Seattle, WA – October 21, 2026 – QuestorAI, an application security company building technology to automatically identify and fix software vulnerabilities, today announced a $3 million seed financing led by Paladin Capital Group, a global investor specializing in cybersecurity and advanced technology, with participation from Denver Ventures.
As AI transforms software development, engineering teams can create and deploy code faster than ever before. But that same acceleration is creating a growing challenge for security teams: more code to secure, more vulnerabilities to address, and a remediation backlog that traditional application security tools were not designed to solve. QuestorAI is building an alternative approach – using AI alongside deterministic analysis to move application security beyond simply identifying problems toward automatically fixing them.
“Traditional application security tools largely identify potential vulnerabilities and hand the resulting findings to engineering teams. Engineers must then investigate, validate, prioritize, remediate and test each issue. As AI dramatically increases the speed and volume of software development, that model will become increasingly difficult to scale,” said Graham Calladine, CEO and co-founder of QuestorAI. “Security shouldn’t be another system engineers have to operate. We designed QuestorAI with that in mind. QuestorAI will allow information security to behave more like infrastructure: always there, continuously working and increasingly autonomous.”
QuestorAI’s platform combines deterministic code analysis with targeted use of foundational or locally deployed large language models to understand whether vulnerabilities are exploitable, provide engineers with the context behind an issue, and generate and validate fixes that preserve the intended behavior of the software. As organizations build confidence in the platform, those fixes can increasingly be applied autonomously.
The platform is designed to fit into existing enterprise security and development environments without requiring proprietary rule languages or complex configuration. This allows for organizations to deploy models locally so source code remains within their own environment, while allowing external use cases to minimize the amount of code and context sent for inference. Questor AI is currently working with design partners across major technology companies and regulated enterprises to validate the platform against real-world production codebases.
“AI is fundamentally changing both how software is built and how it must be secured. The volume and velocity of code being produced means enterprises cannot continue relying on a security model that identifies problems faster than engineering teams can fix them,” said Christoper Steed, Chief Investment Officer of Paladin Capital Group. “QuestorAI is building toward a future where remediation itself becomes automated, and the company’s founders – Graham, Rob and Dan – bring an exceptional combination of application security, engineering and product experience to that challenge. We look forward to working with them to bring QuestorAI to companies that are looking for practical, innovative, cybersecurity solutions to protect their businesses and customers.”
The new funding will be used to accelerate development of QuestorAI’s AI-powered analysis and autonomous remediation platform, expand its work with enterprise design partners, and grow the team as the company moves toward broader availability.
About QuestorAI
QuestorAI is an application security company built to remove security toil from engineering teams. Our autonomous remediation platform identifies vulnerabilities that matter, determines whether they can be exploited, generates and validates fixes, and can apply those fixes automatically. Allowing engineers to spend their time building software rather than responding to security tools.
About Paladin Capital Group
Paladin Capital Group is a multi-stage, dual-use investor that specializes in identifying, supporting and investing in innovative companies that develop promising, early-stage technologies to address the critical AI, cyber and deep tech needs of both commercial and government customers. Combining proven investment experience with deep expertise in global security, AI, cyber technology and cutting-edge research, Paladin has invested in more than 90 companies since 2008 and has been a trusted partner to investors, entrepreneurs and governments for over two decades. Founded in 2001, Paladin is headquartered in Washington, D.C., with offices in New York City, Silicon Valley, London and Luxembourg.
For more on Paladin Capital Group, follow us on LinkedIn or visit our website.
