Provally Raises Seed Funding to Cut False Positives in Code Security Analysis


Provally, a South Korean AI-powered cybersecurity startup, has closed a seed funding round. The investment amount and valuation were not disclosed.

The round was led through Geek’s School, a tech founder accelerating program operated by Bluepoint Partners.

Provally is tackling one of the most persistent pain points in software security: the overwhelming rate of false positives generated by traditional static application security testing (SAST) tools. Because conventional tools analyze code without actually executing it, they routinely flag issues that turn out to be harmless — producing false positive rates between 60% and 80%. Security teams end up spending more time chasing phantom alerts than addressing real threats.

Provally’s core product, AutoProof, takes a different approach. It uses AI to generate actual exploit code and runs it in an isolated environment to verify whether a vulnerability is genuinely exploitable. The result: a false positive rate reduced to around 2%.

The company was co-founded by Gwangjun Choi, CEO, and Hosu Choi, CPO — both offensive security veterans from S2W, a cyber threat intelligence firm. The founding team has a track record of discovering zero-day vulnerabilities in software from Microsoft, Samsung, and Naver, giving them an attacker’s perspective that now informs how they build defensive tools.

During the Geek’s School program, Provally signed its first paid contract with a securities firm, validating early market demand. The broader environment is also working in the company’s favor. Regulations such as PCI DSS 4.0 and NYDFS 500 are increasingly mandating source code static analysis, while a separate study found that roughly 45% of AI-generated code contains security flaws — a structural tailwind for the application security market, which is forecast to grow at an annual rate of 15–20%.

“Through Geek’s School, the Provally team rapidly translated their offensive security expertise into a competitive product, and the financial sector contract speaks for itself,” said Hwi-jae Ahn, investment analyst at Bluepoint Partners. “With global regulations tightening and AI-generated code proliferating simultaneously, this is the most critical window of opportunity for Provally.”

Share

Leave a Reply

Your email address will not be published. Required fields are marked *