RevEng.AI, a cybersecurity company focused on software supply chain verification, has raised $15 million in a Series A funding round led by NATO Innovation Fund. Sands Capital, In-Q-Tel, IQ Capital, and Episode One also participated. The company is developing a binary-native verification layer to analyze compiled software, helping organizations determine what is inside executables, firmware, and third-party applications without needing source code.
Supply chain attacks are growing as more organizations rely on third-party software, open-source components, and vendor updates. At the same time, code generated by AI complicates efforts to verify deployed software for hidden vulnerabilities or malicious behavior. RevEng.AI’s solution hinges on BinNet, a foundational AI model trained with government cyber units and commercial security teams. The system automatically identifies hidden vulnerabilities, backdoors, and suspicious functionality in software before deployment.
Related: WeRoad lands $58M to scale travel experiences
James Patrick-Evans, PhD, founder and CEO of RevEng.AI, said executable binaries are becoming the most reliable way to verify software behavior once it runs on machines. “Much of the software built today is never reviewed by a human,” he noted. “It needs to be automated, and that’s exactly what RevEng delivers.” The platform works directly on compiled executables, including closed-source and third-party software, to detect undeclared components and compare releases against trusted versions.
Traditional security tools focus on source code and repositories, but RevEng.AI operates at the binary level. This approach helps organizations identify risks in software they rely on, even when that software is closed-source or delivered by third parties. David Ordonez, a senior associate at NATO Innovation Fund, called the technology a “critical gap filler” for software supply chain security. He added that modern economies and critical infrastructure depend on software across sectors like energy, healthcare, and defense.
The company reports early interest from enterprise and defense customers. It is integrating its technology into existing security workflows to support proactive verification. The $15 million funding will accelerate growth and deployment of RevEng.AI’s platform as demand rises from organizations prioritizing software resilience. The technology’s ability to analyze compiled code without source access positions it as a unique tool in an era of rising AI-driven development.
Related: How To Protect Your Business Online In 2023
Organizations using RevEng.AI’s platform can verify software before procurement or deployment decisions. This is especially important as AI-generated code becomes more common, making manual review impractical. The system’s focus on binaries, rather than source code, addresses a blind spot in current security practices. RevEng.AI’s approach avoids the limitations of traditional tools, which often fail to account for the complexity of compiled software.
The funding round underscores growing concerns about supply chain integrity. With AI’s role in development expanding, the need for verification tools that work on compiled code is becoming urgent. RevEng.AI’s BinNet model, trained with both government and commercial security teams, reflects a hybrid approach to addressing these challenges. The company’s focus on binary-level analysis aligns with industry demands for transparency in software that underpins critical systems.
Early adopters include enterprise and defense clients, though the company declined to name specific customers. It emphasized that its technology is designed to fit into existing workflows without disrupting current processes. The ability to compare software releases against trusted versions helps organizations spot anomalies before they cause harm. As AI-generated code becomes more prevalent, tools like RevEng.AI’s may become essential for maintaining trust in software ecosystems.
Related: How To Use Htvront heat press machine: The Complete Guide
RevEng.AI’s platform is not a replacement for source code analysis but a complementary layer of security. It operates independently of source access, making it useful for verifying third-party software or firmware that organizations cannot inspect directly. The company’s growth plans include expanding its verification capabilities and refining BinNet’s ability to detect subtle changes in software behavior. With the funding, RevEng.AI aims to scale its operations as demand for its technology increases.
The cybersecurity landscape is evolving rapidly, and tools that can verify software at the binary level are gaining traction. RevEng.AI’s approach addresses a specific need in an industry where supply chain risks are rising. Its ability to work with compiled code, rather than relying on source access, sets it apart from existing solutions. As the company moves forward, its focus remains on delivering a tool that helps organizations trust the software they depend on—whether it’s developed internally or sourced from third parties.