About
Maze is an AI-native cybersecurity platform that investigates vulnerabilities across code and cloud, identifies which risks are exploitable, and helps developers fix them. It sells to security and engineering teams, differentiating itself through AI agents that connect code, runtime, cloud, and business context rather than relying only on predefined rules.
Market
Maze competes in AI-native application security, cloud security, and vulnerability-management software, spanning cloud vulnerabilities, third-party dependencies, and source-code flaws. It positions itself against conventional rule-based scanners by using AI agents to combine code, cloud, runtime, deployment, and business context, determine which findings are genuinely exploitable, reduce false-positive noise, and help produce fixes. Enterprise deployment options, broad scanner and cloud integrations, and direct workflows with coding agents such as Claude and Cursor are additional differentiators.
Maze targets enterprise security and engineering organizations—particularly Fortune 100/200 companies and high-growth technology companies—with security engineering, application security, DevSecOps, and developer teams responsible for reducing vulnerability backlogs and shipping fixes. Its platform is designed for enterprise-scale deployments, including single-tenant hosting and regional deployment.
At a Glance
Problem
Maze addresses the security problem of treating vulnerability findings in isolation. Conventional scanners can analyze systems “in a vacuum,” producing findings without enough environmental or application context to determine what is genuinely exploitable. That creates a costly prioritization and remediation burden: security teams must investigate large volumes of alerts while developers risk spending time fixing issues that do not materially increase risk. The main use case is reducing this noise across an organization’s code and cloud environment by distinguishing harmless findings from vulnerabilities that are actually exploitable and urgent.
Product / Service
Maze is a cloud-hosted cybersecurity platform that uses AI agents to investigate vulnerabilities across code and cloud through a unified engine. The agents understand the customer’s environment, combine context from code and cloud, prove which findings are exploitable, and prioritize the vulnerabilities that matter. For confirmed issues, Maze can generate a fix and route it to the developer or AI agent responsible for the relevant code. Its capabilities include cloud vulnerability triage, AI-powered software composition analysis for dependencies, and AI-powered static analysis for business-logic vulnerabilities that traditional SAST may miss. Customers can use AWS-hosted multi-tenant or single-tenant deployment, with the intended benefit of faster, more accurate triage and less manual remediation work.
Market
Maze competes in cybersecurity, particularly the emerging space around vulnerability investigation, prioritization, and remediation across application code, dependencies, containers, virtual machines, and cloud environments. The company says there are no directly comparable products and that it does not fit neatly into adjacent labels such as CTEM, RBVM, UVM, RemOps, or ASPM, positioning it instead as an AI-agent platform for investigating, triaging, and resolving code and cloud vulnerabilities.
The available evidence does not disclose revenue, funding, customer count, or enough operating data to determine whether Maze is pre-revenue. Its public company profile lists a London headquarters and 11–50 employees, which indicates an operating company but is not sufficient to quantify commercial traction. The strongest available traction signal is therefore product and market positioning rather than verified financial or customer metrics.
Founders & Leadership
Funding History
Cherry Ventures, Tapestry VC
Theory Ventures
Recent News
Maze launched Maze Code, an AI-powered code-security product that investigates vulnerabilities in software dependencies and code written by engineering teams.
James Berthoty and Latio published an independent analyst assessment of Maze. Maze disclosed that it partners with Latio for analyst feedback and that the video was not paid for.
Penligent’s overview of emerging AI-native security companies highlighted Maze’s use of AI and LLMs to parse vulnerability reports, assess exploitability, and generate patch recommendations.
Active Roles
2Business Model
Maze uses a sales-led B2B software model, selling access to its AI-powered code and cloud security platform to security teams through a demo-driven process. Public evidence does not specify pricing tiers or confirm whether contracts are subscription-based.
Products
Customers
Tech Stack
Similar Companies
Competitors
Key Investors
Cherry Ventures, Theory Ventures, FIREDROP I LP, Scout Fund, Tapestry VC