Build38

High-Level Overview

Build38 is a Munich-based cybersecurity company founded in 2018 that develops advanced mobile application security solutions, including in-app protection, AI-driven active hardening, and cloud-based threat intelligence.[1][2][4][5] Its Trusted Application Kit (T.A.K) platform protects apps across industries like banking, digital identity, healthcare, automotive, finance, and public transport, enabling rapid market entry while ensuring compliance with standards such as GDPR, eIDAS 2, PCI-MPoC, and BSA/AML.[1][3][5] Serving B2B and B2C clients globally from offices in Germany, Spain, and Singapore, Build38 has raised $17.55M (including a €13M Series A in 2023 led by Tikehau Capital), protects over 200M endpoints, and supports 50 customers across four continents with a team of 55 employees.[1][2][3][4]

The platform solves critical problems in a zero-trust mobile environment, such as app tampering, data theft, fraud, and regulatory non-compliance, by integrating three layers of cloud-augmented security without requiring in-house experts.[4][5] This allows businesses to deploy protection in minutes, monitor threats via a web console, automate responses, and integrate with backends via REST APIs, reducing total cost of ownership while future-proofing for Android 4.4+ and iOS 8+.[5]

Origin Story

Build38 emerged from a vision to secure mobile apps and online services in an increasingly hostile threat landscape, going beyond traditional runtime application self-protection (RASP).[4] Founded in 2018 by a team of eight security experts—hence the "38" in the name—the company started operations across three countries: Germany, Spain, and Singapore.[2][4] Key founders include Christian Schläger (Co-founder & CEO), Joaquin M. Fernandez (Co-founder & COO), Pedro Hernández (Co-founder & CRO), Torsten Leibner (Co-founder & Head of Product Management), and Marc Obrador (Co-founder & CTO), bringing deep expertise in security, development, and product management.[2]

Early traction came quickly, with Giesecke+Devrient Ventures (GDV) investing in 2018, followed by strong 2019 performance including single-digit million euro order intake from sectors like automotive, finance, mobility, and digital identity.[2][3] Pivotal moments include exhibiting at RSA Conference 2019 and the 2023 €13M Series A to scale its threat intelligence platform globally, cementing its position as a European mobile security leader.[1][3]

Core Differentiators

Build38 stands out in the crowded mobile security market through its integrated, developer-friendly platform. Key strengths include:

• Cloud-augmented, three-layer protection: Combines in-app shielding, AI-driven active hardening, and real-time threat intelligence for proactive defense against sophisticated attacks, surpassing traditional RASP.[1][4][5]
• Rapid deployment and ease of use: Post-coding framework enables protection in minutes, no-code SaaS interface for automated rules, and seamless integration with existing stacks via REST APIs—no specialized expertise needed.[5]
• Compliance and customization: Supports emerging standards (e.g., PCI-MPoC, eIDAS 2) with automated attestations, data encryption, key management-as-a-service, and tailoring for sectors like banking and eHealth.[1][5]
• Global scale and reliability: Geo-redundant clouds, +200M endpoints protected across +5K device models, 50 customers on four continents, and a diverse team (31% female, 74% multicultural).[4]
• Cost efficiency: Reduces reliance on security experts, prevents revenue loss from tampering/fraud, and protects brand reputation with minimal overhead.[3][5]

Competitors like Quokka (formerly Kryptowire) and Blue Cedar focus on testing/vetting or self-defending apps, but Build38's AI-cloud hybrid enables faster, broader protection.[1]

Role in the Broader Tech Landscape

Build38 rides the explosive growth of mobile-first digital services amid rising cyber threats, regulatory pressures (e.g., eIDAS 2, GDPR), and developer shortages.[2][5] Timing is ideal as mobile banking, eHealth, digital IDs, and automotive apps proliferate—over 200M endpoints already secured reflect this demand—while attackers exploit app stores as "no-trust zones."[2][4] Market forces like AI-enhanced threats and compliance mandates favor its cloud-native approach, enabling non-GAFA teams to compete.[2]

It influences the ecosystem by accelerating secure digitalization, powering new business models in finance, healthcare, and transport, and bridging security gaps for global providers.[1][3] As a GDV portfolio company, it leverages venture networks to scale European innovation worldwide.[2]

Quick Take & Future Outlook

Build38 is poised for hypergrowth, leveraging its €13M Series A to expand threat intelligence and global footprint, targeting more automotive, finance, and health clients amid escalating mobile threats.[3] Trends like AI-driven attacks, zero-trust mandates, and edge computing will amplify demand for its platform, potentially doubling endpoints protected as it integrates deeper with server-side ecosystems.[1][5] Its influence may evolve from protector to enabler of secure innovation, solidifying European leadership while challenging U.S. incumbents—watch for partnerships and further funding to fuel this trajectory, building trust in mobile's zero-trust future.[4]