“Xiaoyou Technology” completed the A+ round of financing, led by Borun Capital

Visit the original URL

36氪 was informed that the cloud native security company “Xiaoyou Technology” completed the A+ round of financing. This round of financing was led by Borun Capital, followed by Langmafeng Ventures, and Navigation Capital served as the exclusive financial advisor. According to the company, so far, the cumulative amount of “Xiaoyou Technology” A round of financing is 150 million yuan.

“Xiaoyou Technology” is a company that 36氪 continues to report, positioning itself as a cloud-native security vendor. From an industry perspective, cloud native security comes with cloud native and has developed rapidly in recent years. Yuan Shuguang, founder of “Xiaoyou Technology”, said that many cloud native manufacturers were established in 2015-2016. After five years of promotion, around 2020, leading customers have completed small-scale cloud-native technology verification. After 2020, cloud native has entered a stage of large-scale production at customers.

“Xiaoyou Technology” was established in 2018. Yuan Shuguang said that in 2020, when cloud native began to break out, the company has developed for two years, and has done a good job in product polishing and market verification. After 2020, he observed that cloud-native security also ushered in a period of growth. There are two specific manifestations. First, customers’ demand for cloud-native security has increased by more than 200% every year. Second, everyone’s attention to products has expanded from the earliest single container security to various parts of cloud-native security.

With the progress of the industry, “Xiaoyou Technology” has also undergone some changes. From the perspective of product architecture, the company first started from container security, and now the expansion of products is in line with the cloud native application protection platform (CNAPP) architecture defined by Gartner. Yuan Shuguang introduced that now “Xiaoyou Technology” provides a complete solution for cloud-native security by adding cloud-native security capability modules.

Specifically, “Xiaoyou Technology” is currently building a cloud-native application protection platform around the DevOps process. Currently in the Dev direction, the company provides product functions such as mirroring and product security management. In the Ops direction, it provides real-time detection and response products to help ensure the security of container runtimes. In the first direction, the company has established a relatively complete “gold mirror image library”, which can directly help customers reduce the risk of mirroring and improve the input-output ratio from the source. In the second direction, Xiaoyou will detect and respond through rules and AI methods. In addition, the company is currently developing products at the cloud-native infrastructure level (such as K8S). Summarizing the product features from the effect side, Yuan Shuguang said that Xiaoyou’s products are fully containerized, with one-click cluster deployment, and have the ability to expand elastically. “The architecture has been verified for a long time in a single customer with tens of thousands of nodes, and the functional modules of the product can also be dynamically added and expanded.” Yuan Shuguang said.

Talking about the difficulties of product creation, he believes that the essence of security products considers the two indicators of false negatives and false positives, and the special challenge of cloud native to security products is to implant the DevOps process quickly and well, preferably without interruption. “Whether it’s our golden mirror or automated scanning products, these problems must be solved when they are used on a large scale. Xiaoyou has solved it well at present, and of course there is still room for improvement.” Yuan Shuguang told 36氪.

In addition, it can be observed that some enterprises are also talking about the full-link idea of ​​extending from container security to cloud-native security. In contrast, Yuan Shuguang believes that Xiaoyou’s advantages are reflected in product path planning and first-mover advantage for customers. First of all, Xiaoyou’s overall plan for cloud-native security products was finalized three years ago, and the overall closed-loop solution is not a simple function superposition. In addition, he also believes that there is a head effect in the field of cloud-native security. The more customers you serve, the better the security capabilities, product stability, and functions achieved, which will naturally attract more customers. At present, “Xiaoyou Technology” has accumulated nearly 100 users, covering leading customers in the fields of finance, operators, energy, government and enterprises, and the Internet. On the scene side, Xiaoyou mainly focuses on privatization. In the past few years, it has completed the adaptation of public and private clouds including localized platforms. Yuan Shuguang also believes that Xiaoyou’s compatibility with public and private clouds is also one of its advantages.

When talking about customers’ procurement standards for cloud-native security products as a whole, Yuan Shuguang summed up the following two points: First, customers’ first consideration is security capabilities and product architecture. “Safety products are designed to meet safety needs, so safety capabilities are the most important. At the same time, product stability is also very important. Only by operating stably on the customer side of a large scale and continuously optimizing and polishing can we achieve truly stable results.” he introduced. In addition, it is also very important whether the product has a cloud-native architecture. The experience of “Xiaoyou Technology” shows that under the cloud-native architecture, customers will not sacrifice the characteristics of cloud-native architecture to choose products with non-cloud-native architecture.

Overall, Yuan Shuguang believes that the cloud-native security market will maintain rapid growth in the future. He introduced that the company has participated in the drafting of most of the national standards, industry standards, enterprise standards, technical specifications and white papers for cloud native security in China in the past six months. With the implementation of these standards, it is believed that the compliance requirements for cloud-native security will be gradually determined, and the market demand will further expand. Following this trend, after this round of financing, the company will continue to improve its products according to the CNAPP structure, and at the same time will strengthen regional investment to serve more customers. In addition, part of this round of financing funds will also be used for R&D, sales and other talent expansion.

media coverage

36Kr Venture State Investment Community
Related events

This article is reproduced from: https://readhub.cn/topic/8hq9UkbjX7m
This site is for inclusion only, and the copyright belongs to the original author.

Leave a Comment