Security Startups

Cotool

Agent-native SIEM and AI SOC that stores and searches logs, runs Python detections, and investigates alerts with agents the security team defines and controls.

Proof of life. Raised a $7.4M seed round led by Andreessen Horowitz, March 2026

About Cotool

Cotool describes itself as an agent operating system for detection and response teams. It stores logs for agent-driven search and can also query data held in other systems through federated search.

Detections are Python code that teams can read and edit, run continuously against live log streams in a secure sandbox.

Response agents are defined once in plain language with their objectives and tools, run investigations across alerts with human approval steps, and return an evidence trail. False positives found during response feed back to tune upstream detections.

The company says it is in production at Ramp, Elise AI and other security teams, with more than 50,000 agent runs completed.

Investors

Andreessen HorowitzWndrCoY CombinatorHomebrew
Work at Cotool? Link to this listing

Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.

<a href="https://securitystartups.com/companies/cotool"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>