Chainguard Valuation 2026: $3.5B, $892M Raised, and How It Got There

Chainguard's valuation is $3.5 billion, set in an April 2025 Series D round and confirmed again six months later when General Catalyst put in another $280 million at the same price. The company has now raised $892 million in total since October 2021 — and in December 2025, Docker made the exact product Chainguard charges for available for free.

Chainguard sells hardened container images: stripped-down, continuously patched, low-to-zero-CVE versions of the base images most software teams pull from Docker Hub without a second thought. Five former Google security engineers built it after years spent hardening Google's own supply chain, and the market caught up fast — first with Log4j and SolarWinds, then with a wave of 2025 open-source package attacks that made "what's actually inside this container" a boardroom question instead of an engineering one.

Chainguard Valuation: How the Company Reached $3.5 Billion

Chainguard's valuation is $3.5 billion, set by a $356 million Series D that closed in April 2025 and co-led by Kleiner Perkins and IVP. Six months later, General Catalyst's Customer Value Fund added $280 million in growth financing at that same $3.5 billion price, according to GeekWire, bringing total funding to $892 million.

That jump from a $1.12 billion Series C valuation in July 2024 to $3.5 billion nine months later is roughly a 3.1x step-up, and it happened without a single quarter of GAAP profitability disclosed publicly — the story is entirely about growth rate. SecurityWeek's coverage of the Series D noted new strategic checks from Salesforce Ventures and Datadog Ventures, both companies that build or ship a lot of container-based infrastructure themselves.

Five Ex-Google Engineers and a Text Message in Austin

Chainguard was founded in October 2021 by Dan Lorenc, Matt Moore, Kim Lewandowski, Ville Aikas, and Scott Nichols. Lorenc had spent nearly a decade at Google working on securing its internal build and release pipeline and contributing to Minikube, the local Kubernetes tool, where he says he realized how little verification stood between a malicious commit and millions of downstream machines. According to Sequoia Capital's profile of Lorenc, the company started as a text from Matt Moore proposing a startup, sent to Lorenc at a restaurant in downtown Austin in the summer of 2021.

Before founding Chainguard, the team had built Sigstore and SLSA, two open-source supply-chain security standards, at Google — meaning Chainguard wasn't a pivot into security, it was a spinout of the exact standards the founders had already written. Amplify Partners led the $5 million seed round in December 2021, according to TechCrunch's coverage at the time, just weeks before the Log4Shell vulnerability made "what's in your open-source dependencies" a mainstream security question.

What's Actually Driving the Valuation

Chainguard's fiscal 2025 ARR was about $40 million, up from roughly $12.7 million in 2023 and $37 million at the end of 2024, and the company is guiding toward more than $100 million in ARR by the close of fiscal 2026. Growth accelerated after the company broadened Chainguard Images beyond its original niche into a catalog of more than 2,000 hardened base images, which by February 2026 had generated over 500 million unique container build manifests, per company disclosures.

Two external forces are pulling in the same direction. First, the npm ecosystem had a genuinely bad September 2025: the self-propagating "Shai-Hulud" worm compromised more than 500 packages by harvesting maintainer credentials and using them to poison the next set of packages, an incident widely covered in security trade press. Second, the EU's Cyber Resilience Act starts imposing mandatory cybersecurity requirements on digital products, with initial obligations landing in September 2026 — layering onto the SBOM disclosure requirements the U.S. put in place under Executive Order 14028 back in 2021. Neither of those events is Chainguard's doing, but both push enterprise security budgets toward exactly the product category it sells.

One read on this: Chainguard's growth is as much a function of regulatory and threat-landscape timing as it is product execution — the company happened to be selling the answer right as the questions got mandatory.

The Full Funding History, Round by Round

Chainguard's cap table has moved through six rounds in under four years, with the pace of capital raised accelerating sharply after Series C. Sequoia Capital, Amplify Partners, Redpoint Ventures, Lightspeed Venture Partners, Spark Capital, Mantis VC, and IVP all appear across multiple rounds, alongside newer strategic checks from Salesforce Ventures, Datadog Ventures, and General Catalyst.

Sources: Chainguard press releases, PR Newswire, SecurityWeek, GeekWire, Gunderson Dettmer deal announcements, 2021-2025.

Chainguard's Competitive Set Is Getting Crowded

Chainguard doesn't have the hardened-image category to itself. JFrog, Sonatype, and Anchore all sell adjacent software composition analysis and artifact management tools that overlap with parts of Chainguard's pitch, and Snyk covers vulnerability scanning across the broader developer toolchain rather than shipping pre-hardened images outright. Wiz — now a Google subsidiary after its roughly $32 billion acquisition, covered in our breakdown of Wiz's business model — is actually a Chainguard customer rather than a direct competitor today, scanning cloud workloads rather than replacing base images.

The more direct threat arrived in 2025: Docker launched Docker Hardened Images in May 2025, then made its entire catalog of more than 1,000 hardened container images free under an Apache 2.0 license on December 17, 2025, according to TechTarget's reporting. By its one-year anniversary in April 2026, Docker was reporting 500,000 daily pulls across that catalog — meaningful adoption of a free product sitting directly on top of Chainguard's paid one.

What the headline misses

A $3.5 billion price tag on a company with $40 million in ARR is easy to wave off as another AI-adjacent security valuation getting ahead of itself, but the more specific risk here isn't the multiple — it's Docker. Docker Hub already sits upstream of most container workflows, and once its hardened images were free and Apache 2.0-licensed, Chainguard's core free-tier pitch — "we'll give you a cleaner base image than the public one" — stopped being a unique offer for a large slice of the market. Docker still charges for continuous patching SLAs and regulated-industry variants, which is exactly the tier Chainguard also sells, so the two companies are now competing directly on the paid layer, not just the free one.

There's a second, quieter risk: Chainguard's biggest logos increasingly include companies that could plausibly build this in-house. Snap, HPE, and ANZ Bank are all large enough engineering organizations to run their own internal hardened-image pipeline if the economics of buying stopped making sense. Enterprise security sales cycles also run long — six to twelve months isn't unusual for a Series D-stage vendor selling into regulated banks and healthcare systems — which means the $100 million ARR target for fiscal 2026 depends on deals that were likely already in motion well before Docker's free-tier launch, not new pipeline generated after it.