Phylum
The business, the turning points, and the decisions behind them.
Some sections are still being researched2 / 4
Sections to complete：02 · 05
01 / WHAT IT BUILT
What the company did
Phylum was an Evergreen, Colorado software supply chain security company founded in 2020 by security researchers Aaron Bray, Louis Lang and Peter Morgan. It built automated malicious-package analysis for open-source code: its platform analysed newly published packages within seconds, maintained a malicious-package database and a package-management firewall, and reportedly detected 60% more malicious packages than any other vendor. It raised $19.5 million ($4.5 million seed in 2021; $15 million Series A led by ClearSky in 2022).
02 / FAILURE REASONS
Material for this section is being gathered and checked. It will appear here once ready.
03 / EVENT HISTORY
Events in the structured record
- Company founded
Aaron Bray, Louis Lang and Peter Morgan found Phylum in Evergreen, Colorado to defend the open-source software supply chain.
- Seed round
Phylum raises $4.5 million in seed funding led by First In and exits stealth.
- Series A
Phylum raises $15 million Series A led by ClearSky, with Atlassian Ventures, SixThirty and others.
- Assets acquired by Veracode
On January 6, 2025, Veracode announces it has acquired certain assets of Phylum, Inc. — its malicious-package analysis, detection and mitigation technology plus its research team — for integration into Veracode's SCA product (terms undisclosed).
04 / CONTEMPORARY REBUILD ASSESSMENT
Difficulty of rebuilding this project today
Material for this section is being gathered and checked. It will appear here once ready.
Overall assessment: Not completed
05 / CAUSAL CHAIN / AFTERMATH
Material for this section is being gathered and checked. It will appear here once ready.