Ossprey Security

About Ossprey Security

Ossprey Security is a cybersecurity company that focuses on detecting malicious code in open source dependencies. It sells a security tool designed for engineering-led companies that rely on open source and need to maintain speed. The tool identifies and stops supply chain threats before they cause harm, operating quietly in the background without disrupting developer workflows. The company's approach differs from traditional security tools that check packages against known threats and vulnerabilities. Ossprey uses a combination of static analysis and behavioural techniques to understand what code actually does, looking for malicious intent rather than just matching patterns. It integrates into existing development environments, including GitHub and AI agents, and provides a dashboard with severity scoring based on malicious intent. Alerts are designed to be actionable, with context to help teams decide what matters for their environment.

Products

• OsspreyA security tool that detects and prevents malicious code and supply chain threats in open source dependencies.

Ownership and deals

1. July 2026Raised $2.6m in a pre-seed roundInvestor Episode 1Report on the Ossprey Security funding round of July 2026 (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

Other software supply chain security vendors

• Trail of Bits
• PCA Cyber Security
• AISLE
• Aqua Security
• Black Duck
• Checkmarx

See all software supply chain security vendors