aid: depthfirst
name: depthfirst
description: 'depthfirst is an applied AI lab building an autonomous application security
  platform that protects software from design through production. Its General Security
  Intelligence platform builds context across a company''s code, infrastructure, and
  business logic to detect complex vulnerabilities, cut false positives, and generate
  merge-ready fixes. Product surfaces include a code scanner, dependency firewall,
  secrets detection, supply-chain mapping, and agentic pentesting, alongside in-house
  security models such as dfs-mini1. Backed by Accel, Meritech Capital, Forerunner
  Ventures, and The House Fund, depthfirst works with companies including ClickUp,
  Lovable, Supabase, incident.io, and Moveworks.'
url: https://raw.githubusercontent.com/api-evangelist/depthfirst/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://depthfirst.com/images/depthfirst-og.png
x-type: company
x-source: vc-portfolio
x-backed-by:
- accel
- forerunner-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Security
- Application Security
- Cybersecurity
- DevSecOps
- Artificial Intelligence
- Agentic AI
- Vulnerability Management
- Supply Chain Security
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://depthfirst.com/
- type: Blog
  url: https://depthfirst.com/blog
- type: StatusPage
  url: https://status.depthfirst.com/
- type: TrustCenter
  url: https://trust.depthfirst.com/
- type: Login
  url: https://app.depthfirst.com/
- type: TermsOfService
  url: https://depthfirst.com/legal/terms-of-service
- type: PrivacyPolicy
  url: https://depthfirst.com/legal/privacy-policy
- type: LinkedIn
  url: https://www.linkedin.com/company/depthfirst/
- type: Twitter
  url: https://x.com/depthfirstlabs
- type: DomainSecurity
  url: security/depthfirst-domain-security.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence