Endpoint and browser

Cloud-native patch management that remediates endpoints without a VPN or on-prem console.

H1 2026 ARR from six-figure deals grew 275% year over year

Browser-native SSE that gives zero-trust access without a VPN, VDI, or backhauled proxy.

Raised $26M Series B led by Two Bear Capital, October 2025

All-in-one XDR agent for teams that cannot staff a SOC or buy seven point products.

Named Leader and Outperformer in the 2026 GigaOm Radar for XDR

Runtime security built into the firmware of connected devices, robots, and other physical AI, plus build-time firmware analysis mapped to the EU CRA.

Raised $270M at a $1.7B valuation in a round led by Headline, September 2026

Open-source osquery control plane for Mac, Windows, Linux, and phones, cloud or self-hosted.

Raised $27M Series B led by Ten Eleven Ventures, June 2025

AI agents that inventory everything running on employee devices, judge it against company policy, and remove or block what fails.

Emerged from stealth with $180M across seed, Series A, and a Series B led by Sequoia, Cyberstarts, Greenoaks, and Redpoint, July 2026

Consumer browser protection that treats everyday users like they deserve an enterprise SOC.

Raised $80M Series B led by ION Crossover Partners, November 2025

ANSSI-certified French EDR for buyers who cannot put a US cloud agent on sensitive endpoints.

Added Attack Surface Management to its endpoint platform, September 2025

Browser detection and response that watches behavior inside existing Chrome and Edge sessions.

Published The State of Browser Security Report 2026 from production telemetry

Default-deny allowlisting that stops unapproved software and AI agents from running at all.

Raised $190M Series F led by Elephant, July 2026

Vulnerability remediation that actually patches, not another scanner that files tickets.

Named in Forrester's Q1 2026 Proactive Security Platforms Landscape