echoloc

Endor Labs Tech Stack

AI-powered application security platform for code risk prioritization

Software Development Palo Alto, California 51–200 employees Founded 2021 Privately Held

Endor Labs builds an AI-driven AppSec platform that combines static analysis (SAST/DAST), software composition analysis (SCA), and agentic workflows to identify and remediate code vulnerabilities. The tech stack—Go, gRPC, GraphQL, Bazel, Kubernetes, PostgreSQL—reflects a backend-heavy architecture optimized for parsing complex codebases at scale. Active adoption of Gemini and RAG signals a strategic pivot toward AI-assisted vulnerability triage and knowledge retrieval, directly addressing stated pain points around pinpointing critical risks in complex software.

Tech Stack 65 technologies

Core StackGo gRPC GraphQL Java Maven JavaScript Python PostgreSQL Kubernetes C++ Salesforce Asana HubSpot Canva Slack JUnit Jenkins GitLab CI/CD Postman AWS Thrift Bazel Spring Boot Gradle SAST DAST Webflow TestNG Pytest npm+34 more
AdoptingRAG Gemini

What Endor Labs Is Building

Challenges

  • Pinpointing risks in complex software
  • Identifying critical risks in complex software
  • Scaling backend infrastructure
  • Backend scaling challenges
  • Brand visibility
  • Optimizing paid channel roi
  • Scaling backend for saas products
  • Detecting 0-day vulnerabilities
  • Reducing time spent on security issues
  • Scalability, reliability, and performance of backend systems

Active Projects

  • Core backend infrastructure for saas products
  • Rag-based knowledge systems
  • Conduct recurring business reviews
  • Supply chain security feature
  • Agent workflows for auto-triage
  • Development of exploit code
  • Evaluation of security tools
  • Oversight of vulnerability database ingestion
  • Building scalable sales processes and playbooks
  • Improving reporting, insights, and territory planning

Hiring Activity

Accelerating25 roles · 20 in 30d

Department

Engineering
10
Sales
5
Product
3
Marketing
2
HR
1
Security
1
Support
1

Seniority

Senior
11
Mid
3
Principal
3
Manager
2
Staff
2
Director
1
Junior
1

Notable leadership hires: Sales Director

Company intelligence

Find more companies like Endor Labs by tech stack, pain points and active projects

Get started free

About Endor Labs

Endor Labs is an application security platform founded in 2021 and headquartered in Palo Alto, serving development and AppSec teams at companies ranging from startups to Fortune 500 enterprises. The product scans code—including legacy C++, modern monorepos, and AI-generated code—to surface vulnerabilities, prioritize remediation, and propose fixes with business context. Compliance frameworks supported include FedRAMP, PCI, SLSA, and NIST SSDF. The company is actively scaling: 19 engineering and sales roles posted in the last 30 days, with senior and principal hires concentrated in engineering, and a new Sales Director role indicating go-to-market acceleration.

HeadquartersPalo Alto, California
Company Size51–200 employees
Founded2021
Hiring MarketsIndia, United States

Frequently Asked Questions

What tech stack does Endor Labs use?

Core platform built on Go, gRPC, GraphQL, and Bazel, deployed on Kubernetes with PostgreSQL. Analysis engines include SAST, DAST, and SCA. CI/CD via Jenkins and GitLab CI/CD. Recently adopting Gemini and RAG for vulnerability triage.

What does Endor Labs do?

Endor Labs is an AppSec platform that uses AI agents and static/dynamic analysis to identify, prioritize, and remediate code vulnerabilities in human-written and AI-generated code. Specializes in supply chain security, open source risk, and SDLC compliance.

Similar Companies in Software Development

Other companies in the same industry, closest in size

How this profile is built

Endor Labs's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →

This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.