Company profile
QuestorAI
Autonomous vulnerability remediation for AppSec teams: deterministic code analysis plus targeted LLM calls (frontier or locally hosted, so source can stay in-house) work out whether a finding is actually exploitable,…
- Status
- PrivateListed on CyberMerge Startup Radar (private vendors), snapshot Oct 21, 2026
- Valuation
- Undisclosed
- Latest funding
- Undisclosed
- HQ
- Seattle, WA / US (Startup Radar)
- CyberMerge Index
- #9 · score 62 Oct 21, 2026
- Last updated
Categories
Funding & valuation
Funding: Undisclosed — no round recorded in the CyberMerge Funding Tracker.
Latest signals
- Startup Radar · Application Security · snapshot Oct 21, 2026 21 Oct 2026: $3M seed led by Paladin Capital Group with Denver Ventures. Working with design partners at large tech companies and regulated enterprises on production codebases; money goes to the analysis and auto-remediation engine, more design partners and hiring ahead of broader availability. Valuation Undisclosed (QuestorAI press release). Source
Rankings
- CyberMerge Index · Oct 21, 2026 #9 · score 62. Funding (today): $3M seed led by Paladin Capital Group with Denver Ventures for autonomous vulnerability remediation, which uses deterministic code analysis plus targeted LLM calls to decide whether a finding is exploitable, then writes and validates the fix. Valuation… Source Daily momentum, not market cap.
Competitors
Same-category peers from CyberMerge Research maps, Startup Radar and What's The Use tags.
- ArmadinPrivateAI-native offensive security: autonomous agent swarms chain low-severity weaknesses into validated kill…
- OX SecurityPrivateAI-native AppSec from prompt to runtime: ASPM/PBOM, VibeSec for AI-generated code, plus OX Cloud CNAPP with…
- Aikido SecurityPrivateUnified developer AppSec suite (SAST/SCA/secrets/cloud/runtime) with autofix; European unicorn.
- SnykPrivateDeveloper-first AppSec platform: code (SAST), open-source dependency (SCA), container and IaC scanning, now…
- HadrianPrivateAgentic offensive security: Atlas continuously maps the external attack surface and uses AI agents to…
- ApiiroPrivateDeep-code ASPM with Risk Graph, design-phase AI threat modeling, AutoFix.
- ArmorCodePrivateUnified exposure / ASPM orchestration across AppSec, cloud, and AI findings.
- ChainguardPrivateSafe-source open-source: zero-CVE container images, libraries, and supply-chain factory.
- CodeWallPrivateAutonomous AI offensive security: multiple specialized agents start with no credentials or inside knowledge,…
- Fleuret AIPrivateAgentic continuous pentesting: two AI agents (Emile and Champollion) map exposed apps, APIs and…
- GitGuardianPrivateSecrets detection + non-human identity / AI-agent credential governance across SDLC.
- Rein SecurityPrivateRuntime security from inside the app: baselines how production code and AI agents actually execute, then…
Figures appear only as recorded in CyberMerge data, with source and date. “Undisclosed” means no published figure in our data. Editorial, not investment advice. Last updated . Spot an error? Tell the desk.