Onapsis has raised $116.0M in total across 5 funding rounds.
Onapsis's investors include .406 Ventures, Accel, AllegisCyber Capital, Endeavor Catalyst, Evolution Equity Partners, WestWave Capital, Marcos Galperin, Greylock, Lowercarbon Capital, Lumia Capital, Sequoia Capital, The Hit Forge.
# High-Level Overview
Onapsis is a cybersecurity company specializing in protecting business-critical enterprise applications, particularly SAP and Oracle ERP systems.[1][4] The company builds an application-layer security platform that addresses a historically neglected vulnerability: the enterprise applications that organizations depend on to run their core business operations.[4] Onapsis serves over 300 leading brands, including Global 2000 members, across financial services, healthcare, manufacturing, and government sectors.[4]
The company solves a critical problem in a large market by providing vulnerability management, compliance automation, threat detection, and incident response capabilities specifically designed for business-critical applications.[3][4] Unlike generic security products, Onapsis delivers context-aware solutions that understand the unique architecture and risks of SAP and Oracle systems, enabling organizations to reduce risks affecting critical business processes and data.[3] The company has demonstrated strong growth momentum, recently ranking 243rd on Deloitte's Technology Fast 500 in North America with a 398 percent growth rate.[3]
# Origin Story
Onapsis was founded in 2009 by cybersecurity researchers who understood the severe consequences when organizations fail to secure their vital applications.[4] The company is based in Boston, Massachusetts, and emerged from a recognition that the world's most critical enterprise applications had been neglected from a cybersecurity perspective.[4]
The founding team established the Onapsis Research Labs, an offensive security team that has become central to the company's identity and differentiation.[2] Over the past 16+ years, this research team has discovered over 1,000 zero-day vulnerabilities in business-critical applications and supported six U.S. Department of Homeland Security alerts.[2][6] The research labs' findings directly inform and power the Onapsis Platform, creating a virtuous cycle where threat intelligence continuously improves product capabilities.[2]
# Core Differentiators
# Role in the Broader Tech Landscape
Onapsis operates at the intersection of two powerful trends: the increasing digitalization of enterprise operations and the rising sophistication of cyberattacks targeting business-critical systems.[3] As organizations migrate to cloud environments and expand their reliance on ERP systems, the attack surface for threat actors has grown significantly, yet security solutions have lagged behind.[4]
The company has essentially created and defined a new security category—business-critical application security—that industry analysts now recognize as a "hot category to watch."[3] By establishing the Onapsis Research Labs as the gold standard for SAP threat intelligence, the company influences how SAP itself approaches product security, creating a feedback loop where Onapsis discoveries inform SAP's security roadmap.[6] This positions Onapsis not just as a vendor, but as a foundational player shaping how enterprise security evolves.
The timing is critical: as breaches of major enterprises increasingly trace back to vulnerabilities in business applications rather than network infrastructure, organizations are recognizing that traditional security approaches are insufficient.[2] Onapsis's focus on this historically underserved segment gives it first-mover advantage in a market where every large organization depends on these applications to operate.
# Quick Take & Future Outlook
Onapsis is well-positioned to capture significant market share in an emerging security category with massive addressable market potential—every Global 2000 company runs SAP or Oracle systems.[3][4] The company's combination of proprietary research, SAP partnership, and proven growth trajectory suggests continued expansion, particularly as cloud migration accelerates and regulatory compliance requirements tighten.
The key to Onapsis's future influence will be whether it can expand beyond SAP to become the dominant platform for securing all business-critical applications across multiple vendors, while maintaining the research excellence that differentiates it today.[6] As threat actors increasingly target the application layer—where traditional security tools provide minimal visibility—Onapsis's specialized approach will likely become table stakes for enterprise security programs rather than a nice-to-have addition.
Onapsis has raised $116.0M across 5 funding rounds. Most recently, it raised $55.0M Series D in October 2020.
| Date | Round | Lead Investors | Other Investors |
|---|---|---|---|
| Oct 1, 2020 | $55.0M Series D | .406 Ventures, Accel, AllegisCyber Capital, Endeavor Catalyst, Evolution Equity Partners, WestWave Capital, Marcos Galperin | |
| Apr 1, 2018 | $31.0M Series C | .406 Ventures, AllegisCyber Capital, Endeavor Catalyst, Evolution Equity Partners, Greylock, Lowercarbon Capital, Lumia Capital, Sequoia Capital, The Hit Forge, Two Bear Capital, Marcos Galperin | |
| Sep 1, 2015 | $17.0M Series B | .406 Ventures, AllegisCyber Capital, Delta Blockchain Fund, Endeavor Catalyst, Evolution Equity Partners, Greylock, Kamay Ventures, Lowercarbon Capital, Lumia Capital, Sequoia Capital, The Hit Forge, Two Bear Capital, Marcos Galperin | |
| Jun 1, 2014 | $10.0M Series A | .406 Ventures, AllegisCyber Capital, Delta Blockchain Fund, Endeavor Catalyst, Evolution Equity Partners, Kamay Ventures, Marcos Galperin | |
| Oct 1, 2012 | $3.0M Seed | Delta Blockchain Fund, Kamay Ventures |
