Cymphony

Cymphony maps every identity in an organization — human employees, service/machine accounts, and AI agents — along with the data, permissions, and activity each one touches, into what it calls a Workforce Security Graph. The platform is agentless, deploying without endpoint software, and is organized into four modules: AI (visibility into which AI apps employees and agents use), Data (finding and locking down exposed sensitive files), Identity (access review and privilege management across human and non-human identities), and a Threat Center for real-time insider-risk detection. An AI assistant called Maestro sits on top of the graph, letting security teams query it in natural language and automate remediation workflows without writing code.

The company’s differentiator is unifying identity, data-exposure, and access-risk questions that are typically handled by separate tools (IAM, DSPM, insider-risk platforms) into a single queryable graph that explicitly includes AI agents and machine identities alongside people — addressing a gap that traditional IAM and DLP tools were not built for. Cymphony has publicized specific incidents surfaced by its platform, including discovering 85,000 files inadvertently exposed to AI tools at one U.S. public company, and detecting an unsanctioned Claude installation that scanned thousands of sensitive files at another organization.

Founded in 2024 by CEO Shy Dekel with co-founders Idan Berkovits and Edi Gotlieb, and based in New York and Tel Aviv with roughly 30 employees, Cymphony has raised $30 million total, including a $25 million Series A co-led by Sequoia Capital and SMBC’s Fin Atlas Beyond Fund, pushing its post-money valuation above $100 million. The company names KKR, Syngenta, Cass Information Systems, and Athennian as customers and reports double-digit enterprise customer counts and seven-figure ARR in its first year of sales, though metrics like a ‘74% reduction in AI-driven data exposure’ are self-reported by the company rather than independently audited.