Companies

Maze

mazehq.com

AI-native security platform investigating code and cloud vulnerabilities, prioritizing exploitable risks, and helping developers fix them.

HQLondon, England, United Kingdom
Employees11-50
Funding$60M
2 active roles
Profile 6mo agoJobs checked 20h ago
CybersecurityAI ApplicationB2B SaaSSeries A$10M-$50M

About

Maze is an AI-native cybersecurity platform that investigates vulnerabilities across code and cloud, identifies which risks are exploitable, and helps developers fix them. It sells to security and engineering teams, differentiating itself through AI agents that connect code, runtime, cloud, and business context rather than relying only on predefined rules.

Market

Maze competes in AI-native application security, cloud security, and vulnerability-management software, spanning cloud vulnerabilities, third-party dependencies, and source-code flaws. It positions itself against conventional rule-based scanners by using AI agents to combine code, cloud, runtime, deployment, and business context, determine which findings are genuinely exploitable, reduce false-positive noise, and help produce fixes. Enterprise deployment options, broad scanner and cloud integrations, and direct workflows with coding agents such as Claude and Cursor are additional differentiators.

Target Customers

Maze targets enterprise security and engineering organizations—particularly Fortune 100/200 companies and high-growth technology companies—with security engineering, application security, DevSecOps, and developer teams responsible for reducing vulnerability backlogs and shipping fixes. Its platform is designed for enterprise-scale deployments, including single-tenant hosting and regional deployment.

At a Glance

Problem

Maze addresses the security problem of treating vulnerability findings in isolation. Conventional scanners can analyze systems “in a vacuum,” producing findings without enough environmental or application context to determine what is genuinely exploitable. That creates a costly prioritization and remediation burden: security teams must investigate large volumes of alerts while developers risk spending time fixing issues that do not materially increase risk. The main use case is reducing this noise across an organization’s code and cloud environment by distinguishing harmless findings from vulnerabilities that are actually exploitable and urgent.

Product / Service

Maze is a cloud-hosted cybersecurity platform that uses AI agents to investigate vulnerabilities across code and cloud through a unified engine. The agents understand the customer’s environment, combine context from code and cloud, prove which findings are exploitable, and prioritize the vulnerabilities that matter. For confirmed issues, Maze can generate a fix and route it to the developer or AI agent responsible for the relevant code. Its capabilities include cloud vulnerability triage, AI-powered software composition analysis for dependencies, and AI-powered static analysis for business-logic vulnerabilities that traditional SAST may miss. Customers can use AWS-hosted multi-tenant or single-tenant deployment, with the intended benefit of faster, more accurate triage and less manual remediation work.

Market

Maze competes in cybersecurity, particularly the emerging space around vulnerability investigation, prioritization, and remediation across application code, dependencies, containers, virtual machines, and cloud environments. The company says there are no directly comparable products and that it does not fit neatly into adjacent labels such as CTEM, RBVM, UVM, RemOps, or ASPM, positioning it instead as an AI-agent platform for investigating, triaging, and resolving code and cloud vulnerabilities.

The available evidence does not disclose revenue, funding, customer count, or enough operating data to determine whether Maze is pre-revenue. Its public company profile lists a London headquarters and 11–50 employees, which indicates an operating company but is not sufficient to quantify commercial traction. The strongest available traction signal is therefore product and market positioning rather than verified financial or customer metrics.

Founders & Leadership

Harry WetheraldFounder
Co-founder & CEO
Adrian JozwikFounder
Co-founder & CPO
SantiagoFounder
Co-founder
Joseph BarringhausVice President of Marketing

Funding History

2024-09
Seed$6M

Cherry Ventures, Tapestry VC

2025-06
Series A$25M

Theory Ventures

Recent News

2026-06-23product
Introducing Maze Code: Code Security You Can Finally Trust

Maze launched Maze Code, an AI-powered code-security product that investigates vulnerabilities in software dependencies and code written by engineering teams.

2025-12-04
An Analyst's Take on Maze: AI That Actually Moves the Needle ...

James Berthoty and Latio published an independent analyst assessment of Maze. Maze disclosed that it partners with Latio for analyst feedback and that the video was not paid for.

2025-08-01
Meet the New Wave of AI-Native Security Innovators

Penligent’s overview of emerging AI-native security companies highlighted Maze’s use of AI and LLMs to parse vulnerability reports, assess exploitability, and generate patch recommendations.

Active Roles

2
Product DesignerRemote100k – 140k
Remote (Europe)/Design/95d ago
Remote (Europe)/Engineering/197d ago

Business Model

Maze uses a sales-led B2B software model, selling access to its AI-powered code and cloud security platform to security teams through a demo-driven process. Public evidence does not specify pricing tiers or confirm whether contracts are subscription-based.

Products

Maze Cloud: cloud vulnerability investigation, exploitability prioritization, and remediationMaze Code: code and dependency security, including AI-SAST and AI-SCAAI-agent platform connecting code, cloud, runtime, controls, and business contextIntegrations with existing vulnerability scanners, repositories, ticketing systems, and coding agents

Customers

AlloyContentfulCohereHalcyonForgeHoliday GroupPartsSource

Tech Stack

AI agents for autonomous vulnerability investigation and remediationCustom AI infrastructure with domain-specific agent training and multi-layer validationAI-SAST for source-code securityAI-SCA for third-party dependency securityAI-built call graphs and code-to-cloud context analysisAWS cloud hosting with multi-tenant and single-tenant deploymentIntegrations with cloud environments, repositories, vulnerability scanners, ticketing systems, Claude, and Cursor

Competitors

Endor Labs
Apiiro
Backslash Security
Cisco
HashiCorp
Forescout

Key Investors

Cherry Ventures, Theory Ventures, FIREDROP I LP, Scout Fund, Tapestry VC