Tolmo

Tolmo is an AI-native security platform from the team that brought you Sqreen and the Datadog application security product suite. Tolmo first builds a production knowledge graph of organizations' entire production environment, from code and cloud infrastructure to CI pipelines and observability.

A fleet of security agents use this deep production context to run continuous adversarial pentesting to find new weaknesses, chain vulnerabilities together, validate existing security findings, and determine remediation steps. Tolmo aims to bridge the gap between growing vulnerability backlogs and the shrinking exploitation window.

The platform is built around a live knowledge graph that continuously ingests context from cloud providers, code repositories, CI/CD pipelines, identity systems, data stores, observability tools, and third-party security vendors. This graph tracks every asset, the dependencies between them, and a full history of changes over time.

Tolmo is backed by Accel, a top cybersecurity venture firm, and Y-Combinator. Headquartered in San Francisco, CA.