Trivy
Trivy is an open-source comprehensive vulnerability and misconfiguration scanner for containers, Kubernetes, code repositories, and cloud infrastructure. Finds CVEs, secrets, IaC misconfigs, and SBOM generation — all in one tool.
- Location
- San Francisco, USA
- Raised
- $135M
- Stage
- Series C
- Founded
- 2019
- Category
- Open Source
- Funding
- VC-backed
- Team
- 250-500
Funding figures as of Jul 2025 · not independently verified
Founders of Trivy
- Teppei Fukuda
Investors backing Trivy
- Insight Partners
- TCV
Frequently asked questions
What does Trivy do?
Trivy is an open-source comprehensive vulnerability and misconfiguration scanner for containers, Kubernetes, code repositories, and cloud infrastructure. Finds CVEs, secrets, IaC misconfigs, and SBOM generation — all in one tool.
Where is Trivy based?
Trivy is based in San Francisco, USA.
When was Trivy founded?
Trivy was founded in 2019.
How much has Trivy raised?
Trivy has raised $135M in their Series C round as of Jul 2025.
Who founded Trivy?
Trivy was founded by Teppei Fukuda.
Who has invested in Trivy?
Trivy is backed by Insight Partners, TCV.
How Trivy would pitch themselves
○ Auto-generated01Target customer
Developers + open-source communities + enterprises wanting an OSS-first tool in this category, with optional commercial support.
02Problem they solve
Trivy is an open-source comprehensive vulnerability and misconfiguration scanner for containers, Kubernetes, code repositories, and cloud infrastructure. Finds CVEs, secrets, IaC misconfigs, and SBOM generation — all in… The category has historically been served by tools that miss the modern workflow this product is built around.
03Key differentiator
Trivy differentiates on all-in-one open source security scanner. Backed by Insight Partners + TCV, $135M raised — the company has resources + validation to compound this thesis. Founded by Teppei Fukuda.
04Go-to-market strategy
Growth-stage GTM — multi-channel revenue motion (direct enterprise sales, channel partnerships, marketplace listings). Vertical specialisation + verticalised AE teams targeting enterprise + mid-market.