Firestreak Ventures

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

Bundled managed open source AI infrastructure

Twenty builds the modern salesforce, powered by the open source community.

The Open-Source AIOps Platform. For those who deal with alerts in a complex environment, leverage AI for your IT Operations.

Vidoc Security Lab is a developer of an artificial intelligence security engineer platform designed to address the challenges posed by AI-generated code. The company focuses on automating routine security operations, providing a comprehensive suite of services that includes monitoring and managing attack surfaces, conducting custom security checks, and generating detailed security reports. This platform enables businesses to streamline their security review processes and reinforces their commitment to maintaining secure practices in an evolving digital landscape. By leveraging advanced AI technologies, Vidoc Security Lab aims to enhance the effectiveness of cybersecurity efforts in response to emerging threats.

Qodo is a platform that enhances developer productivity by offering features such as automatic code generation from natural language prompts, real-time intelligent code suggestions, and integrated testing tools. It analyzes code, docstrings, and comments to generate meaningful unit tests, helping developers build faster with fewer bugs.

Odigos specializes in developing open-source tracing technology based on eBPF (extended Berkeley Packet Filter), empowering developers to gain insights into their applications' performance without extensive engineering effort. The company offers distributed metrics and logs for every application, enhancing observability.

Langbase is a serverless platform empowering developers to build, collaborate, and deploy AI agents. It offers hyper-personalized memory (RAG) for AI agents to interact with data, processing billions of tokens daily. Langbase's mission is to democratize AI accessibility, making it available to all developers regardless of their expertise in AI/ML.

Stability AI is an innovative startup focused on developing open-source AI tools for various media types such as images, videos, 3D objects, and audio. They specialize in creating generative models driven by collective intelligence, with applications tailored to both individual creators and enterprise-level clients.

Trustwise is an AI safety startup on a mission to democratize AI that is safe, observable, and compliant.

Conjecture is an AI safety startup based in London, founded by Connor Leahy, Gabriel Alfour, and Sid Black. The company focuses on applied and scalable AI alignment research, aiming to enhance the understanding and control of current AI models. Leveraging their expertise in developing large language models, Conjecture is also creating a range of products designed to help businesses optimize various aspects of their workflows. Through its research and product offerings, Conjecture seeks to address challenges associated with AI systems and contribute to safer and more effective AI deployment.

Skyflow, Inc. specializes in providing a privacy-focused application program interface solution that enables businesses to securely store and manage sensitive user information, including personally identifiable information (PII), payment card information (PCI), and protected health information (PHI). Founded in 2017 and based in Los Altos, California, Skyflow offers a cloud-native data privacy vault that employs advanced encryption and tokenization techniques to protect sensitive data across various applications. Its platform simplifies compliance with stringent regulations such as HIPAA, GDPR, and CCPA, ensuring that businesses can effectively govern and utilize their data while maintaining privacy standards. Formerly known as Prekari Labs, Inc., the company rebranded to Skyflow in December 2019.

Groq is a company that develops AI inference technology and accelerators, designing Tensor Streaming Processor architecture that delivers high performance per watt for AI, machine learning, and deep learning workloads to enable scalable, energy-efficient inference for cloud and on-prem deployments, while providing deterministic performance that yields predictable compute times for any given workload and simplifies qualification and deployment. Founded in 2016 and based in Mountain View, California, Groq focuses on high-throughput, low-latency processors that support large-scale AI deployments.

Skyflow, Inc. specializes in providing a privacy-focused application program interface solution that enables businesses to securely store and manage sensitive user information, including personally identifiable information (PII), payment card information (PCI), and protected health information (PHI). Founded in 2017 and based in Los Altos, California, Skyflow offers a cloud-native data privacy vault that employs advanced encryption and tokenization techniques to protect sensitive data across various applications. Its platform simplifies compliance with stringent regulations such as HIPAA, GDPR, and CCPA, ensuring that businesses can effectively govern and utilize their data while maintaining privacy standards. Formerly known as Prekari Labs, Inc., the company rebranded to Skyflow in December 2019.

Superlinked is a developer of a real-time personalized search and recommendation platform aimed at enhancing information retrieval. The company specializes in transforming complex data into vector embeddings, which facilitates improved search functionalities and recommendations for users. Operating within the emerging vector operations segment of the broader machine learning operations market, Superlinked provides software developers with tools to build and enhance their products through advanced data processing techniques.

Databricks offers a unified data analytics platform that simplifies data integration, enables real-time experimentation, and facilitates robust deployment of production applications for developers and data scientists. Serving diverse industries worldwide, Databricks' platform supports collaborative data science, machine learning workflows, and integrates with various cloud services.

Athena is a business consultancy that provides document management, networking, administration management, and recruitment solutions.

Permit.io is a developer-focused company that provides a full-stack authorization as a service platform tailored for software developers and product teams. Its platform simplifies the integration of permissions and access control into applications, allowing clients to build and deploy software efficiently using a straightforward SDK and sidecar. By offering an open policy administration layer, Permit.io streamlines authorization tasks, helping businesses save time and reduce the need for frequent modifications to permissions and access controls.

Founded in 2016, Hugging Face is a New York-based company that aims to democratize good machine learning. It provides an open-source platform for collaborating on machine-learning projects, including models, datasets, and applications.

Charm develops an open-source coding platform, with tools to improve the visual appearance and store data, to read command markdowns while coding. It currently sells three products, including Glow, an open-source terminal-based markdown reader that allows developers to view documentation such as readme files directly from the command line. It also renders markdown to make the text easier to read and allows users to create a private, encrypted documentation library. Toby Padilla and Christian Rocha founded Charm in 2019.

PerfectScale empowers teams to optimize their Kubernetes ecosystems continuously. Its AI-driven platform provides configuration recommendations, enhancing resource efficiency, stability, and enabling data-driven decision-making.

Building a better Salesforce, powered by the Open Source community.

BentoML is an AI platform that enables the development, deployment, and orchestration of scalable machine learning and AI systems. It provides an inference platform that supports on-premises and cloud deployments, allowing teams to ship models to production as prediction services and to iterate quickly while reducing cost and operational risk. The platform supports serving a wide range of models, including large language models and embeddings, and accommodates complex pipelines. It is used across industries such as finance, healthcare, and manufacturing to improve efficiency and cost effectiveness.

Filigran is a European company specializing in cyber technology. It provides advanced open-source software for cybersecurity and crisis management teams worldwide. The company's core offerings include cyber threat intelligence, adversary simulation, and crisis management solutions.

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

OpenAI is an AI research and deployment company that develops general-purpose artificial intelligence technologies and applies them to real-world problems. It conducts machine learning research and builds systems such as large-scale language models, multimodal input handling, and code generation to support automation, data analysis, content generation, and interactive problem solving across industries including technology, healthcare, and education. The organization offers platforms and APIs that enable enterprises, developers, and researchers to build, test, and deploy intelligent systems, with plug-in extensibility and ongoing model updates to improve performance and safety.

Oblivious is a technology company focused on privacy-preserving data analytics and secure application deployment. It provides a platform that enables organizations to deploy servers to enclaves and securely connect to them via a native client direct-proxy. End-to-end payload encryption and attestation through a secure handshake verify the enclave and authorize users, helping to protect data as it moves and is processed. The software integrates with existing systems to support privacy-preserving analytics and secure application processing, allowing businesses to extract value from sensitive data without compromising privacy or compliance. By combining enclave-based computing with seamless integration, Oblivious aims to improve data utility while maintaining strong privacy protections and governance across enterprise workloads.

Lago is a no-code platform designed for growth teams to manage customer data effectively without relying on engineering resources. It provides an open-source solution for metering and usage-based billing, featuring a scalable and modular architecture suitable for both self-hosted and cloud environments. The platform automates various billing processes, accommodating a range of subscription models, usage calculations, billing cycles, and currencies. This enables businesses to efficiently extract, transform, and act on their data, streamlining operations and enhancing overall productivity.

ThreatKey is a cybersecurity company that provides a platform designed to enhance the visibility and control of security solutions for cloud infrastructure and SaaS applications. The platform offers tools that monitor for potential threats and manage misconfigurations, effectively reducing digital security risks. By automatically identifying and remediating security issues, ThreatKey enables businesses to focus on their core activities and prioritize value-adding work, thereby fostering a more secure digital environment.

Tana is a software development company founded in 2020 and based in Oslo, Norway. The company has created an online work platform aimed at transforming the way individuals, teams, and computers collaborate. This innovative platform allows users to convert raw notes into actionable tasks, bugs, and follow-ups, streamlining information retrieval. By presenting data in a graphical format, Tana helps clients eliminate the need for traditional files and folders, enabling more efficient access to critical information for decision-making and follow-ups.

MotherDuck is a company that specializes in data infrastructure and analytics, providing a serverless platform designed for both small and large datasets. By integrating the efficiency of DuckDB with cloud capabilities, MotherDuck delivers a user-friendly analytics solution that supports hybrid execution. Its platform utilizes an embedded database to facilitate the analysis of big data, enabling businesses to prototype with both local and remote data seamlessly. This integrated environment allows organizations to effectively analyze their data, enhancing collaboration and maximizing profitability.

MotherDuck is a company that specializes in data infrastructure and analytics, providing a serverless platform designed for both small and large datasets. By integrating the efficiency of DuckDB with cloud capabilities, MotherDuck delivers a user-friendly analytics solution that supports hybrid execution. Its platform utilizes an embedded database to facilitate the analysis of big data, enabling businesses to prototype with both local and remote data seamlessly. This integrated environment allows organizations to effectively analyze their data, enhancing collaboration and maximizing profitability.

Sprkl is a technology company based in Tel Aviv, Israel, that specializes in providing a personal observability platform for software developers. Founded in 2021, Sprkl automatically instruments every code change and analyzes its execution, offering developers actionable insights regarding how these changes interact with the existing codebase and system components directly within their integrated development environments (IDE). The platform reveals critical information such as code-level traces, errors, hidden API calls, database queries, and memory usage, enabling developers to gain telemetry data on their code changes. This functionality significantly enhances developers' ability to write production-ready code while reducing the time required for debugging and troubleshooting.

Earthly Technologies, Inc. is an open-source platform specializing in build automation for the post-container era. Founded in 2020 and based in Redwood City, California, the company has developed an array of tools that simplify continuous integration and deployment processes. Its primary product, the Earthly framework, enables developers to create repeatable builds that can run in any environment. The platform supports the creation of Docker images and various artifacts, such as binaries and packages, while also allowing for parallel processing and dependency management from multiple directories. Additionally, Earthly provides Earthly CI, a fast and efficient continuous integration platform, as well as Earthly Satellites, a remote build runner compatible with any CI system. By streamlining these development processes, Earthly Technologies aims to enhance efficiency and consistency in software development.

Platformatic provides an API platform that simplifies backend development and accelerates the creation of modern backends while reducing operational complexity. It equips developers with building blocks, frameworks, and automation to construct bespoke platforms, with clear guidance to support implementation.

Crash Override is a SaaS company specializing in cybersecurity. It offers a platform that collects metadata from build artifacts and enriches it with data from existing development, security, and infrastructure tools. This enables security teams to identify and fix issues early, enhancing software quality and accelerating feature releases.

Overmind provides an observability platform that helps enterprises anticipate and mitigate risks introduced by infrastructure and cloud changes. Its solution maps dependencies and tracks change events to identify potential issues before deployment and confirms that changes have been safely applied afterward. The platform integrates with existing tools to offer real-time visibility into how updates affect applications, enabling engineers to understand the impact of changes, reduce unproductive work, and minimize downtime due to hidden dependencies.

Axodotdev develops a professional packaging and distribution platform designed to optimize software applications. The platform provides tools to streamline the software development lifecycle, including version control integration, secure distribution channels, and comprehensive dependency management, with a focus on open-source collaboration to help developers manage and share their projects within a community.

Kurtosis is a developer tool company founded in 2020 and based in Houston, Texas. It specializes in providing an end-to-end system for building, testing, and running distributed applications in the cryptocurrency space. The company offers software that automates the creation of testing environments, allowing developers to simulate various scenarios, including outages and malicious behavior. This functionality enables developers to rigorously test their code against potential failures, ensuring reliability before deployment. By streamlining the development process and reducing workloads, Kurtosis enhances the developer experience for those working on distributed systems.

The world's first self-organizing workspace.

Charm develops an open-source coding platform, with tools to improve the visual appearance and store data, to read command markdowns while coding. It currently sells three products, including Glow, an open-source terminal-based markdown reader that allows developers to view documentation such as readme files directly from the command line. It also renders markdown to make the text easier to read and allows users to create a private, encrypted documentation library. Toby Padilla and Christian Rocha founded Charm in 2019.

Snaplet is a tool designed for software developers that facilitates the process of creating a safe and minimized version of a production Postgres database. The platform simplifies the traditionally cumbersome task of copying large datasets by generating a snapshot of user data, which is then used to launch a containerized worker. This worker decrypts database credentials, connects to the database, and retrieves the necessary schema, enabling developers to work with versioned, up-to-date, and production-like data in a secure manner. Snaplet addresses common issues faced by developers, such as the slow and often unsafe practice of downloading production databases, thereby enhancing efficiency and safety in the development process.

Alphadoc is a platform designed to streamline developer experience. It offers tools for engineers at various stages of customer interaction, including documentation, sales support, marketing, onboarding, and implementation.

Permit.io is a developer-focused company that provides a full-stack authorization as a service platform tailored for software developers and product teams. Its platform simplifies the integration of permissions and access control into applications, allowing clients to build and deploy software efficiently using a straightforward SDK and sidecar. By offering an open policy administration layer, Permit.io streamlines authorization tasks, helping businesses save time and reduce the need for frequent modifications to permissions and access controls.

Aviato is a platform offering real-time data insights for private markets. It helps users discover, evaluate, and connect with promising early-stage startups by providing up-to-date company intelligence.

Numbers Station develops an AI-powered platform that automates data-intensive workflows. Its specialized models generate valuable insights, helping businesses make informed decisions.

Pay-i is a technology company.

Founded in 2018, Bytez is a New York-based company that develops software providing access to machine learning papers for developers and data scientists. Its platform aims to simplify the discovery, understanding, and use of open-source AI, offering thousands of serverless models, interactive research papers, personalized feeds, and an AI-powered research agent.