Cybersecurity AI Startup Jobs

Defense technology company building autonomous systems and AI-powered defense capabilities to transform military and border security operations.

Defense AI company building autonomous aircraft and AI pilot technology for military applications.

Canonical is the company behind Ubuntu, the world's most widely used Linux distribution, and provides commercial support, cloud infrastructure tools, and enterprise open-source software services. It is privately held and self-funded by founder Mark Shuttleworth, with no external venture funding rounds, and continues to expand partnerships such as its 2025 collaboration with Broadcom.

Cyera is an AI-native data security platform that helps enterprises discover, classify, govern, and protect sensitive data across cloud, SaaS, on-premises, and AI environments. The platform uses machine learning and LLMs for high-precision data classification at scale.

Helsing is a European defense AI company building autonomy software and hardware for democratic nations. It develops real-time battlefield decision software, AI-enabled drones, and sensor fusion systems for military applications across NATO allies. Founded in 2021, it has grown to become one of Europe's most valuable defense tech startups with an $18B valuation.

A defense technology company specializing in counter-drone radar and other defense solutions.

Autonomous penetration testing platform that continuously discovers and exploits attack paths.

Cato Networks develops a cloud-native Secure Access Service Edge (SASE) platform that converges SD-WAN, SSE, ZTNA, and FWaaS into a single global service. Founded in Tel Aviv in 2015 by Shlomo Kramer and Gur Shatz, it serves over 1,000 enterprise customers and is a cybersecurity unicorn valued above $4.8B.

Sonar (formerly SonarSource) builds SonarQube, a code quality and security analysis platform used by over 400,000 organizations to catch bugs, vulnerabilities, and technical debt across 30+ programming languages. The company offers cloud, server, and IDE products along with AI-era capabilities like AI Code Assurance and a remediation agent.

TRM Labs builds blockchain intelligence software for financial institutions, crypto businesses, and public-sector investigators to detect illicit activity and support compliance workflows.

Real-time public safety data platform for law enforcement and first responders.

Socure is an AI-powered digital identity verification, fraud prevention, and risk-decisioning platform used by banks, fintechs, and government agencies. Its RiskOS platform combines identity verification, document/device checks, sanctions screening, and fraud decisioning for over 3,000 customers worldwide.

Cloud email security platform using AI to detect and prevent sophisticated email attacks.

Delivers secure container images and tooling to protect open-source supply chains by default.

Vanta provides an AI-powered Trust Management Platform that automates compliance, security, and risk management for businesses. The company helps organizations earn and prove trust through automated security monitoring and compliance frameworks.

1Password provides password, secrets, and access management software for teams and enterprises, securing credentials, app access, and AI tool usage in one platform.

Saviynt builds enterprise identity security and governance software, offering a cloud-native platform that secures human, machine, and AI-agent identities across cloud and business systems. The company is headquartered in El Segundo, California, and was founded in 2010.

Cogent Security is the first company to deliver an AI taskforce dedicated to vulnerability management, using autonomous AI agents to handle the full lifecycle from threat identification to remediation. The platform autonomously prioritizes critical risks and executes fixes with minimal human oversight, serving dozens of Fortune 1000 companies. Founded in 2024 and incubated by Greylock Partners, Cogent has raised $53 million to date.

TENEX.AI is an AI-native Managed Detection and Response (MDR) company that combines proprietary security AI models with elite human analysts to triage, investigate, hunt, and contain cyber threats in real time. Founded in 2024 and headquartered in Sarasota, Florida, the company reached unicorn status within roughly a year of launch, raising $277M+ across three rounds. Its platform autonomously handles security operations while keeping human accountability at the center.

7AI builds an agentic cybersecurity platform that uses swarming AI agents to automate SOC investigations and response workflows.

Eon is the first cloud backup posture management (CBPM) platform, automating and unifying complex cloud backups into a queryable data lake for fast recovery, compliance, and AI analytics. Founded by the team behind AWS Disaster Recovery, Eon converts idle backup data into an accessible secondary storage layer for enterprise AI workloads.

Tailscale builds identity-first networking software on WireGuard so teams can securely connect users, devices, services, and AI systems across private infrastructure without VPN complexity.

Application security and software supply chain security platform for modern DevSecOps.

Vega offers a lightweight, AI-native security analytics fabric that provides instant access to all data sources without requiring migration, designed to replace traditional SIEM solutions with state-of-the-art security analytics for modern enterprises.

Defense technology company building AI-powered software for national security missions.

Quantum and AI company developing solutions for drug discovery, cybersecurity, and navigation.

Tines provides an intelligent workflow and orchestration platform that lets security, IT, and operations teams automate complex actions, investigations, and AI-assisted processes without heavy custom code.

WorkOS is a developer platform that provides APIs for quickly adding enterprise-grade features like Single Sign-On (SSO), Directory Sync (SCIM), Audit Logs, and User Management to applications. Often described as 'Stripe for enterprise features,' WorkOS powers authentication and identity for the fastest-growing AI companies including OpenAI, Anthropic, and Cursor.

Doppel provides AI-powered digital risk protection that combines brand protection, executive protection, social engineering simulation, and awareness tooling to detect and disrupt impersonation, phishing, and other online threats.

Developer-first software supply chain security platform that detects malicious packages, vulnerable dependencies, and risky open source behavior before code reaches production.

Privacy-first mobile carrier redesigning telecommunications from the ground up. Cape owns and operates its own mobile core and SIMs, providing ultra-private and secure connectivity for enterprises, government, and consumers.

Flock Safety builds AI-powered cameras and software that help law enforcement and communities solve and prevent crime. The platform uses machine learning and computer vision to provide investigative intelligence for cities, neighborhoods, and businesses.

Neo (Neo Security, Inc.) is a Boston-based, 2025-founded startup with an R&D center in Tel Aviv that is defining the 'Agentic Software Control' category: a real-time security control layer for enterprise AI agents and intelligent software. It discovers the AI agents, models, extensions, scripts, and MCP servers running on enterprise devices, inspects their permissions and data access, attributes each action to a person/agent/app, and can allow, block, or pause operations in real time, backed by its Neoverse knowledge base. Founded by former SentinelOne, Wiz, and Palo Alto Networks veterans (CEO Nick Warner, ex-SentinelOne president/COO), it emerged from stealth in July 2026 with $100M from Andreessen Horowitz and Bessemer.

Torq builds a hyperautomation platform for security operations teams, connecting detections, investigations, and response workflows so analysts can automate repetitive SOC work across tools.

Artemis is an AI-native cybersecurity platform that builds a living model of an organization's identities, devices, cloud, and SaaS environment to detect, investigate, and autonomously respond to AI-powered attacks. The company emerged from stealth in April 2026 with $70M in combined seed and Series A funding led by Felicis, and counts Mercury, Wix, Lemonade, and Abnormal AI among its customers.

Fingerprint provides device intelligence APIs that help teams recognize returning visitors, prevent fraud, secure accounts, and reduce abuse across web and mobile products.

Bureau is a no-code identity decisioning platform that uses AI-powered insights to prevent fraud in real-time. It serves over 200 global brands across fintech, banking, e-commerce, insurance, and gig economy sectors, having verified over 300 million identities.

Flare helps security teams detect, prioritize, and remediate external cyber threats before they escalate with automated threat exposure management and security intelligence.

Agentic AI cyber defense platform providing automated response, real-time classification, and advanced threat detection for cybersecurity

Runlayer is the enterprise control plane for Model Context Protocol (MCP), providing security, observability, and management that lets organizations safely connect AI agents to their internal systems. Backed by customers including Gusto, Instacart, and Opendoor, the platform combines threat detection, detailed permissions, and enterprise development capabilities in one solution.

Gray Swan is a Pittsburgh-based AI security company spun out of Carnegie Mellon University, offering adversarial red-teaming (Arena, Shade) and real-time runtime protection (Cygnal) for AI models and agents. Its customers include frontier AI labs like Anthropic, OpenAI, and Meta, plus enterprises such as Snowflake.

Opal Security is the authorization reasoning platform built to secure every identity, from employees and contractors to service accounts and AI agents. Provides unified visibility and defense-in-depth infrastructure for access management.

Rootly is an AI-native incident management and on-call platform that integrates with Slack to help engineering teams detect, manage, and resolve production incidents faster.

Wi-Fi landline phone for kids and families that reinvents the home phone experience without screens, apps, or texting. Features parental controls via companion app to approve contacts, set quiet hours, and enable Do Not Disturb. Priced at $75 with free calling between Tin Cans or $10/month for regular phone numbers. Addresses smartphone addiction concerns and went viral, selling out first two production runs.

Cylake is building an AI-native cybersecurity platform for enterprises requiring total data sovereignty, running entirely on-premises or in private clouds with no public cloud dependency. Founded by Palo Alto Networks founder Nir Zuk alongside Wilson Xu and Ehud Shamir (a SentinelOne co-founder), it consolidates multiple security functions into a unified, agentic system for monitoring, analysis, and incident response.

Filigran provides open-source cybersecurity solutions for threat intelligence management, adversarial exposure validation, and cyber risk management. Their XTM platform includes OpenCTI and OpenAEV.

Glow Security, Inc. is a 2025-founded, AI-native enterprise endpoint security platform based in Palo Alto, CA and Tel Aviv that protects employee devices, browsers, developer tools, and on-device AI agents. It goes beyond malware detection to give enterprises control over which AI tools and agents run, what data they can access, and which software is allowed, restricted, or removed, using dedicated AI agents and a prevention-first posture. In July 2026 it emerged from stealth with a $180M Series A at a $1.2B valuation led by Sequoia, Cyberstarts, Greenoaks, and Redpoint, reaching unicorn status.

Anchorage Digital is an institutional crypto platform offering custody, trading, staking, and regulated banking services for digital assets.

HiddenLayer provides a security platform for AI models, applications, and agents, covering asset discovery, supply-chain scanning, adversarial testing, and runtime protection. The Austin-based company serves enterprise and U.S. federal customers securing generative, predictive, and agentic AI systems.

MarqVision builds AI-powered brand protection and IP operations software that helps global brands detect, prioritize, and enforce against counterfeit and piracy threats at scale.

Aegis AI builds an agentic email security platform focused on phishing and business-email-compromise detection for enterprise inboxes.

Persona provides identity infrastructure for businesses to verify people and organizations, manage onboarding, automate KYC and AML checks, and reduce fraud across regulated digital workflows.

Fortastra builds intelligent, maneuverable spacecraft designed to protect government and commercial satellites through remote sensing, autonomous capabilities, and defensive rendezvous and proximity operations. The company targets satellite security, space infrastructure resilience, and operational risk in contested orbital environments. It is headquartered in Torrance, California.

AIUC builds confidence infrastructure for enterprise AI adoption through AIUC-1, a SOC 2-style certification standard that stress-tests AI agents against roughly 5,000 risk-and-attack scenarios covering jailbreaks, hallucinations, and data leaks. Certified agents can be paired with liability insurance covering up to $50M in losses, with customers including Cursor, ElevenLabs, Harvey, KPMG, and Lovable.

Footprint delivers KYC and KYB onboarding with AI-driven identity and fraud checks for financial services teams.

Semgrep is a fast and lightweight static analysis tool and application security platform for finding security vulnerabilities in source code. It enables developer-first security workflows with high accuracy and minimal friction, serving companies like Figma, Dropbox, and Snowflake.

Cloaked is a consumer-first privacy platform that enables individuals to protect their personal data by generating unlimited secure identities including phone numbers, emails, usernames and passwords with end-to-end encryption.

Halcyon is the leading anti-ransomware and cyber resilience platform purpose-built to defeat ransomware attacks through multiple layers of prevention, detection, and recovery. Using proprietary capsule neural network AI models, it captures encryption keys and enables autonomous system recovery in minutes.

Lumos builds an identity and SaaS management platform that helps IT and security teams automate access requests, lifecycle management, access reviews, and software spend controls from one system.

Oak builds an AI-native Identity Operating System that unifies identity governance and security across human, machine, and AI agent identities. The platform connects to enterprise systems to build a live identity graph and automate risk detection and remediation.

Corelight provides network detection and response (NDR) software built on the open-source Zeek framework, giving security teams deep network visibility and evidence for threat hunting and incident response. Its platform pairs network traffic analysis with AI-driven detections and integrates with SIEM, XDR, and SOC workflows. Corelight sells to large enterprises and U.S. federal and government agencies.

Identity infrastructure provider for managing access to AI agent tools with task-based permissions and dynamic policy enforcement

Secure portal and workflow for handling lawful data requests from government and law enforcement.

Software supply chain security platform delivering comprehensive vulnerability management with curated near-zero-CVE open-source images, automated CVE remediation, and container hardening capabilities. Simplifies FedRAMP compliance and accelerates DevSecOps workflows.

Bugcrowd operates a crowdsourced cybersecurity platform that connects organizations with a global network of security researchers for bug bounty, penetration testing, and attack surface management programs. Founded in Australia in 2012, it is now headquartered in San Francisco and Sydney.

Cinder is a trust and safety operations platform for handling abuse, moderation workflows, and policy enforcement at scale.

Geordie AI builds an AI governance platform to help enterprises adopt agentic AI safely with observability, compliance controls, and risk intelligence.

An all-in-one open source platform to securely manage application configuration and secrets like API keys and database credentials across teams and infrastructure.

Legion Intelligence (formerly Yurts) builds governed AI agent-orchestration software for defense, public sector, and enterprise operations. Its platform lets organizations securely deploy, manage, and scale autonomous AI agents across sensitive networks (including IL-4/5/6) for decision support and operational intelligence, with deployments at U.S. Special Operations Command and other DoD environments.

Aslan builds AI agents for national-security, intelligence, and law-enforcement missions. Its platform helps authorized teams collect and analyze digital evidence from criminal and adversarial networks. The company is US-focused and recently raised a $20.8M seed round to expand its technical team.

An AI video security system that transforms existing IP cameras into intelligent agents for real-time detection and automated monitoring in healthcare and other sectors.

Method Security builds autonomous cyber systems that combine offensive and defensive capabilities for continuous security testing.

Dynamic SaaS security platform that discovers and protects all SaaS applications, AI agents, and shadow AI tools through identity governance, configuration security, and hidden threat detection, analyzing over 100 billion interactions across 220+ SaaS app integrations.

Token Security builds machine-first identity security to discover, govern, and secure non-human identities across cloud and SaaS environments.

Leading AI-powered security awareness platform protecting against deepfake personas, AI-driven phishing, and multi-channel social engineering threats through realistic attack simulations and tailored employee training.

Builds an AI-powered knowledge engine that helps security operations teams investigate alerts and automate cybersecurity workflows.

Builds encryption infrastructure for developers, including tokenization and PCI compliance tools for payments and sensitive data.

AI-driven security operations center (SOC) platform that automates alert triage, investigation, and response using agentic AI SOC analysts. Reduces investigation time by 360,000 hours and delivers 10x faster response times while reducing false positives by 96%.

Digital trust infrastructure enabling governments and enterprises to issue, verify, and manage digital identity credentials using open-source decentralized identity toolkits.

Turnkey provides secure, scalable, and programmable crypto wallet infrastructure for embedded wallets and onchain transaction automation. Built by the team that scaled Coinbase Custody past $100B in assets, it powers 50M+ embedded wallets.

Lookout is a San Francisco-founded (now Boston-headquartered) cybersecurity company providing mobile endpoint security and threat intelligence for enterprises, protecting smartphones and tablets from phishing, malware, and network-based attacks. It serves 2,000+ enterprise customers and telecom carrier partners, having divested its consumer app and cloud SSE business to focus on mobile-first endpoint protection.

Loti AI protects major celebrities, public figures, and corporate IP from online threats specializing in deepfake and impersonation detection with advanced facial and voice recognition software that analyzes real photos, video and audio then scans the internet for infringing media with 95% takedown success rate.

ORION Security provides security posture and exposure management focused on the software supply chain and SaaS ecosystems, using AI to prioritize and remediate risk.

Open-source, identity-aware access proxy providing zero-trust secure access to internal applications without requiring a VPN, continuously verifying user identity and device context.

Proof provides identity-centric trust infrastructure for high-stakes digital transactions, combining identity verification, notarization, and authorization workflows.

Tracebit builds cloud-native deception technology, automatically generating and maintaining decoy resources ("canaries") across AWS, Azure, GCP, Kubernetes, CI/CD pipelines, developer workstations and identity providers. When an attacker touches a canary, it fires a high-fidelity alert, cutting breach detection from months to minutes. Founded in 2023 by ex-Tessian engineers Andy Smith (CEO) and Sam Cox (CTO), it is headquartered in London with a New York office and counts Riot Games, Snyk, Docker and Synthesia as customers.

Flox builds reproducible development environments for enterprise software teams, built on Nix with Nix knowledge optional. Its platform delivers cryptographically pinned environments that stay identical from a developer's laptop through CI to production, eliminating environment drift and strengthening software supply chain security. A spinout of the D. E. Shaw group, Flox offers both an open-source platform and enterprise SaaS.

AI-native unified cybersecurity platform for MSPs protecting SMBs from cyber threats.

An agentic data security platform that autonomously scans, catalogs, and classifies data in motion and at rest while automating remediations for the AI era.

Tenzai is an AI-native cybersecurity company building autonomous pentesting and offensive security agents to continuously find and help fix software vulnerabilities.

Alpen Labs builds Bitcoin infrastructure and cryptography tooling, using zero-knowledge proofs to deliver a modular rollup that makes Bitcoin scalable, private, and programmable. The remote-first team of cryptographers and engineers (ex-Blockstream, Palantir, Nethermind) is building financial rails on Bitcoin, including lending and BTC yield products. Founded in 2022, it has raised $19.1M across a seed round led by Ribbit Capital and a January 2025 strategic round led by DBA and Cyber Fund.

Unified ingress platform providing developers with secure tunnels, reverse proxy, API gateway, and global load balancing used by over 7 million developers worldwide.

AI-powered IP protection platform that automates monitoring, takedown, and retroactive compensation for brand infringement across 7,800+ platforms. Cuts enforcement time by up to 90%.

AI agents for risk, compliance, and safety that replace human reviewers with automated content moderation and safety systems

Sauron is the world's first perceptual home security platform that continuously scans the perimeter of your home and reliably identifies and deters all threats using multi-modal sensor fusion combining high-resolution cameras with LiDAR, radar, and thermal sensors for real-time 360-degree perception.

Sentra provides cloud-native Data Security Posture Management platform, securing enterprise data for AI adoption with 300% YoY revenue growth and multiple Fortune 500 customers.

Sweet Security provides runtime-powered CNAPP and AI security software that helps enterprises discover assets, detect attacks, reduce vulnerability noise, and investigate incidents faster.

ZeroDrift is an AI compliance firewall that enforces regulatory and company-policy rules on AI-generated messages before delivery, blocking, rewriting, or approving them in real time across chatbots, voice, and AI agents. Deterministic checks flag violations against standards like SOC 2 and GDPR, then an LLM rewrites a compliant version of the message. It targets tier-one banks, asset managers, and insurers deploying AI in regulated communications.

Anagram (formerly Enigma) is a human-driven security platform that embeds security into everyday employee behavior through gamified microlearning, AI-powered phishing simulations, and real-time security nudges. It helps enterprises reduce human-related risks such as phishing, social engineering, insider threats, and risky data handling. Its customers include large enterprises across finance, media, and insurance.

Bot protection and anti-fraud security platform with transparent, CAPTCHA-free defense.

Transcend is an enterprise-grade data privacy infrastructure platform that serves as the compliance layer for customer data. It enables organizations to automate data subject requests, map data across systems, manage consent, and activate data for AI responsibly at scale.

Company behind TruffleHog, a leading open-source secret scanning tool with 15M+ downloads that detects, verifies, and remediates leaked API keys, tokens, and credentials across code repositories.

A Security is an autonomous offensive-security and remediation platform that defends organizations against weaponized AI attacks. Its AI agents chain vulnerabilities, validate real exploitability, build attack paths, and help remediate them before AI-enabled attackers can strike. The Tel Aviv-based startup emerged from stealth in June 2026 with $37M from Cyberstarts and Lightspeed Venture Partners.

Aleo is a Layer-1 blockchain built around zero-knowledge cryptography, enabling private, programmable, and scalable decentralized applications and payments. Founded in 2019 by Howard Wu, Collin Chin, Raymond Chu, and Michael Beller, it is now stewarded in part by the nonprofit Aleo Network Foundation.

Apheris provides governed, privacy-preserving data access and collaboration for AI and analytics across sensitive datasets.

Arctic Wolf is a cybersecurity company providing Security Operations as a Service, including managed detection and response (MDR), managed risk, and security awareness training for mid-market enterprises. Founded in 2012 and headquartered in Eden Prairie, Minnesota, it operates a cloud-native security operations platform and has raised nearly $900M across equity and debt financing.

Arovy (formerly Sonar) is a risk mitigation and change management platform for Salesforce, serving operations, security, and compliance teams with data classification, threat detection, and audit trail capabilities. Founded in 2018 in Atlanta, it rebranded from Sonar to Arovy in 2025.

An AI-native cybersecurity platform designed to ensure the secure use of AI applications across enterprises, focusing on defense against evolving threats.

Autonomous Cyber is an AI-native platform for offensive cybersecurity operations, offering FUZZ-E to support the full cyber kill chain from vulnerability discovery and exploit development to penetration testing and operationalization. The platform augments government and commercial security teams, compressing multi-day tasks into minutes. It was founded by former NSA and U.S. Army personnel and targets both defense and private-sector customers.

Backline is an autonomous security remediation platform that deploys a fleet of AI agents to eliminate enterprise security backlogs at scale. Its AI team automatically interprets vulnerabilities, plans fixes, generates production-ready code, and verifies changes.

Clover Security builds AI agents for design-led product security, embedding security guidance into tools like Jira, GitHub, Cursor, and Slack so teams catch flaws before code is shipped.

Cohesity provides a unified data platform for backup, recovery, and ransomware protection across on-premises, edge, and cloud environments. The company is a unicorn on the IPO watch list, having raised significant funding from investors including Accel, Sequoia, and Battery Ventures.

Coralogix is a full-stack observability and security platform that unifies logs, metrics, traces, and security data using a streaming ('Streama') engine and customer-owned storage, purpose-built for AI-scale telemetry. It serves 5,000+ customers including IBM and JFrog. The Israel-founded company raised a $200M Series F in June 2026 at a $1.6B valuation, bringing total funding to $550M.

Corma builds foundation models purpose-built for defensive cybersecurity, deploying AI agents that act as a virtual security workforce integrated with an organization's existing tools. Dual-headquartered in Tel Aviv and San Francisco, it serves Fortune 100/500 customers across healthcare, financial services, energy, and critical infrastructure.

Crosslayer Labs protects, monitors, and defends organizations' Internet presence by detecting impersonation attacks on websites and APIs. It provides outside-in monitoring of DNS, BGP, TLS certificates, and JavaScript to discover attack surface and detect compromise across the network stack.

Dallas-based AI-native digital forensics and incident response (DFIR) platform that uses patent-pending agentic AI to automatically generate and execute forensic playbooks. It aims to cut catastrophic breach recovery timelines from months to days for MSSPs, MSPs, and enterprises.

Cymphony is a New York/Tel Aviv-based cybersecurity startup building a 'workforce graph' that maps identities, permissions, and data access across humans and AI agents. It raised a $25M Series A co-led by Sequoia and SMBC in September 2026, bringing total funding to $30M.

DataAgent builds an AI-native, remediation-first "Digital Immune System" for Kubernetes and cloud-native infrastructure. Its agents capture high-fidelity signals in production, autonomously detect faults, explain root causes, and guide or automate repairs to cut mean time to resolution. Founded by Cloudify alumni, it serves North American engineering teams from operations in the US and Israel.

Dawnguard is a security architecture automation platform that shifts cloud security decisions into the design phase instead of scanning for vulnerabilities after systems ship. Its AI-powered platform translates corporate policy, regulatory requirements, and security standards into concrete architecture decisions, guardrails, and production-ready Infrastructure as Code across AWS, Azure, and GCP. It continuously validates that systems meet those requirements in both development and production.

AI-native managed detection and response platform fusing agentic AI with human expertise for threat detection and security operations

Defakto (formerly SPIRL, rebranded October 2025) builds a non-human identity and access management platform that replaces static secrets and overprivileged service accounts with short-lived, cryptographically verifiable workload identities. Built on the open SPIFFE standard, it discovers, issues, enforces, and governs identities for services, CI/CD pipelines, Kubernetes workloads, and AI agents across multi-cloud and on-prem environments. Founded by Eli Nesterov (CTO) and Danny Oliveri (CEO), it was named a Gartner Cool Vendor in Identity-First Security in 2025.

Autonomous AI SOC analyst platform that investigates security alerts end-to-end, reducing triage time and alert fatigue for security teams.

Echo is an AI-native software security company that builds CVE-free, vulnerability-free container base images as drop-in replacements for standard Docker images. Its AI agents strip open-source images of non-essential components to eliminate vulnerabilities at the source while preserving functionality. Founded in 2025 by ex-Argon founders Eilon Elhadad and Eylam Milner, it is headquartered in Tel Aviv with a New York office.

Cloud and AI infrastructure security platform with container-native Type-1 hypervisor for workload isolation, preventing container escapes while maintaining Kubernetes compatibility and native performance.

Empirik builds an AI agent for infrastructure change management that models infrastructure dependencies, computes change impact, and governs execution across cloud and enterprise systems. Incubated within Sequoia Capital since 2023, the San Francisco-based company emerged from stealth in September 2026 with early customers including Guardant Health.

EZKL builds zero-knowledge machine learning (zkML) infrastructure for verifying AI model inference. Its open-source tooling compiles PyTorch, TensorFlow, and scikit-learn models into zero-knowledge circuits, proving computations ran correctly without exposing sensitive inputs or model weights. EZKL also operates a high-performance proving cluster.

FAZE Security provides continuous offensive security orchestration for enterprise applications, APIs, cloud environments, and AI systems. Its agentic red team, trained on data from thousands of white-hat hackers, discovers, validates, prioritizes, and retests vulnerabilities. Formerly known as Cytrix, the company operates between New York and Tel Aviv.

Go.AI builds on-premises AI infrastructure for regulated industries such as banking, healthcare, insurance, and defense. Its Go1 hardware appliance paired with Go.OS software lets institutions run compliant, audit-ready AI inference without sending data to the cloud.

Inforcer is a Microsoft multi-tenant management platform built for managed service providers and IT outsourcing firms. It lets MSPs deploy, standardize, and enforce Microsoft 365, Intune, Entra, and Defender security policies and baselines across hundreds of client tenants from one console. Founded in 2022 and headquartered in London, it serves 800+ MSP customers managing large fleets of small-business endpoints.

Klaimee provides liability insurance and risk certification for autonomous AI agents, covering failures that traditional E&O and cyber policies explicitly carve out. It evaluates agents across eight risk dimensions (scope, data exfiltration, unauthorized action, output integrity, adversarial manipulation, behavioral stability, model drift, operational control), issues a 'Klaimee-Verified' badge, and backs certified agents with financial guarantees of up to $50,000. Customers are AI vendors selling agents to enterprises and enterprises deploying agents internally.

Leen provides a unified API and data fabric for cybersecurity, helping security product teams, internal security teams, and MSPs integrate once with security tools and normalize vulnerability, endpoint, cloud, identity, compliance, and operational data.

MindFort is an applied AI security lab building autonomous agents that find, validate, exploit, and patch vulnerabilities in production web applications. Its agents run continuous penetration tests across a company's attack surface on every CI/CD push, chain findings into working proofs of exploit, and ship remediations as pull requests. Founded in 2025 out of Y Combinator's Spring 2025 batch.

NanoClaw is a security-focused, open-source personal AI agent that runs each agent in an isolated Docker/Linux container on Anthropic's Claude Agent SDK, connecting to WhatsApp, Slack, Telegram and other messaging apps. Built by NanoCo, it went viral with ~29K GitHub stars after its February 2026 open-source launch. NanoCo raised a $12M seed in May 2026 at a $62M valuation to build enterprise AI assistants on top of NanoClaw.

NewCore is a security-first, unified identity platform that secures and governs every human, machine, and AI-agent identity under one architecture, discovering all identities and access relationships and continuously governing permissions and agent behavior. It launched from stealth in June 2026 with $66M in seed funding at a $300M valuation, led by cybersecurity veterans behind Dome9.

NinjaOne provides a unified endpoint management platform that lets IT teams monitor, patch, secure, and support devices remotely. It serves over 24,000 customers and has reached unicorn status with a $12.3 billion valuation.

Nord Security is a Lithuania-founded cybersecurity group behind NordVPN, NordPass, NordLocker, NordLayer, and NordProtect, offering privacy, encryption, and secure access products for consumers and businesses. It serves millions of users worldwide and reached unicorn status with a $3B valuation in 2023.

AI-first offensive security platform founded by Israeli Unit 8200 veterans that trains proprietary AI models to autonomously simulate expert penetration testers. Novee continuously discovers and helps remediate vulnerabilities across web apps, APIs, mobile apps, and AI/LLM applications at machine speed.

Oasis Labs builds privacy-preserving data and AI technology for enterprises, including PrivateSQL and confidential computing tooling that uses differential privacy, secure multi-party computation, and zero-knowledge proofs. Founded in 2018 by UC Berkeley professor Dawn Song and team, it originated the Oasis Network blockchain and now focuses on privacy-preserving AI/data collaboration for clients like Google Cloud, Meta, and BMW.

Ocean is an agentic email security platform that uses AI agents to investigate every inbound email for intent, replacing legacy detection-based phishing defenses. It targets targeted phishing, business email compromise, vendor email compromise, and AI-generated novel attacks for enterprise customers. Founded in 2024 by Shay Shwartz and Oran Moyal, it launched from stealth in May 2026 and says it processes over one billion emails per month.

Onyx Security builds a secure AI control plane that lets enterprises discover, monitor, and govern the AI models and autonomous agents used inside their environment. The platform inspects prompts, model responses, tool calls, and agent actions, enforcing permissions, data protection, security policy, human approval, and compliance auditing. Founded in 2024 by Unit 8200 and Israeli Air Force veterans, it emerged from stealth in March 2026 and raised a $113M Series B at a $640M valuation in July 2026.

Authorization-as-a-service platform providing fine-grained access control with declarative policy language.

PostQ is a post-quantum cryptography (PQC) readiness platform that helps organizations discover, assess, and migrate quantum-vulnerable encryption. It provides a free public TLS/certificate scanner plus cryptographic inventory across Kubernetes, cloud KMS, JWTs, and code-signing, scoring PQC readiness and planning migration to NIST standards (ML-KEM, ML-DSA). The company is a PKI Consortium member and integrates with AWS, Google Cloud, Azure, and Cloudflare.

ProjectDiscovery is a San Francisco-based cybersecurity company that grew out of popular open-source security tools like Nuclei, httpx, and subfinder. It offers a commercial cloud platform and AI-driven security testing product (Neo) for attack surface management and vulnerability detection, used by companies like Fastly, Microsoft, and GitLab.

Qpoint is an egress observability and security platform that uses eBPF to give engineering and security teams visibility and control over how applications communicate with external APIs and third-party services. Its lightweight Qtap agent captures outbound traffic metadata and payloads to monitor service health, API usage, and dependencies, while Qcontrol policies enforce runtime governance and a zero-trust posture for external traffic.

AI biosecurity company developing AI-powered defenses against biological threats and bioweapons. Spun out from mRNA therapeutics company Helix Nano, partners with frontier AI labs to identify emerging bio-risks and design countermeasures using advanced models, lab automation, and reinforcement learning to scale biological defenses at the same rate as AI capabilities grow.

Runta builds the execution layer for AI agents: isolated, stateful microVM runtimes that let long-running agents run, be governed, and be recorded. The platform provides snapshot/resume/branch execution, prompt compression to cut token spend, credential protection, governed network egress, and full audit logs. Founded by ex-Cloudflare Edge Platform and Kong founding engineering leader Guanlan Dai, based in the SF Bay Area with a Singapore presence.

Seismic Systems is building an EVM-compatible, privacy-enabled Layer 1 blockchain that allows transactions and smart contract state to remain encrypted while preserving composability. The protocol targets fintech and payments use cases such as stablecoin transfers that need confidentiality without sacrificing on-chain verifiability.

Socratix AI builds autonomous AI coworkers for fraud, risk, and financial crimes/compliance teams that investigate alerts in real time, gather data, map relationships, and produce decision-ready case narratives. The agents integrate into existing fraud/risk stacks at banks and fintechs to cut fraud losses, reduce false positives, and scale investigations without added headcount.

Soda Labs builds programmable privacy infrastructure for public blockchains, using garbled-circuit multiparty computation (GC-MPC) to let regulated financial activity move on-chain without exposing balances, amounts, or counterparties. Its Bubble privacy coprocessor is live across Ethereum, Polygon, Arbitrum, Base and COTI, targeting banks, payment companies, and tokenization platforms.

Security app studio that lets teams build and deploy custom security apps without heavy engineering lift.

Straiker is an agentic-first AI security platform that protects autonomous AI systems and enterprise AI applications from evolving threats, achieving 98.1% detection accuracy. It offers automated red-teaming, discovery of agentic activity, and runtime defense for AI agents.

Cloud-native email security platform using behavioral AI to detect and block advanced phishing, BEC, and zero-day email attacks across Microsoft 365 and Google Workspace.

Succinct is making zero-knowledge proofs accessible to any developer through SP1, their zkVM, and decentralized prover network that enables scalable blockchain applications and cryptographic infrastructure.

Supertrace AI builds an AI Network Engineer, starting with an AI-powered Network Operations Center (NOC) for ISPs, MSPs, enterprises, IXs, and data centers. Its AI agents automate incident detection, root cause analysis, and remediation recommendations, currently monitoring 100k+ devices.

Tollbit provides a content monetization platform that enables websites to protect and monetize their content by allowing AI bots and data scrapers to pay for licensed access, creating a sustainable content ecosystem.

Treeline is a San Francisco-based startup building a modern IT operating system — an AI- and software-first replacement for traditional managed IT service providers. Its platform combines 24/7 help desk, employee onboarding/offboarding, endpoint and managed detection and response, and compliance workflows into one system, with AI agents autonomously resolving the large majority of inbound IT requests. It sells to emerging enterprises that would otherwise outsource IT to legacy MSPs.

Upwind is a cloud security company focused on real-time runtime protection, posture management, and threat detection for modern cloud environments and AI-era workloads.

Zama builds open-source fully homomorphic encryption technology and confidentiality infrastructure for blockchain and other privacy-preserving applications.