Boost Security, a Montreal startup that sells application security software, said on May 6, 2026 that it had acquired Korbit, which built an AI system for reviewing code in pull requests. In the same announcement Boost said it had acquired SecureIQx, a company started by a team from MIT, and raised new funding.
Terms of both acquisitions were not disclosed. Deal databases PrivSource and Dealroom put the new funding at $4 million, from White Star Capital, Amiral Ventures, Accelia Capital and Sorensen Capital. Boost's own post named White Star, Amiral and Accelia as three Canadian early-stage investors joining the company, without giving an amount.
Boost said future posts would feature the founders of Korbit and SecureIQx discussing their technology. It did not say how many people from either company would join, or what would happen to Korbit's existing product and customers.
What Korbit built
Korbit's product reviews pull requests, the proposed code changes developers submit before they are merged, and flags security flaws, performance problems and other defects. It includes what Boost called AI-native SAST, or static application security testing, which looks for vulnerabilities by analysing source code without running it.
According to Boost, the technology has been in development since 2019, has reviewed hundreds of millions of lines of code, and has found, triaged and fixed tens of thousands of issues. Boost said it was impressed by Korbit's ability to reduce hallucinations, the false or invented findings that AI models can produce, and to focus only on high-quality results.
In 2023 Korbit launched what it called an AI Mentor for software engineering, which reviewed code, detected and assigned issues, and explained to engineers how to fix them.
The founder and the funding
Korbit was co-founded by Iulian Vlad Serban, who completed a PhD in AI at Mila, the Montreal AI institute. The company began as a spin-off from the Mila lab led by Yoshua Bengio.
In October 2019 Korbit closed a seed round of more than $2 million (C$2.65 million) led by Khosla Ventures. In May 2023 it raised an $11.3 million Series A, again led by Khosla Ventures, with Jobs for the Future, Desjardins Capital, Global Brains, Alumni Ventures, Merus Capital, Graphite Ventures and True Equity taking part. At the time Serban was chief executive, Ekaterina Kochmar chief AI officer, Andrew Barkett chief technology officer and Brian Kelly president.
The Series A was announced together with the AI Mentor launch, and Khosla Ventures led both of Korbit's reported rounds. Neither Boost nor Korbit said how much of that capital was left at the time of the sale, or how investors fared in the deal. PitchBook dates both of Boost's acquisitions to May 6, 2026.
Why Boost is buying
Boost describes its product as an AI-native platform for defending the software development lifecycle. Earlier in 2026 it released a developer endpoint security product in March and SmokedMeat, an open-source tool for testing attacks on CI/CD pipelines, in April.
The company said it would use the acquired technology for AI-native static analysis, better triage of findings, remembering each organisation's preferences, and prioritising and fixing reachable vulnerabilities in open-source components across a dozen programming languages and in binary files.
SecureIQx contributes the second part of that plan. It analyses both binaries and source code to work out whether a vulnerable component can actually be reached by an attacker, answering the question of whether a flaw needs fixing at all. It uses a mix of small and large language models for this work.
A small budget for two deals
Boost said rapid innovation was needed to keep up with changes in its market, and that it intended to keep moving at that pace. Dealroom noted that with only $4 million in new capital, Boost will have to integrate two acquisitions while competing with rivals that have much larger budgets.
Boost was founded by Zaid Al Hamami and Rajiv Sinha, according to TheSaaSNews, though sources differ on its founding year.
