MergeBase
Track on RadarAcquired by Finite State · 2024 · news
Software composition analysis & SBOM management for supply chain security
- Total raised
- $2.88M
- Employees
- 1-10 employees
- Founded
- 2018
- Momentum
- 17
Stalling
Data updated July 2026
About
About MergeBase
At a glance
MergeBase is a cybersecurity company specializing in Application Security, founded in 2018 and headquartered in Coquitlam, Canada. It has raised $2.88M in total funding and was acquired by Finite State in 2024.
MergeBase provides software composition analysis and software supply chain security solutions focused on open-source component management. The company's platform enables organizations to generate and manage Software Bills of Materials (SBOMs) in formats including CycloneDX and SPDX. Their technology integrates into build pipelines to automatically create SBOMs during application builds and identifies vulnerabilities in open-source components. The platform addresses the challenge that 80-90% of modern applications consist of open-source components, where traditional risk management frameworks struggle to apply. MergeBase offers capabilities to analyze which vulnerabilities actually impact application security, helping developers prioritize remediation efforts. The solution supports VEX (Vulnerability Exploitability Exchange) annotations to provide additional context about whether specific vulnerabilities affect particular applications. MergeBase serves both software vendors who need to produce SBOMs for their applications and buyers who must manage SBOMs from multiple suppliers. The company targets organizations in regulated industries including federal government contractors, financial institutions, and medical device manufacturers, where SBOM requirements are becoming mandatory. Founded in 2018, MergeBase positions its solution around three principles: accuracy and developer productivity, visibility across the software development lifecycle, and simplified compliance management.
Momentum
How MergeBase is trending
Momentum score
Score history appears once we have at least two monthly snapshots.
Pillar breakdown
Pillar breakdown locked
Growth, Market & Financial sub-scores
Valuation
What MergeBase is worth
Estimated valuation
Products
MergeBase's products
Funding
Funding history
See every round, lead investor, and the full capital stack.
Open the full profile on CybersecRadars to see funding history.
Public markets
Stock performance
Privately held
This company isn't publicly traded. Stock performance will appear here after an IPO.
Headcount
Headcount growth
Track hiring velocity, department mix, and seniority shifts.
Open the full profile on CybersecRadars to see headcount growth.
Jobs
Open jobs
Every live posting, hiring pace, and role-level signal.
Open the full profile on CybersecRadars to see open jobs.
Web traffic
Digital presence
Visits trend, bounce rate, engagement, and top countries.
Open the full profile on CybersecRadars to see digital presence.
Tech stack
Technologies
The full stack behind the product — frameworks, clouds, security.
Open the full profile on CybersecRadars to see technologies.
M&A
Acquisitions
Every acquisition this company has made, with dates and amounts.
Open the full profile on CybersecRadars to see acquisitions.
Reviews & sentiment
Employee & product reviews
CEO approval, culture, comp, and detailed product ratings.
Open the full profile on CybersecRadars to see employee & product reviews.
Leadership
Full leadership team
CEO, CxOs, VPs, and every exec with roles.
Open the full profile on CybersecRadars to see full leadership team.
Competitors
Competitive landscape
The complete competitor set with overlap and positioning.
Open the full profile on CybersecRadars to see competitive landscape.
News
Press & news coverage
The most recent mentions, announcements, and media coverage.
Open the full profile on CybersecRadars to see press & news coverage.
Full profile
This public profile is a snapshot
The full CybersecRadars profile of MergeBaseadds funding rounds & investors, valuation estimates, headcount & hiring trends, technology stack, executive moves, and real-time monitoring.
FAQ
Frequently asked questions about MergeBase
When was MergeBase founded?▾
MergeBase was founded in 2018.
Where is MergeBase headquartered?▾
MergeBase is headquartered in Coquitlam, Canada.
How much funding has MergeBase raised?▾
MergeBase has raised a total of $2.88M in total funding.
Is MergeBase public or private?▾
MergeBase is a privately-held company.
What does MergeBase do?▾
MergeBase provides software composition analysis and software supply chain security solutions focused on open-source component management. The company's platform enables organizations to generate and manage Software Bills of Materials (SBOMs) in formats including CycloneDX and SPDX. Their technology…