startupim
Ecosystem Intelligence
Engineering & Technology · Report No. 01

Israeli Startup Tech Stack 2026

What Israeli startups actually build with — programming languages, open-source footprint, cloud-infrastructure maturity and hiring stacks — measured from observed engineering signals rather than self-report.

Published June 2026 Coverage 7,748 companies · 1,195 with code signal Source startupim production corpus + radar
1,195
companies with a matched public GitHub org (of 7,748 radar-tracked)
1.66M
cumulative GitHub stars across their public repositories
47%
of code-active companies ship Go — now ahead of Ruby and C++
67%
of detected hiring stacks run on Greenhouse or Ashby

00Executive summary

This report measures the technology choices of the Israeli startup ecosystem from signals companies emit — public source code, TLS-certificate footprints, mobile-app listings and live job postings — rather than from surveys. It draws on the startupim radar, which continuously fingerprints 12 external data sources per company.

Five findings stand out. (1) The ecosystem is bilingual at its core: JavaScript/TypeScript and Python appear in the public code of nearly every engineering-active company, reflecting a web-front-end + AI/data-back-end default. (2) Systems languages have arrived — Go is now present in 47% of code-active companies and Rust in 15%, concentrated in cyber and infrastructure. (3) Israel's open-source weight is disproportionate: a handful of orgs (Redis, Aqua Security, Wix, Novu, DragonflyDB) anchor 1.66M stars. (4) Infrastructure is maturing — one in seven companies exposes a dedicated api. host and nearly one in ten runs a public staging. environment. (5) Hiring tooling has consolidated onto modern, developer-first ATS platforms, with Greenhouse and Ashby alone covering two-thirds of companies that are actively recruiting.

Read coverage honestly. Signals are observed, not exhaustive: 1,195 companies expose a matchable public GitHub org and 322 expose a detectable applicant-tracking system. Percentages are stated against those denominators, not the whole ecosystem. A company building entirely in private repositories is invisible to the code lens — so these figures describe the publicly observable Israeli stack, which skews toward infrastructure, dev-tools and OSS-forward firms.

01The language core: JS/TS + Python, with Go breaking out

Across the 1,195 companies with a matched public GitHub organisation, we counted the languages present in each org's repositories (presence per company, not lines of code). Markup and config languages (HTML, CSS, Shell, Dockerfile) are excluded from the ranking below as non-application code.

Programming-language presence — share of code-active companies (n = 1,195)
JavaScript
40%
Python
38%
TypeScript
27%
Java
21%
Go
19%
Ruby
13%
C++
12%
C#
9%
Swift
7%
Rust
6%
Kotlin
5%
Source: startupim radar sources.github.languages, June 2026. Percentages are share of the 1,195 companies with a matched public org. Companies typically use several languages, so columns do not sum to 100%.

The shape is unmistakably modern-web plus data/AI. JavaScript (40%) and Python (38%) run nearly neck-and-neck, and once TypeScript (27%) is folded in, the JS family is the most common technology in the ecosystem. Python's strength is the tell of an AI-heavy generation — it is the default for model, data and ML-tooling work. The most consequential shift versus the prior generation's LAMP/Java defaults is the rise of Go (19%), which has overtaken Ruby and C++, and the emergence of Rust (6%) from a rounding error to a real cohort.

What this means. A founder hiring in 2026 should assume a TypeScript front end and a Python or Go back end as the ecosystem default. Go and Rust skills are now a genuine differentiator in the talent market, not a niche — and, as the next section shows, they cluster heavily in cyber and infrastructure.

02Stacks diverge by sector

Joining the code signal to each company's primary sector reveals that the "default stack" is really several stacks. The heat-table below shows, within each sector's code-active cohort, the share of companies using Python and Go.

Language adoption within sector — % of the sector's code-active companies
SectorCode-activePythonGoSignature
Business / Enterprise Software440 40% 23%TypeScript-forward SaaS
Cyber Security196 52% 30%Go + Python, Rust-curious
Health Tech & Life Sciences119 19% 10%Mixed, app-layer JS
Fintech & Insurtech103 30% 14%JVM + TypeScript
Media & Entertainment Tech81 28% 12%TypeScript-led
Industrial Technologies75 48% 8%Python + C/C++ embedded
Automotive & Mobility44 30% 18%C++/Python + Go services
Source: startupim radar GitHub signal joined to startupim.companies.primary_sector_name, June 2026. "Code-active" = companies in the sector with a matched public GitHub org.

Cyber Security is the standout. It is the most Go-heavy sector in the ecosystem (30% of its code-active companies), the most Python-dense (52%), and home to the largest concentration of Rust adopters — the signature of a sector building high-performance agents, scanners and network tooling. Industrial and Automotive retain a C/C++ embedded core with Python for data and modelling, while Fintech keeps a conservative JVM lean alongside TypeScript front ends.

What this means. "The Israeli stack" is sector-specific. Cyber and infrastructure startups compete for Go/Rust systems engineers; enterprise-SaaS and media compete for TypeScript talent; health and industrial blend domain-specific languages with a Python data layer. Talent strategy should be read off the sector, not the ecosystem average.

03An outsized open-source footprint

Israeli companies punch far above their number in open source. The public repositories of matched orgs carry 1.66 million GitHub stars in aggregate, with a long tail anchored by a small set of globally-recognised projects.

Selected Israeli open-source anchors — cumulative GitHub-org stars
Redis
220k
Aqua Security
80k
Appwrite
68k
Wix
49k
Novu
41k
DragonflyDB
31k
Source: startupim radar sources.github.total_stars / top_repos, June 2026. Stars are summed across each matched org's public repositories. Selection illustrates the OSS-anchor tail; it is not a ranking of company value. Flagship repos include redis, trivy (Aqua), appwrite, react-native-navigation (Wix), novu and dragonfly.

The pattern is strategic, not incidental. Israeli infrastructure and dev-tools companies routinely use open source as a distribution and credibility channel — Redis (in-memory data), Aqua's trivy (container scanning), Appwrite (backend-as-a-service), Novu (notifications) and DragonflyDB (a modern Redis-compatible store) are each category-defining projects that seed a commercial business. For an ecosystem its size, this is a remarkable density of widely-adopted OSS.

What this means. Open-source traction is a leading indicator worth tracking: it precedes enterprise revenue and signals developer pull. The radar's star-velocity and last_push fields make it possible to spot the next anchor before it shows up in funding data.

04Infrastructure maturity, read off the certificate transparency log

Public TLS certificates leak the shape of a company's infrastructure. Of 4,159 companies with usable certificate-transparency data, we bucketed observed sub-domains to gauge how many run dedicated API, application, staging, development and status-page environments.

Dedicated environment present — share of companies with certificate data (n = 4,159)
api.*
14%
app.*
13%
dev.*
11%
docs.*
7%
staging.*
9%
status.*
6%
Source: startupim radar sources.crtsh.buckets (crt.sh certificate-transparency aggregation), June 2026. A bucket counts a company once if any matching sub-domain has ever appeared in a logged certificate.

The presence of an api. host (14%) and an app. host (13%) marks a genuinely product-shipping company with a separated service tier. The roughly 1-in-10 rate of public staging. and dev. environments indicates a maturing CI/CD culture — separate pre-production environments are no longer the preserve of late-stage firms. A public status. page (6%) is a small but telling signal of operational seriousness and enterprise-grade SLAs.

What this means. Certificate transparency is an under-used, free maturity gauge. The api./staging./status. trio separates a company that ships a product on real infrastructure from one that runs a single marketing site — useful for diligence, sales targeting and competitive mapping.

05The hiring stack has consolidated

For the 322 companies where a live applicant-tracking system was detected from the careers page, the choice of ATS is itself a stack signal — and it has consolidated onto modern, developer-first platforms.

Applicant-tracking system in use — share of companies with a detected ATS (n = 322)
322 HIRING NOW
Greenhouse — 120 · 37% Ashby — 95 · 30% Recruitee — 36 · 11% Lever — 30 · 9% Personio — 26 · 8% Other¹ — 15 · 5%
Source: startupim radar sources.jobs.ats, June 2026. Detected via careers-page scrape or direct ATS probe. ¹Other = SmartRecruiters (6), BambooHR (5), Breezy (3), Comeet (1).

Two platforms — Greenhouse and Ashby — account for two-thirds of all detected hiring stacks. Ashby's strong second place is itself a generational marker: it is the newer, analytics-first system favoured by AI-era startups, and its 30% share signals how quickly the cohort adopts modern developer-facing tooling. Notably, the homegrown Israeli ATS Comeet now appears only once in the detected set — local startups overwhelmingly reach for global platforms.

What this means. The live-jobs signal is a real-time demand gauge: which companies are hiring, how many roles, and how remote-friendly. Cross-referenced with the language data, it lets a recruiter or investor see not just that a company is scaling its engineering team, but into which stack.

06Outlook for 2026–27

Three trajectories follow from the data. First, Python keeps rising on the back of the AI build-out — the same "picks-and-shovels" wave (security for AI, agentic infrastructure, inference tooling) that is drawing the ecosystem's capital is a Python- and Go-shaped demand on the talent market. Second, systems languages consolidate: Go is now table-stakes for infrastructure and cyber, and Rust's cyber-led cohort is the one to watch for the next leg of growth. Third, infrastructure maturity becomes a moat signal — the separation of API, staging and status environments, visible for free in certificate logs, will increasingly distinguish enterprise-ready companies from the rest.

The broader market context corroborates the engineering picture: cloud-native adoption is approaching ubiquity (82% of container users now run Kubernetes in production) and platform-engineering practices are projected to reach ~80% of organisations in 2026 — the global backdrop against which the dedicated-environment and Go/Rust trends above should be read.