Security certifications have historically functioned as a paperwork exercise. Companies collect evidence across disjointed tools, pass an annual review, and remain exposed to attacks. Oneleet is taking the opposite route: integrating offensive security, vulnerability testing, and compliance automation into a single platform so real security drives the audit.
The Wilmington, Delaware-headquartered company reached $9 million in annual recurring revenue and raised a $33 million Series A round led by Dawn Capital, reporting $35 million in total funding. Backers in the round include Y Combinator, FPV Ventures, Network.VC, Dropbox co-founder Arash Ferdowsi, and former Snowflake and ServiceNow chief executive Frank Slootman. Two-thirds of new additions to Y Combinator's portfolio companies now use Oneleet's software.
Fixing Compliance Theater
Oneleet builds an all-in-one security compliance platform designed to support standards including SOC 2, ISO 27001, HIPAA, and GDPR. Instead of operating purely as an evidence-collection dashboard, the system provides native defensive and offensive tools. Features include continuous penetration testing, static code scanning, cloud security posture management, endpoint monitoring, attack surface monitoring, and security awareness training.
As CEO Bryan Onel told TechCrunch, existing compliance tools often produce "compliance theater" where teams end up "certified on paper, but still vulnerable to all kinds of attacks." By embedding the scanning, tooling, and formal penetration testing inside the same environment, Oneleet prepares companies for third-party audit partners without requiring teams to stitch together independent vendors.
In September 2026, AI document processing vendor Parseur completed its SOC 2 Type II compliance audit through Oneleet, as reported by Yahoo Finance. The engagement combined annual penetration testing, continuous security monitoring, and verification by independent auditor Constellation GRC.
Founded by Ethical Hackers
Oneleet was founded in 2022 by husband-and-wife team Bryan Onel and Ora Onel, alongside college friend Erik Vogelzang, graduating from Y Combinator's Summer 2022 batch.
Bryan Onel spent over a decade working as a penetration tester for more than 150 companies. He previously studied artificial intelligence, medicine, and law at Vrije Universiteit Amsterdam. That background in offensive testing revealed how readily certified organizations could be breached during practical assessments. Co-founder Ora Onel transitioned from a background in medical genetics into cybersecurity to build the company's operational foundations.
Technically, the team runs Go and Prisma with PostgreSQL on the backend, alongside TypeScript and React on the frontend. Background workflows and orchestrations rely on Temporal, hosted on Google Cloud Platform using Kubernetes. The engineering group also builds internal AI pipelines for automated threat modeling and policy generation, keeping human security analysts in the loop to review outputs before clients see them.
Remote Engineering and Security Roles
Oneleet employs roughly 50 people and is expanding across technical and security operational teams. Current priorities include hiring engineers to develop automation features and security analysts to guide customers through certification lifecycles.
The engineering organization is hiring for roles such as Fullstack Engineer, AI Implementation ($110,000 - $180,000) and Application Security Engineer ($160,000 - $220,000), which supports candidates across the US, UK, and Netherlands. Product teams are also recruiting a Product Manager and multiple design roles.
On the operations and compliance side, Oneleet is adding specialists to manage client programs and technical evaluations, including a Penetration Testing Coordinator ($50,000 - $90,000) and a senior Security Program Manager ($75,000 - $140,000).
Open Roles at Oneleet
| Role | Location | Work Mode | Salary |
|---|---|---|---|
| Associate Security Program Manager | Remote (US) | Remote | $35,000 – $65,000 |
| Vendor Supply Chain Analyst | Remote (US) | Remote | $60,000 – $80,000 |
| Penetration Testing Coordinator | Remote (US) | Remote | $50,000 – $90,000 |
| Application Security Engineer | US / GB / NL / Remote (US; GB; NL) | Remote | $160,000 – $220,000 |
| Senior Product Designer | Remote (US) | Remote | $130,000 – $165,000 |
| Security Program Manager | Remote (US) | Remote | $75,000 – $140,000 |
| Fullstack Engineer, AI Implementation | Remote (US) | Remote | $110,000 – $180,000 |
| Product Manager | Remote (US) | Remote | $130,000 – $180,000 |
| Senior Product Designer | Remote (US) | Remote | $120,000 – $190,000 |
| Community Event & Engagement Manager - San Francisco, CA | San Francisco, CA, US / Remote (San Francisco, CA, US) | Remote | $100,000 – $150,000 |
