Security Startups

Data security

DSPM, data detection, and data-access startups that tell you where sensitive data actually lives.

12 companies · ordered by name · no paid placement · About this category

B

Bedrock Data

Menlo Park, United States

  • Series A
  • $35M raised
  • Founded 2023

Metadata lake DSPM that classifies petabyte estates in place, then governs AI access in plain language.

Raised $25M Series A led by Greylock, November 2025

BigID

New York, United States

  • Series D
  • $308M raised
  • Founded 2016

Hybrid DSPM and data intelligence platform for discovery, privacy, and AI risk across cloud and on-prem.

First DSPM vendor to cross $100M in annual revenue, 2024

C

Concentric AI

San Mateo, United States

  • Series B
  • $67M raised
  • Founded 2018

Semantic DSPM that labels unstructured data by meaning, then remediates oversharing on-prem and in the cloud.

Raised $45M Series B led by Top Tier Capital and HarbourVest, October 2024

Cyberhaven

Palo Alto, United States

  • Series D
  • $250M raised
  • Founded 2016

Data detection and response that traces lineage as files move, transform, and hit AI tools.

Raised $100M Series D at a $1B valuation, April 2025

Cyera

New York, United States

  • Series G
  • $2.3B raised
  • Founded 2021

AI-native DSPM that classifies sensitive data, then governs what people and agents can do with it.

Raised $600M Series G at a $12B valuation, June 2026

F

Fortanix

Santa Clara, United States

  • Series C
  • $122M raised
  • Founded 2016

Confidential computing and key management so data stays encrypted while AI and apps use it.

Joined Cisco Secure AI Factory with NVIDIA for Confidential AI inference, June 2026

M

MIND

Seattle, United States

  • Series A
  • $40M+ raised
  • Founded 2023

AI-native DLP and insider risk that classifies, then blocks exfil at the endpoint without a policy farm.

Raised $30M Series A seven months after stealth, June 2025

N

Nightfall AI

San Francisco, United States

  • Series B
  • $60M raised
  • Founded 2018

AI-native DLP for SaaS, endpoints, browsers, and GenAI prompts that learns from investigations.

Launched Nyx, an autonomous DLP copilot, July 2025

P

Privacera

Newark, United States

  • Series B
  • $63.5M raised
  • Founded 2016

Fine-grained data access and AI governance from the team that built Apache Ranger.

Shipped major PAIG updates aligned to the NIST AI RMF, February 2025

R

Relyance AI

San Francisco, United States

  • Series B
  • $50M+ raised
  • Founded 2020

Data-flow DSPM that shows how customer data actually moves through products, vendors, and AI features.

Raised $32.1M Series B led by Thomvest Ventures, October 2024

S

Sentra

New York, United States

  • Series B
  • $100M+ raised
  • Founded 2021

Cloud-native DSPM that discovers, classifies, and readies enterprise data for AI without agents.

Closed $50M Series B, bringing total funding over $100M, April 2025

T

Teleskope

New York, United States

  • Series A
  • $32.2M raised
  • Founded 2022

Agentic data security that classifies with business context and remediates without a ticket queue.

Raised $25M Series A led by M13, total funding $32.2M, November 2025

About this category

About data security

Data security is the category under the most AI-era pressure in this directory: the same index has to describe DSPM inventories, prompt-level egress controls, and warehouse access enforcement in one list.

This index maps every company whose primary product is finding, protecting, or governing sensitive data: discovery and posture, loss prevention and egress control, data access enforcement, privacy processing mapping, and encryption with confidential computing.

Public mega-cap DLP suites stay off this list. Every entry carries a 2024 to 2026 proof-of-life signal recorded with a source link, and membership is taxonomy from the research pass.

What they build

The products here cluster into five shapes. Discovery and posture platforms inventory cloud stores, SaaS, and warehouses, classify content autonomously rather than regex-first, and score who can reach what.

Prevention products follow data in motion and stop the copy, upload, or prompt that would leak it, from browser and endpoint agents to SaaS classifiers with an investigation copilot.

Access enforcement sits in front of warehouses and enforces column-level grants, masking, and purpose controls. Privacy processing platforms instrument applications to map what actually happens to data against what legal promised.

Encryption and confidential-computing platforms keep keys and data-in-use inside hardware enclaves. Eleven of the twelve entries also name an AI-specific surface, from Copilot connectors to prompt policy to AI-readiness checks on training data.

Who this is for

Data protection leads comparing DSPM discovery against prevention-first DLP, privacy counsel who need one shared picture of data flows and promises, platform owners enforcing warehouse-level access, and investors mapping the field by what each product actually enforces.

Who is listed

Included only when a live company has primary category data-security. Cloud posture suites, identity products, and public mega-cap DLP platforms live in their own categories or off this directory.

Inclusion is category-based and verification-gated, not paid placement and not an endorsement of outcomes.

How order works

Listings are the full live catalog slice for this primary category, sorted alphabetically by name. This is not a scored quality ranking and there is no paid placement. Aevral is a disclosed house listing under the same rules (live, no pin). See /transparency.

12 companies. Catalog last reviewed 2026-08-23. Page copy reviewed 2026-09-21. Next review by 2026-10-21. Ordered by name. No paid placement.