Market Opportunity
Governance as code - bake compliance into CI/CD to scale faster targets a $18.0B = 300,000 developer-focused enterprises x $60K ACV. Assumes global companies with >20 engineers will budget for security/governance tooling averaging $60K per year. total addressable market with medium saturation and a year-over-year growth rate of 20-30% (cloud security, devops toolchain automation segments).
Key trends driving demand: IaC and cloud-native adoption -- increases the number of codified infra changes that can be automatically governed.; Shift-left security -- teams enforce policies earlier in the dev lifecycle, creating demand for CI-native policy tooling.; Regulatory and supply-chain pressure -- mandates like SOC2, SLSA, and SBOM increase auditing needs and automation demand..
Key competitors include Open Policy Agent (OPA), Styra (Declarative Authorization Service), Snyk, Datree, Prisma Cloud (Palo Alto Networks).