models, MCP servers, and tools are active in a development environment and whether their behavior matches policies.

Only vulnerabilities that application code can reach are added to the backlog. Endor Labs analyzes call graphs across first-party code, direct and transitive dependencies, and container layers to determine whether an application can actually invoke a vulnerable function. Container Reachability by Endor Labs extends function-level reachability through the runtime and OS layers, classifying every package as Reachable, Potentially Reachable, or Unreachable, application by application. Reachability from code to image needs nothing to be installed in the cluster. Upgrade impact analysis shows which breaking changes a patch will trigger before anyone touches a version number. Endor Patches fix vulnerabilities in hard-to-upgrade libraries without forcing a major version bump. SBOM generation, artifact signing, and CI/CD posture management are part of coverage from dependency selection through delivery.

Package Firewall was released in May to help organizations stop software supply chain attacks by preventing installs of malicious packages on developer laptops or in CI/CD pipelines. Package Firewall scans newly published packages across npm, PyPI, and other ecosystems and flags emerging malware campaigns in under 10 minutes. Package Firewall blocks both developers and coding agents from pulling malicious packages into a local machine or CI runner. Package Firewall enforces a cooldown policy so that package versions need to be a sufficient age to be installed. Package Firewall cross-checks package versions against a malware database in case a malicious version is available on the registry beyond the cooldown period. Malicious packages are blocked at install, with one control point for every dependency entering the organization from an agent or a developer.

Endor Labs launched AURI alongside a partnership with OpenHands. AURI integrates through a plugin that bundles dozens of security skills into a full-stack security review spanning code, secrets, dependencies, and container images. AURI is available to everyone, and its Skills plugin, MCP, and CLI are free for developers. Developers can use these tools to detect vulnerabilities and exposed secrets in code and open source dependencies, block malware attacks, and fix security bugs.^{[1][2][3][4][5][6][7][8]}

Categories

• Software composition analysis (primary category)
• Static application security testing
• Secrets detection
• Software supply chain security
• Compare Endor Labs with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Privately held^[9]

CISO on record

Not yet on our record. Send a verified source

Website

endorlabs.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• AURI^[3][4][5]

  A security intelligence layer for AI coding agents.

  AURI plugs into the coding agent harness to block malicious packages before install, verify code is secure, fix vulnerabilities, and flag secrets before they are leaked. AURI inventories every coding agent, model, MCP server, and skill.

• AI Coding Agent Governance^[5]

  Shows which models, MCP servers, and tools are active in a development environment.

  AI Coding Agent Governance shows which models, MCP servers, and tools are active in a development environment and whether their behavior matches policies. Every agent action is checked against policy before it runs, with the outcomes allow, block, or ask a human. Every action is recorded.

• Container Reachability^[6]

  Extends function-level reachability through the runtime and OS layers.

  Container Reachability by Endor Labs extends function-level reachability through the runtime and OS layers. Container Reachability classifies every package as Reachable, Potentially Reachable, or Unreachable, application by application. Reachability from code to image needs nothing to be installed in the cluster.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Endor Labs's categories, then alphabetical. A list from the record, never a ranking.

• On software composition analysis, Endor Labs competes with Snyk, Black Duck, Mend.io, Sonatype, GitLab, JFrog, Arnica, OX Security, Phoenix Security, Semgrep and 10 more.

• On static application security testing, Endor Labs competes with GitLab, GitHub Advanced Security, Semgrep, Veracode, Checkmarx, Kiuwan, AISLE, OpenText, JFrog, Snyk and 13 more.

• On secrets detection, Endor Labs competes with GitGuardian, Truffle Security, GitLab, JFrog, Snyk, GitHub Advanced Security, Semgrep, Legit Security, Clutch Security and HashiCorp.

• On software supply chain security, Endor Labs competes with JFrog, Anchore, RapidFort, Socket, Archipelo, Chainguard, Minimus, Red Hat, GitLab, Snyk and 15 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.5 out of 5^[9]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]endorlabs.comEndor Labs · endorlabs.com · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
2. [2]Endor labs drives 225 revenue growth pioneers the future of secure sdlcEndor Labs · endorlabs.com · published September 16, 2025 · Tier A: the company, a regulator or a filing
3. [3]Introducing AURI: Security Intelligence for AI Coding Agents and Developers | Endor LabsEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
4. [4]Endor Labs | Agentic Application Security PlatformEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Endor Labs Recognized by Gartner® in the 2026 Hype Cycle™ for Application Security | Endor LabsEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Container Security & Reachability | Endor LabsEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Customer Zero: Implementing Package Firewall at Endor Labs | Endor LabsEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Customers | Endor LabsEndor Labs · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Endor Labs Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Last verified November 6, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 6, 2026, expanded November 10, 2026 from the references above.

Work for Endor Labs? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.