Veria Labs
Veria Labs provides an autonomous AI-driven penetration testing platform that continuously maps attack surfaces, proves real exploits, and drafts fixes. The system integrates into CI/CD pipelines, reviews every pull request for vulnerabilities, and posts findings directly to Slack and Linear. It has uncovered critical bugs in major systems, including an infinite XRP mint that put $94 billion at risk.
- Cybersecurity
- Developer Tools
- AI Agents
- Artificial Intelligence
- Software Only
Funding
Raised to date
$500KRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Founder details are not available yet.
Product
Problem
Traditional penetration testing is periodic, manual, and slow, leaving software vulnerabilities undiscovered between tests. Development teams shipping code rapidly often lack continuous security coverage, allowing critical flaws to reach production and expose systems to exploitation.
Solution
Veria Labs provides an autonomous pentesting platform that continuously maps an organization's entire attack surface, proves real exploits, and drafts fixes. AI agents integrate directly into the CI/CD pipeline, systematically analyzing application scope and logic on every pull request. When a change introduces a vulnerability, the system comments on the specific line of code with a suggested patch. The platform also matches dependencies against known advisories and checks whether the code actually calls the vulnerable part, reducing false positives. All findings are consolidated into a single severity-sorted feed, with new issues automatically posted to Slack and created as Linear tickets.
Target Audience
Primary customers are software development teams and security-conscious companies, including Ramp, PostHog, Infisical, Pydantic, Ripple, Phantom, Tempo, and Provable, that need continuous security testing without slowing down development.
Features
- Autonomous AI agents that map attack surfaces, chain lower-severity bugs into critical exploits, and build working proofs of concept
- CI/CD integration that reviews every pull request and comments on vulnerable lines with suggested fixes
- Dependency advisory matching that verifies whether code actually invokes vulnerable components
- Unified findings feed sorted by severity, with two-way synchronization between Slack, Linear, and the platform
- Proven capability to discover decade-old critical vulnerabilities in heavily audited systems, including the XRP Ledger and a16z's Jolt zkVM