Cybersecurity AI Startup Jobs

Defense technology company building autonomous systems and AI-powered defense capabilities to transform military and border security operations.

Defense AI company building autonomous aircraft and AI pilot technology for military applications.

Cyera is an AI-native data security platform that helps enterprises discover, classify, govern, and protect sensitive data across cloud, SaaS, on-premises, and AI environments. The platform uses machine learning and LLMs for high-precision data classification at scale.

Helsing is a European defense AI company building autonomy software and hardware for democratic nations. It develops real-time battlefield decision software, AI-enabled drones, and sensor fusion systems for military applications across NATO allies. Founded in 2021, it has grown to become one of Europe's most valuable defense tech startups with an $18B valuation.

A defense technology company specializing in counter-drone radar and other defense solutions.

TRM Labs builds blockchain intelligence software for financial institutions, crypto businesses, and public-sector investigators to detect illicit activity and support compliance workflows.

Vanta provides an AI-powered Trust Management Platform that automates compliance, security, and risk management for businesses. The company helps organizations earn and prove trust through automated security monitoring and compliance frameworks.

Autonomous penetration testing platform that continuously discovers and exploits attack paths.

Delivers secure container images and tooling to protect open-source supply chains by default.

Real-time public safety data platform for law enforcement and first responders.

Cloud email security platform using AI to detect and prevent sophisticated email attacks.

1Password provides password, secrets, and access management software for teams and enterprises, securing credentials, app access, and AI tool usage in one platform.

TENEX.AI is an AI-native Managed Detection and Response (MDR) company that combines proprietary security AI models with elite human analysts to triage, investigate, hunt, and contain cyber threats in real time. Founded in 2024 and headquartered in Sarasota, Florida, the company reached unicorn status within roughly a year of launch, raising $277M+ across three rounds. Its platform autonomously handles security operations while keeping human accountability at the center.

Tailscale builds identity-first networking software on WireGuard so teams can securely connect users, devices, services, and AI systems across private infrastructure without VPN complexity.

7AI builds an agentic cybersecurity platform that uses swarming AI agents to automate SOC investigations and response workflows.

Neo (Neo Security, Inc.) is a Boston-based, 2025-founded startup with an R&D center in Tel Aviv that is defining the 'Agentic Software Control' category: a real-time security control layer for enterprise AI agents and intelligent software. It discovers the AI agents, models, extensions, scripts, and MCP servers running on enterprise devices, inspects their permissions and data access, attributes each action to a person/agent/app, and can allow, block, or pause operations in real time, backed by its Neoverse knowledge base. Founded by former SentinelOne, Wiz, and Palo Alto Networks veterans (CEO Nick Warner, ex-SentinelOne president/COO), it emerged from stealth in July 2026 with $100M from Andreessen Horowitz and Bessemer.

Cogent Security is the first company to deliver an AI taskforce dedicated to vulnerability management, using autonomous AI agents to handle the full lifecycle from threat identification to remediation. The platform autonomously prioritizes critical risks and executes fixes with minimal human oversight, serving dozens of Fortune 1000 companies. Founded in 2024 and incubated by Greylock Partners, Cogent has raised $53 million to date.

Corelight provides network detection and response (NDR) software built on the open-source Zeek framework, giving security teams deep network visibility and evidence for threat hunting and incident response. Its platform pairs network traffic analysis with AI-driven detections and integrates with SIEM, XDR, and SOC workflows. Corelight sells to large enterprises and U.S. federal and government agencies.

Application security and software supply chain security platform for modern DevSecOps.

Torq builds a hyperautomation platform for security operations teams, connecting detections, investigations, and response workflows so analysts can automate repetitive SOC work across tools.

WorkOS is a developer platform that provides APIs for quickly adding enterprise-grade features like Single Sign-On (SSO), Directory Sync (SCIM), Audit Logs, and User Management to applications. Often described as 'Stripe for enterprise features,' WorkOS powers authentication and identity for the fastest-growing AI companies including OpenAI, Anthropic, and Cursor.

Flock Safety builds AI-powered cameras and software that help law enforcement and communities solve and prevent crime. The platform uses machine learning and computer vision to provide investigative intelligence for cities, neighborhoods, and businesses.

Quantum and AI company developing solutions for drug discovery, cybersecurity, and navigation.

Eon is the first cloud backup posture management (CBPM) platform, automating and unifying complex cloud backups into a queryable data lake for fast recovery, compliance, and AI analytics. Founded by the team behind AWS Disaster Recovery, Eon converts idle backup data into an accessible secondary storage layer for enterprise AI workloads.

Anchorage Digital is an institutional crypto platform offering custody, trading, staking, and regulated banking services for digital assets.

Developer-first software supply chain security platform that detects malicious packages, vulnerable dependencies, and risky open source behavior before code reaches production.

Privacy-first mobile carrier redesigning telecommunications from the ground up. Cape owns and operates its own mobile core and SIMs, providing ultra-private and secure connectivity for enterprises, government, and consumers.

Defense technology company building AI-powered software for national security missions.

Fingerprint provides device intelligence APIs that help teams recognize returning visitors, prevent fraud, secure accounts, and reduce abuse across web and mobile products.

Filigran provides open-source cybersecurity solutions for threat intelligence management, adversarial exposure validation, and cyber risk management. Their XTM platform includes OpenCTI and OpenAEV.

MarqVision builds AI-powered brand protection and IP operations software that helps global brands detect, prioritize, and enforce against counterfeit and piracy threats at scale.

Tines provides an intelligent workflow and orchestration platform that lets security, IT, and operations teams automate complex actions, investigations, and AI-assisted processes without heavy custom code.

Flare helps security teams detect, prioritize, and remediate external cyber threats before they escalate with automated threat exposure management and security intelligence.

Rootly is an AI-native incident management and on-call platform that integrates with Slack to help engineering teams detect, manage, and resolve production incidents faster.

Vega offers a lightweight, AI-native security analytics fabric that provides instant access to all data sources without requiring migration, designed to replace traditional SIEM solutions with state-of-the-art security analytics for modern enterprises.

Doppel provides AI-powered digital risk protection that combines brand protection, executive protection, social engineering simulation, and awareness tooling to detect and disrupt impersonation, phishing, and other online threats.

Runlayer is the enterprise control plane for Model Context Protocol (MCP), providing security, observability, and management that lets organizations safely connect AI agents to their internal systems. Backed by customers including Gusto, Instacart, and Opendoor, the platform combines threat detection, detailed permissions, and enterprise development capabilities in one solution.

Wi-Fi landline phone for kids and families that reinvents the home phone experience without screens, apps, or texting. Features parental controls via companion app to approve contacts, set quiet hours, and enable Do Not Disturb. Priced at $75 with free calling between Tin Cans or $10/month for regular phone numbers. Addresses smartphone addiction concerns and went viral, selling out first two production runs.

Opal Security is the authorization reasoning platform built to secure every identity, from employees and contractors to service accounts and AI agents. Provides unified visibility and defense-in-depth infrastructure for access management.

Persona provides identity infrastructure for businesses to verify people and organizations, manage onboarding, automate KYC and AML checks, and reduce fraud across regulated digital workflows.

Dynamic SaaS security platform that discovers and protects all SaaS applications, AI agents, and shadow AI tools through identity governance, configuration security, and hidden threat detection, analyzing over 100 billion interactions across 220+ SaaS app integrations.

Bureau is a no-code identity decisioning platform that uses AI-powered insights to prevent fraud in real-time. It serves over 200 global brands across fintech, banking, e-commerce, insurance, and gig economy sectors, having verified over 300 million identities.

Glow Security, Inc. is a 2025-founded, AI-native enterprise endpoint security platform based in Palo Alto, CA and Tel Aviv that protects employee devices, browsers, developer tools, and on-device AI agents. It goes beyond malware detection to give enterprises control over which AI tools and agents run, what data they can access, and which software is allowed, restricted, or removed, using dedicated AI agents and a prevention-first posture. In July 2026 it emerged from stealth with a $180M Series A at a $1.2B valuation led by Sequoia, Cyberstarts, Greenoaks, and Redpoint, reaching unicorn status.

Aegis AI builds an agentic email security platform focused on phishing and business-email-compromise detection for enterprise inboxes.

Halcyon is the leading anti-ransomware and cyber resilience platform purpose-built to defeat ransomware attacks through multiple layers of prevention, detection, and recovery. Using proprietary capsule neural network AI models, it captures encryption keys and enables autonomous system recovery in minutes.

Leading AI-powered security awareness platform protecting against deepfake personas, AI-driven phishing, and multi-channel social engineering threats through realistic attack simulations and tailored employee training.

Cloaked is a consumer-first privacy platform that enables individuals to protect their personal data by generating unlimited secure identities including phone numbers, emails, usernames and passwords with end-to-end encryption.

Footprint delivers KYC and KYB onboarding with AI-driven identity and fraud checks for financial services teams.

AI-native unified cybersecurity platform for MSPs protecting SMBs from cyber threats.

Lumos builds an identity and SaaS management platform that helps IT and security teams automate access requests, lifecycle management, access reviews, and software spend controls from one system.

Agentic AI cyber defense platform providing automated response, real-time classification, and advanced threat detection for cybersecurity

Legion Intelligence (formerly Yurts) builds governed AI agent-orchestration software for defense, public sector, and enterprise operations. Its platform lets organizations securely deploy, manage, and scale autonomous AI agents across sensitive networks (including IL-4/5/6) for decision support and operational intelligence, with deployments at U.S. Special Operations Command and other DoD environments.

Semgrep is a fast and lightweight static analysis tool and application security platform for finding security vulnerabilities in source code. It enables developer-first security workflows with high accuracy and minimal friction, serving companies like Figma, Dropbox, and Snowflake.

Geordie AI builds an AI governance platform to help enterprises adopt agentic AI safely with observability, compliance controls, and risk intelligence.

Software supply chain security platform delivering comprehensive vulnerability management with curated near-zero-CVE open-source images, automated CVE remediation, and container hardening capabilities. Simplifies FedRAMP compliance and accelerates DevSecOps workflows.

Builds an AI-powered knowledge engine that helps security operations teams investigate alerts and automate cybersecurity workflows.

An all-in-one open source platform to securely manage application configuration and secrets like API keys and database credentials across teams and infrastructure.

Token Security builds machine-first identity security to discover, govern, and secure non-human identities across cloud and SaaS environments.

Tracebit builds cloud-native deception technology, automatically generating and maintaining decoy resources ("canaries") across AWS, Azure, GCP, Kubernetes, CI/CD pipelines, developer workstations and identity providers. When an attacker touches a canary, it fires a high-fidelity alert, cutting breach detection from months to minutes. Founded in 2023 by ex-Tessian engineers Andy Smith (CEO) and Sam Cox (CTO), it is headquartered in London with a New York office and counts Riot Games, Snyk, Docker and Synthesia as customers.

AI-driven security operations center (SOC) platform that automates alert triage, investigation, and response using agentic AI SOC analysts. Reduces investigation time by 360,000 hours and delivers 10x faster response times while reducing false positives by 96%.

An agentic data security platform that autonomously scans, catalogs, and classifies data in motion and at rest while automating remediations for the AI era.

Cinder is a trust and safety operations platform for handling abuse, moderation workflows, and policy enforcement at scale.

Echo is an AI-native software security company that builds CVE-free, vulnerability-free container base images as drop-in replacements for standard Docker images. Its AI agents strip open-source images of non-essential components to eliminate vulnerabilities at the source while preserving functionality. Founded in 2025 by ex-Argon founders Eilon Elhadad and Eylam Milner, it is headquartered in Tel Aviv with a New York office.

Flox builds reproducible development environments for enterprise software teams, built on Nix with Nix knowledge optional. Its platform delivers cryptographically pinned environments that stay identical from a developer's laptop through CI to production, eliminating environment drift and strengthening software supply chain security. A spinout of the D. E. Shaw group, Flox offers both an open-source platform and enterprise SaaS.

Identity infrastructure provider for managing access to AI agent tools with task-based permissions and dynamic policy enforcement

Secure portal and workflow for handling lawful data requests from government and law enforcement.

Loti AI protects major celebrities, public figures, and corporate IP from online threats specializing in deepfake and impersonation detection with advanced facial and voice recognition software that analyzes real photos, video and audio then scans the internet for infringing media with 95% takedown success rate.

An AI video security system that transforms existing IP cameras into intelligent agents for real-time detection and automated monitoring in healthcare and other sectors.

Digital trust infrastructure enabling governments and enterprises to issue, verify, and manage digital identity credentials using open-source decentralized identity toolkits.

Sweet Security provides runtime-powered CNAPP and AI security software that helps enterprises discover assets, detect attacks, reduce vulnerability noise, and investigate incidents faster.

Turnkey provides secure, scalable, and programmable crypto wallet infrastructure for embedded wallets and onchain transaction automation. Built by the team that scaled Coinbase Custody past $100B in assets, it powers 50M+ embedded wallets.

Builds encryption infrastructure for developers, including tokenization and PCI compliance tools for payments and sensitive data.

Method Security builds autonomous cyber systems that combine offensive and defensive capabilities for continuous security testing.

Unified ingress platform providing developers with secure tunnels, reverse proxy, API gateway, and global load balancing used by over 7 million developers worldwide.

ORION Security provides security posture and exposure management focused on the software supply chain and SaaS ecosystems, using AI to prioritize and remediate risk.

Open-source, identity-aware access proxy providing zero-trust secure access to internal applications without requiring a VPN, continuously verifying user identity and device context.

AI agents for risk, compliance, and safety that replace human reviewers with automated content moderation and safety systems

Sentra provides cloud-native Data Security Posture Management platform, securing enterprise data for AI adoption with 300% YoY revenue growth and multiple Fortune 500 customers.

Tenzai is an AI-native cybersecurity company building autonomous pentesting and offensive security agents to continuously find and help fix software vulnerabilities.

Alpen Labs builds Bitcoin infrastructure and cryptography tooling, using zero-knowledge proofs to deliver a modular rollup that makes Bitcoin scalable, private, and programmable. The remote-first team of cryptographers and engineers (ex-Blockstream, Palantir, Nethermind) is building financial rails on Bitcoin, including lending and BTC yield products. Founded in 2022, it has raised $19.1M across a seed round led by Ribbit Capital and a January 2025 strategic round led by DBA and Cyber Fund.

Bot protection and anti-fraud security platform with transparent, CAPTCHA-free defense.

AI-powered IP protection platform that automates monitoring, takedown, and retroactive compensation for brand infringement across 7,800+ platforms. Cuts enforcement time by up to 90%.

ZeroDrift is an AI compliance firewall that enforces regulatory and company-policy rules on AI-generated messages before delivery, blocking, rewriting, or approving them in real time across chatbots, voice, and AI agents. Deterministic checks flag violations against standards like SOC 2 and GDPR, then an LLM rewrites a compliant version of the message. It targets tier-one banks, asset managers, and insurers deploying AI in regulated communications.

Anagram (formerly Enigma) is a human-driven security platform that embeds security into everyday employee behavior through gamified microlearning, AI-powered phishing simulations, and real-time security nudges. It helps enterprises reduce human-related risks such as phishing, social engineering, insider threats, and risky data handling. Its customers include large enterprises across finance, media, and insurance.

Authorization-as-a-service platform providing fine-grained access control with declarative policy language.

Proof provides identity-centric trust infrastructure for high-stakes digital transactions, combining identity verification, notarization, and authorization workflows.

Transcend is an enterprise-grade data privacy infrastructure platform that serves as the compliance layer for customer data. It enables organizations to automate data subject requests, map data across systems, manage consent, and activate data for AI responsibly at scale.

Company behind TruffleHog, a leading open-source secret scanning tool with 15M+ downloads that detects, verifies, and remediates leaked API keys, tokens, and credentials across code repositories.

A Security is an autonomous offensive-security and remediation platform that defends organizations against weaponized AI attacks. Its AI agents chain vulnerabilities, validate real exploitability, build attack paths, and help remediate them before AI-enabled attackers can strike. The Tel Aviv-based startup emerged from stealth in June 2026 with $37M from Cyberstarts and Lightspeed Venture Partners.

Apheris provides governed, privacy-preserving data access and collaboration for AI and analytics across sensitive datasets.

An AI-native cybersecurity platform designed to ensure the secure use of AI applications across enterprises, focusing on defense against evolving threats.

Autonomous Cyber is an AI-native platform for offensive cybersecurity operations, offering FUZZ-E to support the full cyber kill chain from vulnerability discovery and exploit development to penetration testing and operationalization. The platform augments government and commercial security teams, compressing multi-day tasks into minutes. It was founded by former NSA and U.S. Army personnel and targets both defense and private-sector customers.

Backline is an autonomous security remediation platform that deploys a fleet of AI agents to eliminate enterprise security backlogs at scale. Its AI team automatically interprets vulnerabilities, plans fixes, generates production-ready code, and verifies changes.

Clover Security builds AI agents for design-led product security, embedding security guidance into tools like Jira, GitHub, Cursor, and Slack so teams catch flaws before code is shipped.

Coralogix is a full-stack observability and security platform that unifies logs, metrics, traces, and security data using a streaming ('Streama') engine and customer-owned storage, purpose-built for AI-scale telemetry. It serves 5,000+ customers including IBM and JFrog. The Israel-founded company raised a $200M Series F in June 2026 at a $1.6B valuation, bringing total funding to $550M.

Dawnguard is a security architecture automation platform that shifts cloud security decisions into the design phase instead of scanning for vulnerabilities after systems ship. Its AI-powered platform translates corporate policy, regulatory requirements, and security standards into concrete architecture decisions, guardrails, and production-ready Infrastructure as Code across AWS, Azure, and GCP. It continuously validates that systems meet those requirements in both development and production.

AI-native managed detection and response platform fusing agentic AI with human expertise for threat detection and security operations

Autonomous AI SOC analyst platform that investigates security alerts end-to-end, reducing triage time and alert fatigue for security teams.

Cloud and AI infrastructure security platform with container-native Type-1 hypervisor for workload isolation, preventing container escapes while maintaining Kubernetes compatibility and native performance.

EZKL builds zero-knowledge machine learning (zkML) infrastructure for verifying AI model inference. Its open-source tooling compiles PyTorch, TensorFlow, and scikit-learn models into zero-knowledge circuits, proving computations ran correctly without exposing sensitive inputs or model weights. EZKL also operates a high-performance proving cluster.

Fortastra builds intelligent, maneuverable spacecraft designed to protect government and commercial satellites through remote sensing, autonomous capabilities, and defensive rendezvous and proximity operations. The company targets satellite security, space infrastructure resilience, and operational risk in contested orbital environments. It is headquartered in Torrance, California.

Inforcer is a Microsoft multi-tenant management platform built for managed service providers and IT outsourcing firms. It lets MSPs deploy, standardize, and enforce Microsoft 365, Intune, Entra, and Defender security policies and baselines across hundreds of client tenants from one console. Founded in 2022 and headquartered in London, it serves 800+ MSP customers managing large fleets of small-business endpoints.

Klaimee provides liability insurance and risk certification for autonomous AI agents, covering failures that traditional E&O and cyber policies explicitly carve out. It evaluates agents across eight risk dimensions (scope, data exfiltration, unauthorized action, output integrity, adversarial manipulation, behavioral stability, model drift, operational control), issues a 'Klaimee-Verified' badge, and backs certified agents with financial guarantees of up to $50,000. Customers are AI vendors selling agents to enterprises and enterprises deploying agents internally.

Leen provides a unified API and data fabric for cybersecurity, helping security product teams, internal security teams, and MSPs integrate once with security tools and normalize vulnerability, endpoint, cloud, identity, compliance, and operational data.

MindFort is an applied AI security lab building autonomous agents that find, validate, exploit, and patch vulnerabilities in production web applications. Its agents run continuous penetration tests across a company's attack surface on every CI/CD push, chain findings into working proofs of exploit, and ship remediations as pull requests. Founded in 2025 out of Y Combinator's Spring 2025 batch.

NanoClaw is a security-focused, open-source personal AI agent that runs each agent in an isolated Docker/Linux container on Anthropic's Claude Agent SDK, connecting to WhatsApp, Slack, Telegram and other messaging apps. Built by NanoCo, it went viral with ~29K GitHub stars after its February 2026 open-source launch. NanoCo raised a $12M seed in May 2026 at a $62M valuation to build enterprise AI assistants on top of NanoClaw.

NewCore is a security-first, unified identity platform that secures and governs every human, machine, and AI-agent identity under one architecture, discovering all identities and access relationships and continuously governing permissions and agent behavior. It launched from stealth in June 2026 with $66M in seed funding at a $300M valuation, led by cybersecurity veterans behind Dome9.

Ocean is an agentic email security platform that uses AI agents to investigate every inbound email for intent, replacing legacy detection-based phishing defenses. It targets targeted phishing, business email compromise, vendor email compromise, and AI-generated novel attacks for enterprise customers. Founded in 2024 by Shay Shwartz and Oran Moyal, it launched from stealth in May 2026 and says it processes over one billion emails per month.

Onyx Security builds a secure AI control plane that lets enterprises discover, monitor, and govern the AI models and autonomous agents used inside their environment. The platform inspects prompts, model responses, tool calls, and agent actions, enforcing permissions, data protection, security policy, human approval, and compliance auditing. Founded in 2024 by Unit 8200 and Israeli Air Force veterans, it emerged from stealth in March 2026 and raised a $113M Series B at a $640M valuation in July 2026.

PostQ is a post-quantum cryptography (PQC) readiness platform that helps organizations discover, assess, and migrate quantum-vulnerable encryption. It provides a free public TLS/certificate scanner plus cryptographic inventory across Kubernetes, cloud KMS, JWTs, and code-signing, scoring PQC readiness and planning migration to NIST standards (ML-KEM, ML-DSA). The company is a PKI Consortium member and integrates with AWS, Google Cloud, Azure, and Cloudflare.

Qpoint is an egress observability and security platform that uses eBPF to give engineering and security teams visibility and control over how applications communicate with external APIs and third-party services. Its lightweight Qtap agent captures outbound traffic metadata and payloads to monitor service health, API usage, and dependencies, while Qcontrol policies enforce runtime governance and a zero-trust posture for external traffic.

AI biosecurity company developing AI-powered defenses against biological threats and bioweapons. Spun out from mRNA therapeutics company Helix Nano, partners with frontier AI labs to identify emerging bio-risks and design countermeasures using advanced models, lab automation, and reinforcement learning to scale biological defenses at the same rate as AI capabilities grow.

Runta builds the execution layer for AI agents: isolated, stateful microVM runtimes that let long-running agents run, be governed, and be recorded. The platform provides snapshot/resume/branch execution, prompt compression to cut token spend, credential protection, governed network egress, and full audit logs. Founded by ex-Cloudflare Edge Platform and Kong founding engineering leader Guanlan Dai, based in the SF Bay Area with a Singapore presence.

Sauron is the world's first perceptual home security platform that continuously scans the perimeter of your home and reliably identifies and deters all threats using multi-modal sensor fusion combining high-resolution cameras with LiDAR, radar, and thermal sensors for real-time 360-degree perception.

Socratix AI builds autonomous AI agents ('AI coworkers') that act as enterprise-grade fraud and risk analysts for financial institutions. The agents help fraud and risk teams investigate cases and counter AI-powered fraud, synthetic identities, and generative-AI attacks that legacy detection systems miss. Founded in 2025 and backed by Y Combinator (S25) and Pear VC.

Security app studio that lets teams build and deploy custom security apps without heavy engineering lift.

Cloud-native email security platform using behavioral AI to detect and block advanced phishing, BEC, and zero-day email attacks across Microsoft 365 and Google Workspace.

Succinct is making zero-knowledge proofs accessible to any developer through SP1, their zkVM, and decentralized prover network that enables scalable blockchain applications and cryptographic infrastructure.

Tollbit provides a content monetization platform that enables websites to protect and monetize their content by allowing AI bots and data scrapers to pay for licensed access, creating a sustainable content ecosystem.

Upwind is a cloud security company focused on real-time runtime protection, posture management, and threat detection for modern cloud environments and AI-era workloads.

Zama builds open-source fully homomorphic encryption technology and confidentiality infrastructure for blockchain and other privacy-preserving applications.