Chainguard — Seed-Stage Profile

Founding Team

Chainguard was founded in 2021 by Dan Lorenc, Kim Lewandowski, Matt Moore, and Scott Nichol — all former Google engineers who created or contributed to the Sigstore project, which has become the de facto standard for software signing and provenance in the open source ecosystem. The founding team's open source credibility and deep expertise in software supply chain security gives Chainguard a unique advantage in community trust and developer adoption.

Product & Technology

Chainguard's primary product is Chainguard Images — hardened, minimal container images designed to have zero known CVEs (Common Vulnerabilities and Exposures). Unlike standard container images from Docker Hub or other registries that frequently contain hundreds of known vulnerabilities, Chainguard Images are rebuilt from source daily and stripped of unnecessary packages and libraries. This approach dramatically reduces the attack surface for containerized applications.

The company also provides Chainguard Enforce, a policy engine for software supply chain governance, and contributes significantly to open source projects including Sigstore, cosign, SLSA, and Wolfi (a Linux distribution designed for containers).

Market Position

Chainguard occupies a strong position in the supply chain security market, which has grown significantly since the SolarWinds (2020) and Log4Shell (2021) incidents demonstrated the systemic risk of software dependencies. Executive Order 14028 and the CISA SBOM requirements have created regulatory tailwinds. Chainguard competes with Snyk Container, Aqua Security, and Anchore, but differentiates through its zero-CVE image approach rather than vulnerability scanning.

Funding History

Chainguard raised a $5M seed round in 2021, followed by a $50M Series A in 2022 led by Sequoia Capital, and a $61M Series B in 2023 led by Spark Capital. Total funding exceeds $116M. The company has progressed beyond seed stage but is included in our database as a reference point for supply chain security category analysis and early-stage trajectory benchmarking.