Loading organizations...
§ Private Profile · 71-75 Shelton Street Covent Gdn, London, Greater London, WC2H 9JQ, United Kingdom
SaaS API security platform for enterprise DevSecOps teams to build, test, and protect APIs against OWASP API attacks.
42Crunch is a London, UK-based cybersecurity company that provides an enterprise API security platform designed to integrate vulnerability discovery and policy enforcement directly into the software development lifecycle. The company's software-as-a-service solution features an API micro-firewall that protects against common vulnerabilities, enabling a shift-left approach for developers and security teams. The organization has raised a total of $20.6 million in venture capital funding, which includes a $17 million Series A round completed in May 2021. Its OpenAPI editor extension is currently utilized by more than one million developers globally. 42Crunch is backed by lead investors Energy Impact Partners and Adara Ventures, and it provides API security services to corporate customers such as Ford Motors, Qualys, and MuleSoft. The company was founded in 2016 by Jacques Declas, Philippe Leothaud, and Isabelle Mauny.
42Crunch has raised $17.0M across 1 funding round.
42Crunch has raised $17.0M in total across 1 funding round.
42Crunch has raised $17.0M across 1 funding round. Most recently, it raised $17.0M Series A in May 2021.
| Date | Round | Lead Investors | Other Investors | Status |
|---|---|---|---|---|
| May 1, 2021 | $17M Series A | Energy Impact Partners | Adara Ventures | Announced |
42Crunch is a technology company that builds an API security platform automating end-to-end security for APIs across their lifecycle, from design and development to runtime protection.[1][2][3][5] It serves enterprises, Fortune 500 firms, developers, security teams, and operations groups, solving the problem of API vulnerabilities by embedding security into API contracts, enabling DevSecOps collaboration, and addressing gaps in traditional tools like perimeter defenses.[1][2][4][5] Trusted by over 2 million developers at thousands of enterprises, the platform delivers security audits (200+ checks), live endpoint testing, vulnerability detection, governance, and micro API firewalls with minimal latency, powering growth through scalable protection for hundreds or thousands of APIs.[1][2][3][4]
42Crunch emerged to tackle the rising API security challenges in modern DevSecOps environments, with leadership and investors boasting 20+ years in API and security from companies like Microsoft, Oracle, Akamai, Axway, Vordel, Layer 7, and Fastly.[2] The idea stemmed from bridging gaps between development and security teams, shifting from reactive perimeter tools to proactive, developer-first security embedded in API design—responding to vulnerabilities like OWASP API Top 10.[2][3][4] Early traction built on its unique automation of security audits, CI/CD integration, and runtime protection, earning praise from analysts like Gartner, Omdia, EMA, and KuppingerCole for streamlining deployment and enabling security-by-design.[2][3]
42Crunch rides the API explosion trend in microservices, cloud-native apps, and hybrid environments, where APIs drive 83% of web traffic but face surging attacks (e.g., OWASP Top 10).[2][3] Timing aligns with DevSecOps mandates for shift-left security amid regulations like GDPR and rising breaches, outpacing legacy WAFs by enforcing contract-based policies at scale.[1][4][5] Market forces favoring it include API governance complexity in distributed teams and the need for automation over manual rules; it influences the ecosystem by enabling collaborative security across devs, sec, and ops, integrating with MuleSoft, Azure, and CI/CD tools to standardize protection.[1][5][7]
42Crunch is positioned for expansion as API security becomes table stakes in enterprise stacks, with roadmaps emphasizing developer productivity, automation, and governance scaling to AI-driven APIs and emerging protocols like Model Context Protocol (MCP).[2][3] Trends like zero-trust architectures, multi-cloud sprawl, and regulatory pressures will amplify demand for its contract-first model, potentially growing via partnerships (e.g., MuleSoft, Microsoft) and runtime enhancements.[1][7] Its influence may evolve toward dominating DevSecOps platforms, closing vulnerability gaps proactively—reinforcing its role as the bridge empowering secure innovation at scale, much like its founding mission to secure APIs without slowing velocity.[2][5]
42Crunch has raised $17.0M in total across 1 funding round.
42Crunch's investors include Energy Impact Partners, Adara Ventures.