Company profile
GitHub
Code scanning, secret scanning and dependency review in GitHub, with Copilot Autofix proposing fixes for code-scanning alerts; the ADS incumbent where coding agents already live.
- Status
- Status not recorded in CyberMerge data
- Valuation
- Undisclosed
- Latest funding
- Undisclosed
- CyberMerge Index
- #4 · score 84 Oct 29, 2026
- Last updated
Categories
No Research map or Startup Radar category recorded.
Funding & valuation
Funding: Undisclosed — no round recorded in the CyberMerge Funding Tracker.
Rankings
- CyberMerge Index · Oct 29, 2026 #4 · score 84. Product launch (Oct 29): GitHub put an npm package firewall into public preview for all Enterprise Cloud customers. It sits between developer laptops, build servers and coding agents and the public npm registry, and blocks risky packages at install time, including any version… Source Daily momentum, not market cap.
Related CyberMerge stories
- GitHub just put a firewall in front of npm. When the registry owner sells the gate, what’s left for everyone else? Oct 29, 2026 · AI Security
- Meta says hackers used a stolen employee login to pull code, and some personal data, from its GitHub repos. Oct 13, 2026 · BREACH
- tensorlake@0.5.144 is a Shai-Hulud worm. Revoking the stolen GitHub token before you kill the monitor wipes your home directory Oct 8, 2026 · BREAKING · SUPPLY CHAIN / AI AGENTS
- ThreatBook buys CyberStrikeAI. Open-source AI pentest just got an enterprise leash. Oct 2, 2026 · AI Security
On the desk
- Trending Vendors · Oct 29, 2026 GitHub launched an npm package firewall in preview that blocks risky packages at install time, before they reach developer laptops, CI servers or coding agents. The Hacker News
- Trending Vendors · Oct 25, 2026 Wiz: a campaign called Gheist is using stolen GitHub tokens to plant a workflow that dumps repo secrets, and it works in private and enterprise repos. Wiz Research
Figures appear only as recorded in CyberMerge data, with source and date. “Undisclosed” means no published figure in our data. Editorial, not investment advice. Last updated . Spot an error? Tell the desk.