Security startups in the United States

Swarming AI agents that take over the investigation work human SOCs cannot staff.

Raised $130M Series A led by Index Ventures, December 2025

API-native email and SaaS defense that baselines human behavior to catch BEC and account takeover.

Raised $250M Series D at a $5.1B valuation, August 2024

Composable security operations platform that runs detections on data in motion and lets teams pick their own storage and SIEM back end.

Raised $25M in a round co-led by Cheyenne Ventures and AVP, July 2026

Cloud-native patch management that remediates endpoints without a VPN or on-prem console.

H1 2026 ARR from six-figure deals grew 275% year over year

Agentic email security for Microsoft 365 and Google Workspace that judges the intent behind a message instead of matching known scam patterns.

Raised a $36M Series A led by Battery Ventures, July 2026

Workload IAM that issues short-lived, secretless credentials for services, scripts, and AI agents.

Raised $25M Series A led by Acrew Capital, September 2024

AI-native cyber defense platform whose agents handle exposure analysis, detection, investigation and response on top of a security team's existing tools, also offered as managed MDR.

Raised a $7M seed round led by Blumberg Capital, January 2026

Assurance and insurance company for AI agents: it audits agents against its AIUC-1 standard and writes insurance tied to the audit results.

Raised a $40M Series A led by Ribbit Capital, September 2026

AI safety and security company (formerly ActiveFence) that red teams models and runs guardrails for AI labs and enterprises.

Raised $140M led by Apax Digital Funds, August 2026

Open-source Syft/Grype plus enterprise SBOM management for containers and the pipeline that builds them.

Published the 2025 Anchore supply-chain blog series, December 2025

Code-to-runtime ASPM graph that ranks material application risk, not every scanner finding.

Joined Chainguard's Athena coalition and made AutoFix free for OSS maintainers, August 2026

SaaS security posture for Salesforce, ServiceNow, Microsoft 365, and the agents now living inside them.

Reported 43% year-over-year revenue growth and five of the top 10 Fortune 500 as customers, February 2025

Code-to-runtime CNAPP that ranks CVEs by live workload behavior and can stop an exploit without waiting for a patch.

Raised $60M at a $1B-plus valuation, January 2024

Concierge MDR on the Aurora platform, now with its own endpoint prevention.

Launched Aurora Endpoint Security and acquired Cylance from BlackBerry in 2025

Offensive security platform that sends swarms of AI attacker agents against an organization's attack surface to exploit weaknesses and chain them into validated attack paths.

Raised a $255.5M Series B co-led by Andreessen Horowitz and Accel at a valuation above $2.5B, October 2026

Scanner-agnostic ASPM that correlates hundreds of tools into the findings that actually matter.

Raised $16M strategic round, taking total funding to $81M, March 2026

Pipelineless SAST, SCA, secrets, and IaC that scans every push and talks to the developer in Slack.

Shipped PR secrets scanning and secrets-in-HEAD detection, June 2026

AI-native exposure management that models the enterprise network to isolate reachable, exploitable vulnerabilities and produce environment-specific remediation plans.

Raised a $25M Series A led by Index Ventures, following a $10M seed led by Team8, February 2026

Security control validation platform built around MITRE ATT&CK and purple-team testing.

Named among 2026 CTEM and BAS alternatives in independent vendor comparisons

Metadata lake DSPM that classifies petabyte estates in place, then governs AI access in plain language.

Raised $25M Series A led by Greylock, November 2025

Hybrid DSPM and data intelligence platform for discovery, privacy, and AI risk across cloud and on-prem.

First DSPM vendor to cross $100M in annual revenue, 2024

Third-party cyber risk intelligence: rates and monitors vendors from outside-in data, flags which ones a new breach or vulnerability touches, and estimates the financial exposure.

Released an MCP server that exposes its third-party cyber risk platform to AI agent workflows, February 2026

Internet-wide map of exposed infrastructure used for ASM, threat hunting, and exposure management.

Raised $40M Series D plus $30M debt led by Morgan Stanley Expansion Capital, March 2026

Zero-to-low CVE container images and language libraries rebuilt from verified source.

Closed $280M growth round from General Catalyst at a $3.5B valuation, October 2025

Design-led product security agents that review PRDs, architecture, and specs before code exists.

Emerged from stealth with $36M seed and Series A, November 2025

Agentic vulnerability management that investigates findings, identifies system owners, ranks risk in business context and drives remediation through existing team workflows.

Raised a $42M Series A led by Bain Capital Ventures, February 2026

AI SOC investigation platform that triages and investigates alerts autonomously or alongside analysts, covering Tier-1 to Tier-3 work across identity, endpoint, cloud and SaaS.

Came out of stealth with a $21M seed round led by Andreessen Horowitz, July 2024

Browser-native SSE that gives zero-trust access without a VPN, VDI, or backhauled proxy.

Raised $26M Series B led by Two Bear Capital, October 2025

Semantic DSPM that labels unstructured data by meaning, then remediates oversharing on-prem and in the cloud.

Raised $45M Series B led by Top Tier Capital and HarbourVest, October 2024

AI-native identity platform that folds IGA, IAM, and PAM into one access control plane.

Raised $79M Series B led by Greycroft, October 2025

MSSP-first agentic SOC that wires intel, hunting, detections, investigation, and response into one loop.

Raised $25M Series A led by SYN Ventures, January 2025

IAST, RASP, and ADR that instrument the running app so exploits are seen in the code path, not the packet.

Published the Software Under Siege 2025 report on application-layer attacks, August 2025

AI SAST that hunts broken auth and business-logic bugs, then writes a patch developers can merge.

Raised $2.6M seed led by Shorooq, with Y Combinator participating, November 2024

Security platform that embeds guardrails inside AI coding agents such as Cursor, Claude Code and Codex, preventing vulnerabilities while code is being generated.

Raised a $25M Series A led by Felicis at a $200M valuation, March 2026

Machine identity provider for operational technology, factories, and defense networks that still run API keys.

Raised $18M Series A-1 led by SineWave Ventures, April 2025

Agent-native SIEM and AI SOC that stores and searches logs, runs Python detections, and investigates alerts with agents the security team defines and controls.

Raised a $7.4M seed round led by Andreessen Horowitz, March 2026

Autonomous AI agents that investigate every security alert and threat advisory using an organization's own tools and data, deployed on-premises, in private cloud or air-gapped.

Launched with $30M, a $25M Series A led by Menlo Ventures plus a $5M seed led by Tola Capital, March 2025

Data detection and response that traces lineage as files move, transform, and hit AI tools.

Raised $100M Series D at a $1B valuation, April 2025

ASPM with its own SAST, SCA, and pipeline scanners, plus a graph for AI-written code.

Named a Leader in Gartner's first Magic Quadrant for Software Supply Chain Security, June 2026

Seedless external attack-surface discovery that finds cloud, subsidiary, and third-party assets attackers can actually reach.

Named a Leader and Outperformer in the 2026 GigaOm Radar for Attack Surface Management

AI-native DSPM that classifies sensitive data, then governs what people and agents can do with it.

Raised $600M Series G at a $12B valuation, June 2026

One workforce graph over employees, AI agents, and other nonhuman identities, and what each can reach.

Emerged with a $25M Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund at a valuation above $100M, September 2026

All-in-one XDR agent for teams that cannot staff a SOC or buy seven point products.

Named Leader and Outperformer in the 2026 GigaOm Radar for XDR

Security data pipeline that collects, trims, enriches, and routes telemetry before it reaches the SIEM or data lake.

Raised a $40M Series B led by Insight Partners, July 2026

SPIFFE-based non-human IAM that replaces static secrets with short-lived workload identities.

Raised $30.75M Series B led by XYZ Ventures, October 2025

Applied AI security lab whose agents find and fix weaknesses across code, dependencies, secrets and running applications for software engineering and security teams.

Raised an $80M Series B led by Meritech Capital, March 2026

Customer identity workflows that let product teams ship login, MFA, and agent auth without an IAM rebuild.

Closed $35M seed extension, $88M total, September 2025

SaaS data security that watches sharing in Google Workspace, Slack, and Box, then revokes it automatically.

Launched Dot, an AI SaaS data security assistant, June 2025

Developer-first secrets platform that syncs env vars, rotates them, and logs who changed what.

Launched Change Requests for approved secret edits, October 2024

Software-only AI SOC analyst that investigates alerts without a managed service attached.

Raised $37M Series B led by Theory Ventures, July 2025

Self-serve DMARC, SPF, and DKIM platform for teams that need enforcement without a mail consultant.

Raised $20M Series A led by Radian Capital, September 2024

Exposure management that predicts which vulnerabilities will be exploited, using a global model plus one trained on each customer's environment.

Raised a $25M Series A led by Brightmind Partners, July 2026

Reachability-first AppSec: SAST and SCA that only page you when the vulnerable function is actually called.

Raised $93M Series B led by DFJ Growth, April 2025

Real-time knowledge graph plus Exabot agents that investigate and stop attacks as they happen.

Raised $125M Series B at a $725M valuation, May 2026

Vendor-agnostic MDR that works on the SIEM and EDR you already bought.

Launched MDR coverage for the full AI attack surface, August 2026

Product and firmware SBOM platform for the devices you buy and the binaries you did not compile.

Won Cybersecurity Stars award for firmware security leadership, June 2026

Open-source osquery control plane for Mac, Windows, Linux, and phones, cloud or self-hosted.

Raised $27M Series B led by Ten Eleven Ventures, June 2025

Confidential computing and key management so data stays encrypted while AI and apps use it.

Joined Cisco Secure AI Factory with NVIDIA for Confidential AI inference, June 2026

Frontier-lab red teaming (Shade) and runtime defense (Cygnal) trained on unpublished attacks.

Raised $40M Series A co-led by Wing and Madrona, May 2026

Governs how employees and AI agents use AI tools, classifying each interaction with small language models and stopping sensitive data from leaking without banning AI outright.

Raised a $50M Series B led by Crosspoint Capital Partners, October 2026

Model scanner, attack simulation, and runtime firewall for agentic, generative, and predictive AI.

Raised a $100M Series B led by Delta-v Capital, September 2026

NodeZero autonomous pentest that exploits live networks the way an attacker would, continuously.

Raised $250M Series E at a $2B-plus valuation, August 2026

Managed EDR, identity, and SIEM for businesses that do not run a 24/7 SOC.

Surpassed $250M ARR and 270,000 businesses protected, July 2026

Open-source secrets manager you can self-host or run as SaaS, now adding agent-safe credential proxying.

Raised $16M Series A led by Elad Gil, June 2025

Forensic-grade AI SOC that investigates 100% of alerts, including the low-severity ones MDR skips.

Expanded AI SOC platform for teams outgrowing MDR, March 2026

AI email security that mixes automated remediation with a network of admin-reported phishing.

Launched Winter 2026 agentic release with Red Teaming, Phishing SOC, and Simulation agents, March 2026

Enterprise browser that embeds DLP, ZTNA, and last-mile control into Chromium instead of another VDI farm.

Raised $250M Series E at a $4.8B valuation, March 2025

Cloud directory that binds workforce identity, devices, and access without living on Active Directory.

Acquired Breez to add identity threat detection, October 2025

Browser detection and response that watches behavior inside existing Chrome and Edge sessions.

Published The State of Browser Security Report 2026 from production telemetry

Identity and access management for AI agents, replacing static secrets and API keys with short-lived, task-scoped tokens issued at runtime for teams running agents in production.

Came out of stealth with $38M across an $8M seed co-led by Andreessen Horowitz and Boldstart Ventures and a $30M Series A led by Acrew Capital, October 2025

Browser-native AI SOC analyst that learns how a security team actually investigates alerts through a browser extension, then automates those workflows with or without supervision.

Came out of stealth with $38M in seed and Series A funding, with the Series A led by Coatue, July 2025

Runtime API and AI security with eBPF visibility, agentless discovery, and inline protection that stays off the data path for privacy.

Shipped Launch Week 2026 with AI Firewall, AI Gateway, and MCP discovery and testing, February 2026

AI-driven lineage of every component, including the ones hiding in firmware and public-sector stacks.

Raised $20M Series A co-led by Prosperity7, Neotribe, and Hitachi, July 2024

Network-level control over how employees and autonomous agents use AI tools, assessing each interaction's risk and enforcing policy in real time without endpoint changes.

Raised an $18M seed round led by Team8, December 2025

Autonomous IGA that reviews, provisions, and rightsizes access for people, NHIs, and AI agents.

Launched Identity Agent Force to govern human, NHI, and AI access, June 2026

SBOM and AIBOM intelligence so you can actually use the bills of materials you generate.

Raised $15M Series A led by Ensemble VC, April 2025

Detection and response for AI agents on employee endpoints: maps what each agent touches, baselines its behavior, and stops the ones that go rogue.

Raised an $8M seed round led by Costanoa Ventures, March 2026

Workspace security for Google and Microsoft 365 that assumes the mailbox will get owned and limits the blast.

Published original analysis of the May 2026 Composio Gmail OAuth token breach, June 2026

AI-native DLP and insider risk that classifies, then blocks exfil at the endpoint without a policy farm.

Raised $30M Series A seven months after stealth, June 2025

Cloud, SaaS, identity, and AI detection and response with a forensic lake built for attacks that never touch an endpoint agent.

Raised $30M Series B led by SYN Ventures, January 2025

Deepfake voice and voice fraud detection for live calls, analyzing the audio itself to flag cloned voices, vishing, and caller impersonation.

Raised $25M led by Future Ventures, September 2026

Endpoint sensor that inventories AI agents, MCP servers, and extensions on employee machines and enforces allow, block, or approve policies on their actions.

Emerged from stealth with $100M, including a $75M Series A led by Andreessen Horowitz and Bessemer Venture Partners, July 2026

Firmware and binary SBOM that unpacks what vendors actually shipped, not what the datasheet claimed.

Raised $10M Series A, taking total funding to about $25M, April 2025

AI-native DLP for SaaS, endpoints, browsers, and GenAI prompts that learns from investigations.

Launched Nyx, an autonomous DLP copilot, July 2025

AI-SPM, agent access control, red team, and AI-DR in one control plane for homegrown and SaaS agents.

Raised $100M Series B led by Evolution Equity Partners, July 2025

SaaS identity and agent governance inside the third-party apps where work actually happens.

Raised $85M Series D at $1.1B valuation, August 2026

Policy-as-code access control plane for employees, service accounts, and AI agents.

Raised $23M and hired a new product bench, June 2026

Agentless CNAPP that SideScans cloud disks and APIs for the full estate without installing a workload agent.

Named a Strong Performer in The Forrester Wave: Cloud Native Application Protection Solutions, Q1 2026

Prompt-to-runtime AppSec that tries to show only the 5 percent of findings that can actually breach you.

Raised $60M Series B led by DTCP, taking total funding to $94M, May 2025

Cloud IGA and PAM that answers who or what can touch production, then enforces it at runtime.

Closed $15M Series A led by SYN Ventures, September 2024

Third-party cyber risk platform that combines external attack surface scans with supplier questionnaires, now with a module that prices supplier risk in dollars.

Launched Cyber Risk Quantification to put a dollar value on supplier cyber risk, August 2026

Automated security validation that actually exploits attack paths inside the customer's network.

Raised $60M Series D led by Evolution Equity Partners, March 2025

Breach-and-attack simulation plus autonomous pentest that scores whether controls actually stop the attack.

Raised $45M Series C to lead adversarial exposure validation, September 2024

Inventory, agentic red team, and self-improving runtime guardrails for the agent lifecycle.

Named a 2026 Gartner Cool Vendor in AI Software Security

Agentic AppSec that triages scanner noise and opens mergeable fix PRs in your house style.

Raised $15M seed led by Decibel and Wing VC, May 2025

Agentic product security platform that reviews planned features for design risk before code is written, then guides and verifies the fixes engineering delivers.

Raised a $20M Series A led by Scale Venture Partners, December 2025

Fine-grained data access and AI governance from the team that built Apache Ranger.

Shipped major PAIG updates aligned to the NIST AI RMF, February 2025

Agentic SOC platform covering investigation, hunting, and detection engineering in one mesh.

Raised $30M Series A led by Accel, July 2025

Browser-native ITDR that stops phishing, token theft, and account takeover where the session lives.

Raised $30M Series B led by Redpoint Ventures, April 2025

Behavioral runtime CDR for Kubernetes and AI workloads, fingerprinting what a cluster should do so zero-days show up as drift.

Raised $14M Series A, February 2025

Autonomous exposure remediation platform whose AI Security Engineer removes exploitable paths and predicts business impact before any fix is applied.

Raised a $20M Series A led by Acrew Capital, March 2026

SaaS and agent security that maps every app, identity, and AI connector, then remediates the risky ones.

Raised $30M Series B, total funding $85M, February 2026

Runtime security for the AI agents enterprises build themselves, using a sidecar that records and polices agent actions inside the customer's own cloud.

Raised a $25M Series A co-led by Glilot Capital and Sienna Venture Capital, October 2026

Data-flow DSPM that shows how customer data actually moves through products, vendors, and AI features.

Raised $32.1M Series B led by Thomvest Ventures, October 2024

MCP gateway plus identity, observability, and threat detection for enterprise agents.

Emerged from stealth with $11M seed from Khosla (Keith Rabois) and Felicis, November 2025

Cyber risk quantification platform that added an agentic CTEM loop on top of CRQ and TPRM.

Raised $70M Series C and launched a fully autonomous CTEM offering, July 2025

Runtime API security that discovers shadow and zombie APIs, then spots business-logic abuse in live traffic.

Published a year of monthly API and AI security releases, December 2025

Rules-plus-AI SAST, SCA, and secrets that developers run in seconds and AppSec can actually tune.

Raised $100M Series D led by Menlo Ventures, February 2025

Identity threat detection and forest recovery for Active Directory, Entra ID, and Okta.

Secured $125M growth financing at a $1B+ valuation, June 2024

Cloud-native DSPM that discovers, classifies, and readies enterprise data for AI without agents.

Closed $50M Series B, bringing total funding over $100M, April 2025

Runtime identity protection that puts MFA and least privilege on systems IAM vendors leave naked.

Acquired Fabrix Security for autonomous runtime identity security, April 2026

Self-improving AI SOC that unifies defense, hunting, and offense on one agent family.

Named to the CB Insights AI 100, May 2026, after 15x customer growth in 2025

Internet-scale IPv4/IPv6 discovery that maps what an attacker can actually see of you.

Launched new product capabilities for AI-driven attack-surface change, December 2025

Private CA and device identity so internal TLS, SSH, and laptops get short-lived certificates instead of passwords.

Published hardware-bound device identity essay, May 2026

Developer-first SAST, SCA, container, and IaC platform now wrapping AI agents and models too.

Launched Evo Agentic Development Security to govern coding agents, June 2026

Behavioral SCA that blocks malicious packages at install time, before a CVE exists.

Raised $60M Series C at a $1B valuation led by Thrive Capital, May 2026

Cloud permissions firewall that enforces least privilege on humans, machines, and AI identities using native AWS, Azure, and GCP controls.

Reported 4x ARR growth as Cloud Permissions Firewall adoption surged, January 2026

Developer-first API DAST that runs in CI so AI-generated endpoints get tested before they ship.

Raised $12M strategic round from Sapphire and Costanoa, total $47.3M, May 2025

Discover, adversarially test, and kill-switch AI agents and MCP connections in production.

Raised $64M Series A, taking total funding to $85M, June 2026

Agentic email security with open detection rules and AI that writes new coverage in hours.

Raised $150M Series C led by Georgian, October 2025

Agentic platform that builds a business context graph from security, identity, IT and HR signals, then prioritizes and closes exposure gaps with human oversight.

Launched with $57M in funding led by Accel, March 2026

Runtime CNAPP built on kernel-level system calls, Falco detections, and AI agents that act inside the tools you already run.

Named a Leader in The Forrester Wave: Cloud Native Application Protection Solutions, Q1 2026

Human-plus-AI cloud remediation that closes CNAPP findings without breaking the workload that owns them.

Raised $12M Series A, September 2024

Infrastructure identity for SSH, Kubernetes, databases, and MCP servers without standing secrets.

Launched Beams trusted runtimes for AI agents, March 2026

Agentic data security that classifies with business context and remediates without a ticket queue.

Raised $25M Series A led by M13, total funding $32.2M, November 2025

AI-native MDR that triages every alert in under a minute, with humans on the loop.

Raised $250M Series B led by Crosspoint, March 2026

Default-deny allowlisting that stops unapproved software and AI agents from running at all.

Raised $190M Series F led by Elephant, July 2026

Calico-powered Kubernetes network security and microsegmentation, plus Lynx for governing AI agent calls on the cluster.

Shipped the Winter 2026 Calico Cloud release with an AI assistant and multi-cluster traffic observability, March 2026

Verified secret scanning that proves a leaked key still works, then helps you kill it.

Raised $25M Series B led by Intel Capital and a16z, November 2025

Runtime-first CNAPP that ranks cloud risk from what is actually running, not from a static CVE dump.

Raised $250M Series B at a $1.5B valuation, January 2026

Access graph that shows what every identity can actually do, not just which group it sits in.

Raised $108M Series D at $808M valuation, April 2025

Vulnerability remediation that actually patches, not another scanner that files tickets.

Named in Forrester's Q1 2026 Proactive Security Platforms Landscape

Continuous trust tests so enterprise agents stay reliable after they leave the lab.

Raised $17M Series A led by BrightMind Partners, November 2025

Inline API and agent security that blocks abuse in real time instead of paging after the request lands.

Raised $55M Series C led by Toba Capital, July 2025

Observe, control, and protect employees, models, apps, and agents from one AI security plane.

Raised $58M led by Sound Ventures, January 2026

Enterprise identity APIs so product companies can ship SSO, SCIM, and audit without becoming an IAM vendor.

Raised $100M Series C at $2B valuation, March 2026

Autonomous offensive security platform that runs real attacks against applications to find vulnerabilities and proves each one through exploitation, for security teams testing continuously.

Raised a $120M Series C led by DFJ Growth and Northzone in March 2026, then added a $35M extension, May 2026

CTEM that proves which CVEs are exploitable, then mitigates with the controls you already own.

Raised $60M Series C led by Menlo Ventures, December 2025

Agent security that watches the decision, not just the prompt, across SaaS, cloud, and endpoint.

Raised $125M Series C led by Norwest, August 2026

AI-native SAST for business logic, auth bypasses, and chained exploit paths, with generated patches.

Named an RSAC 2026 Innovation Sandbox Top 10 finalist