Sentinel/Black Llama
Nothing gets past the llama. Privacy code scanning for people who build software.
Most leaks are not sophisticated attacks. They are a hard-coded key, a console.log(user), an open storage bucket, or user data piped into a third-party AI call, written by a small team with no security staff. Sentinel reads code on a sealed machine with the network off, finds every place personal data or secrets could escape, and hands back the exact fix. Then it does something the big scanners do not: a clean month earns a dated, publicly checkable Privacy-Ready badge, so small builders can prove what they are doing right.
Business case
Application security tooling was built for enterprises with security teams. The buyers Sentinel targets (indie developers, agencies, small SaaS teams) have the same liability and none of the staff. The product wraps proven open-source engines (Semgrep, detect-secrets, OSV) in a sealed, no-network runtime and a report a founder can act on, with the badge as the acquisition loop: every badge on a customer's site is an advertisement with a verification link. Pricing is subscription per repo, and the "verify a badge" flow makes Sentinel the trust layer buyers check, not just a tool sellers use.
Market
Application security testing · projected by 2031
The application security testing market is projected to grow from roughly $1.83B in 2025 to about $7.6B by 2031 (≈26.7% CAGR), one of the fastest-growing segments in security software. The SMB and solo-developer tier is the least served: incumbents price per seat for enterprise, and privacy regulation (GDPR, CCPA, state privacy laws) now reaches companies of every size.
