Catalog Systems Use-case-specific agent harnesses Endor Labs

Endor Labs

https://www.endorlabs.com/

Founded 2021 by Dimitri Stiliadis + Varun Badhwar (ex-Palo Alto Networks Prisma Cloud); reachability-aware SCA with AI for triage. $70M Series A Oct-2023 ($200M val; Lightspeed + Coatue + Dell Tech Capital); $93M total raised.

Active · Verified 2026-10-28 · fresh as of 2026-10-28 · 19 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
AI-powered SCA + reachability analysis vendor fix
Tier
T3
Section
Use-case-specific agent harnesses
Created
2021 (founded) vendor fix
Latest release
not applicable — wrong section fix
License
not applicable — not OSS fix
GitHub
not applicable — no GitHub repo fix
Pricing
not applicable — wrong section fix
Funding
$70M Series A Oct-2023 ($200M val); $93M total vendor fix
Freshness
2026-10-28 fix
Layer
agent-infra repo fix
Licensing
commercial vendor fix
Deployment locus
cloud vendor fix
Platform vs product
product vendor fix
Protocols
mcp-server vendor fix

When to use

Optimised for: SCA with function-level reachability + AI triage

Anti-fit: not applicable — wrong section

Pros & cons

Pros

Founder Varun Badhwar built $173M-acquired RedLock; reachability analysis differentiator; strong VC backing.

Cons

Niche (SCA-focused); less broad than Snyk; AI is a more recent overlay than DeepCode AI.

Claims & capabilities

$70M Series A Oct-2023 (Lightspeed + Coatue + Dell; $200M val); $93M total; pioneered reachability analysis as primary SCA metric

Technical surface

API surface
not applicable — wrong section
Backend storage
not applicable — wrong section
Deployment
not applicable — wrong section
Embedding model
not applicable — not a memory product
Multi-tenancy
not applicable — wrong section
MCP
yes — local stdio MCP server launched via npx or endorctl (Cursor, Claude Code, Codex, VS Code, etc.)
A2A
not applicable — wrong section
OpenTelemetry
not applicable — wrong section

Alternatives to Endor Labs → live options ranked by shared design, licence, hosting and MCP support

Similar systems

Other use-case-specific agent harnesses in the catalog, ranked by inbound references.

  • Calypso AI (now F5 AI Guardrails) T2

    Dublin / NYC founded 2018; GenAI security and content scanning. $23M Series A-1 Aug-2024 (Paladin Capital + Lockheed Martin Ventures). Pivoted from defence ML to enterprise GenAI guardrails 2023-24.

  • Salesforce Agentforce T1

    Cross-listing: Salesforce Agentforce already exists under Vertical / Customer-support / voice memory; this row is the Agent-harness framing — Agentforce as the consumer-facing agent IDE / builder on Data Cloud. Agentforce launched Sep-2024; Agentforce 2.0 announced Dec-2024.

  • Lasso Security T2

    Tel-Aviv-founded LLM security platform — adversarial testing, prompt-injection defence, data-leakage prevention. $6M seed Nov-2023 (Entrée Capital + Samsung Next).

  • Pillar Security T2

    Tel-Aviv-founded (Dor Sarig + Ziv Karliner, both ex-IDF cyber); end-to-end LLM security platform — discovery, red-teaming, runtime guardrails. $9M seed Apr-2024 (Shield Capital + Greenfield).

  • Promptfoo T2

    OSS (MIT) prompt-engineering eval and red-team CLI; supports OWASP LLM Top-10 vulnerability tests, jailbreak generation, and CI/CD pipeline integration. $5M seed Mar-2024 (Andreessen Horowitz). Founders ex-Discord + ex-Smile Identity.

  • Protect AI T2

    Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI security. Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); its capabilities now ship in Prisma AIRS. Products: Recon (red-team), ModelScan (model artifact scanner), Sightline (vulnerability DB).

Sources (18 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-28
    • MCP support “not applicable — wrong section” → “yes — local stdio MCP server launched via npx or endorctl (Cursor, Claude Code, Codex, VS Code, etc.)” source
    #293