Provides a runtime application protection platform that monitors and secures cloud-native applications by detecting and mitigating vulnerabilities in real time, including CVE-less threats. It reduces vulnerability prioritization by 93%, prevents exploits without code changes through runtime patching, and offers immediate alerts and forensics for abnormal library behavior, ensuring continuous protection across all major programming languages and cloud environments.
Funding
$6.6M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Cloud-native applications are vulnerable to exploits targeting open-source libraries, including zero-day and CVE-less threats that traditional security measures often miss. Existing solutions lack visibility into application behavior at runtime, leading to delayed detection and reactive responses after exploitation.
Solution
Raven.io provides a runtime application protection platform that monitors and secures cloud-native applications by observing library-level behavior at runtime. The platform prioritizes vulnerabilities based on runtime reachability, reducing false positives and focusing on actual risks. It prevents exploits through runtime patching without requiring code changes or engineering efforts. Raven monitors all libraries in runtime, triggering immediate alerts and application-level forensics for any deviation from normal activity, including CVE-less threats.
Target Audience
The primary audience includes security teams and DevOps engineers responsible for securing cloud-native applications written in Java, Python, NodeJS, and Go, particularly those using Kubernetes, containers, or compute instances.
Features
- Runtime Vulnerability Management: De-prioritizes 93% of vulnerabilities by determining if the vulnerable library is actually being used.
- Runtime Patching: Implements exploit prevention policies for OSS library vulnerabilities, minimizing exposure without code changes.
- Runtime Anomaly Detection and Response (ADR): Monitors all libraries in runtime and triggers alerts for abnormal behavior, even without a CVE.
- Application-level forensics: Provides immediate forensics to understand the context of detected anomalies.
- Supports major programming languages: Java, Python, NodeJS, and Go.
- Easy deployment: 5-minute setup with cloud-based or on-prem solutions, without intrusive instrumentation.
- Minimal overhead: Engineered for continuous operation with minimal CPU utilization in production environments.