Site icon The Invincible India

Startup Deep Dive : ArmorCode — it unifies hundreds of scanners and sells none of its own

The Invincible India

ArmorCode has raised $81 million (about ₹778 crore) across four rounds, integrates more than 285 different security tools, and has processed billions of security findings for Fortune 500 buyers — yet it has never shipped a scanner of its own. That is the contradiction the company was built on. Before writing a line of product, founder Nikhil Gupta says he interviewed more than 200 security leaders, and the message came back almost unanimously: the industry did not need one more scanner. It needed something to make sense of the ones it already had.

So ArmorCode sells the opposite of a scanner. It is a vendor-neutral platform that ingests the output of everyone else’s tools — code scanners, cloud scanners, infrastructure scanners — correlates the noise, and surfaces the handful of issues worth fixing first. The bet has attracted backers from HighlandX to Ballistic Ventures, a board seat for a former Google Cloud and Goldman Sachs security chief, and an India engineering base registered in Bengaluru. What it has not produced, notably, is a single disclosed valuation or a line of audited group revenue. This piece walks through what ArmorCode actually is, where the money came from, how it earns, and where the risks sit — using only figures traceable to sources opened for this article.

Quick facts

Company ArmorCode Inc. (US parent, Palo Alto, California); India arm ArmorCode India Private Limited, CIN U72900KA2020FTC141372
Founded July 2020 (US); India entity incorporated 24 November 2020, Registrar of Companies, Bangalore (per instafinancials / ZaubaCorp RoC records)
Founders Nikhil Gupta (co-founder and CEO); Anant Misra (co-founder and CTO)
Business Application Security Posture Management (ASPM) and unified exposure management — a subscription SaaS platform
Latest funding $16 million strategic round, announced 3 March 2026 (total $81 million / about ₹778 crore across all rounds)
Latest revenue Not publicly disclosed (US private company); third-party estimator GetLatka pegs about $17.4M ARR for 2023 (self-described estimate)
Listed Private — no IPO announced as of September 2026
Valuation Not publicly disclosed in any source opened for this article
Key backers / CEO Cheyenne Ventures, HighlandX / Highland Capital, Ballistic Ventures, Cervin Ventures, Sierra Ventures, NGP Capital; CEO Nikhil Gupta

What ArmorCode does

ArmorCode sells software to the people responsible for keeping an organisation’s applications and infrastructure secure. The problem it addresses is fragmentation: a large enterprise typically runs dozens of separate security scanners, each producing its own list of alerts, with no shared view of what actually matters. ArmorCode’s platform sits above all of them.

The origin: 200 interviews and one answer

ArmorCode was founded in July 2020, at the height of the pandemic, by Nikhil Gupta and Anant Misra. Gupta was not a first-time founder. He had previously been co-founder and CEO of Avid Secure, a cloud security company acquired by Sophos in 2019, and describes more than 25 years in technology across several security ventures. Misra, his co-founder and chief technology officer, is a long-time software engineering leader. The pairing matters: one had sold a security company, the other could build the platform.

The founding insight came from listening rather than coding. Gupta has recounted interviewing more than 200 security leaders before settling on the product. Two facts kept surfacing. First, organisations were shipping software constantly — sometimes many times a day — and leaning heavily on open-source components, so the attack surface was expanding faster than any team could track. Second, the tools meant to secure all of this were multiplying and fragmenting; every scanner added more alerts but no more clarity. The leaders Gupta spoke to did not ask for a better scanner. They asked for something that could sit on top of every scanner they already owned and tell them what to fix first. That answer became ArmorCode’s entire reason to exist, and it is why the company’s identity is defined as much by what it refuses to build as by what it ships.

The struggle years: an over-tooled market

ArmorCode has no public near-death, founder ouster or fire-sale in its record — it has been a steadily funded company since 2022. Its genuine difficulty was different and, in a crowded market, no less real: it had to convince buyers that a company selling no scanner of its own deserved a line in an already bloated security budget.

Consider the environment it entered. By its own account the platform would eventually plug into more than 285 tools; that number is also a measure of how saturated the market already was when ArmorCode launched. A security buyer in 2020 and 2021 had reason to be sceptical of yet another dashboard promising to unify the chaos. The company also had to define a category as it went. It first described itself around “AppSecOps,” then rode the rise of the “ASPM” label as analysts formalised it, and by early 2026 was repositioning again toward “exposure management” and “AI Exposure Management.” Each shift is a bet that the market will follow the new framing — and a risk if it does not. The struggle, in other words, was not survival but standing out: earning trust as the neutral referee in a room full of vendors, and repeatedly re-explaining what problem it solved as the language of the industry moved underneath it.

The turning point: the Series B

The clearest inflection was the $40 million Series B, announced on 4 December 2023 and led by HighlandX, with NGP Capital, Ballistic Ventures, Sierra Ventures and Cervin Ventures joining. It roughly doubled the company’s lifetime capital and put a marquee growth investor behind the thesis.

The numbers on either side of that round tell the story. Before it, ArmorCode had raised about $25 million and was still, in venture terms, an early-stage company proving a category. With the Series B, total capital reached $65 million; the company reported annual recurring revenue growth of more than 400% year-over-year, said roughly a quarter of its customer base was Fortune 500, and pointed to over 4 billion findings processed across 200-plus integrated tools. It also signalled expansion — more than 20% headcount growth and a push into Europe. In one round the company moved from proving it could sell a novel idea to scaling a business that large enterprises were already paying for. The strategic $16 million round in March 2026, alongside a board seat for former Google Cloud and Goldman Sachs security chief Phil Venables, was the confirmation; the Series B was the pivot.

The money behind it

ArmorCode has raised $81 million (about ₹778 crore at $1 ≈ ₹96.0) across four disclosed rounds, without ever publicly stating a valuation. The rounds, in order:

What each backer changed, in brief:

No valuation figure appears in any source opened for this article. Aggregators such as PitchBook and Tracxn maintain profile pages, but their valuation and revenue estimates sit behind paywalls and were not accessible here, so no valuation is asserted.

How it makes money

ArmorCode is a subscription software business. The revenue mechanics, drawn from The Brand Hopper’s profile and the company’s own descriptions:

The part people get wrong: because ArmorCode is vendor-neutral, some assume it competes with the scanners it integrates. It does not. Its margin comes from being the layer that makes those tools collectively useful — the more scanners a customer runs, the more valuable a neutral aggregator becomes. Its moat is breadth of integration (285-plus tools) and the workflow lock-in that follows once a security team runs its remediation process through the platform.

The numbers

ArmorCode is a privately held US company and does not file public group financials, so there is no audited three-year revenue-and-profit series to reproduce. Rather than invent one, the table below sets out what is actually disclosed or independently estimated, with each figure’s source and period. Group revenue and profit/loss are marked “not disclosed” where no opened source provides them.

Period Disclosed / estimated traction Group revenue & P&L
2022 ~94 employees (GetLatka estimate); seed ($11M) and Series A ($14M) closed; total funding ~$25M Not disclosed
2023 ~109 employees (GetLatka estimate); ~$17.4M ARR (GetLatka estimate); ARR up 400%+ YoY and ~25% of customers Fortune 500 (company-stated, Dec 2023) Not disclosed
2024 “Billions and billions” of findings across 240+ scanners; “dozens of Fortune 500” customers (company-stated, July 2024) Not disclosed
2026 ARR “doubled year over year”; ~80% of Fortune 500/1000 customers driving AI expansion; total funding $81M after $16M strategic round (company-stated, March 2026) Not disclosed

Two cautions on these figures. The revenue and headcount numbers for 2022–2023 are GetLatka estimates, which that site describes as estimates rather than filed accounts; GetLatka also carries an apparent error stating ArmorCode is “no longer independent,” which the March 2026 independent funding round contradicts, so that claim is disregarded. The growth rates — “400%+ YoY” (December 2023) and “doubled year over year” (March 2026) — are company-stated in funding announcements and are not audited. A reported ₹12.26 crore FY23 figure for the India subsidiary appeared only in a search snippet from a page that could not be opened, and would in any case reflect the India arm’s cost-plus service billing rather than group revenue, so it is excluded here.

Where the money comes from

ArmorCode does not publish a formal segment or geography split, but several structural splits are visible from disclosed facts:

The surprise sits in that last point. ArmorCode is marketed as a Palo Alto security company, but its founder has publicly credited the India team with a large share of the company’s growth, and the India entity is a subsidiary of the US parent formed within months of founding. The engineering centre of gravity for a fast-scaling American security vendor is, in practice, substantially Indian — a pattern common to the sector but rarely front-and-centre in the marketing.

The risks

The takeaway

ArmorCode’s most transferable lesson is that a durable product can be defined by what you refuse to build. In a market flooded with scanners, the founders resisted the obvious move — shipping a marginally better scanner — and instead sold the one thing 200 interviews said was missing: a neutral layer that made every existing tool worth more. That discipline is harder than it sounds, because the temptation in a hot category is to add features, not to stay narrow. The pattern for founders is to find the job the incumbents are all failing at collectively, rather than the job any one of them does slightly imperfectly. ArmorCode’s second lesson is quieter and unfinished: raising $81 million while disclosing no valuation and no group revenue can carry a company a long way on trust and traction, but the same opacity that protects a private company on the way up becomes the question every buyer and future investor eventually asks — what, exactly, are the numbers.

Frequently asked questions

Who founded ArmorCode and when?

ArmorCode was founded in July 2020 by Nikhil Gupta, who is co-founder and CEO, and Anant Misra, co-founder and CTO. Gupta had previously co-founded and led Avid Secure, acquired by Sophos in 2019. Mark Lambert, sometimes associated with the company, is its Chief Product Officer rather than a founder.

How much has ArmorCode raised, and from whom?

ArmorCode has raised $81 million (about ₹778 crore) across a roughly $11 million seed (January 2022, Cervin-led), a $14 million Series A (November 2022, Ballistic-led), a $40 million Series B (December 2023, HighlandX-led) and a $16 million strategic round (March 2026, Cheyenne Ventures-led). Backers include Cervin, Ballistic, HighlandX/Highland Capital, Sierra Ventures, NGP Capital and Tau Ventures.

What is ArmorCode’s valuation?

ArmorCode has not publicly disclosed a valuation in any funding announcement, and no valuation figure was available in the sources opened for this article. Estimates on paywalled aggregator sites were not accessible, so no valuation is asserted here.

Is ArmorCode’s team based in India?

Yes, substantially. Its engineering arm, ArmorCode India Private Limited, is registered in Bengaluru and was incorporated in late 2020; Praneet Khare leads engineering in India. Company listings also cite a Gurgaon presence. The US parent is headquartered in Palo Alto, California. Note that public reports place the India base in Bengaluru rather than Pune.

What does ArmorCode actually sell?

It sells a subscription platform for Application Security Posture Management and unified exposure management. Rather than scanning code or cloud itself, it ingests the output of more than 285 other security tools, correlates the findings, and prioritises the most critical risks so security teams can fix what matters first.

Sources

Figures are as of September 2026. Currency converted at $1 ≈ ₹96.0 as of 18 September 2026 (Trading Economics).

Found an error? Write to us and we’ll correct it in the open, dated, on the piece.

Exit mobile version