BreachRx

BreachRx sells software that turns incident response from a scramble of spreadsheets, Slack threads, and outside counsel phone calls into a pre-built, automated workflow. The platform maps an organization’s specific regulatory and contractual breach-notification obligations — state data breach laws, GDPR, sector rules, customer contract clauses — into playbooks that trigger automatically when an incident is declared, tracking who did what, when, and whether legal privilege was preserved along the way. The pitch is less about detecting incidents (BreachRx integrates with the tools that do that) and more about making sure the response itself doesn’t become the second half of the disaster.

Founded in 2020 and headquartered in San Francisco, BreachRx closed a $15 million Series A in May 2025 led by Ballistic Ventures, with participation from SYN Ventures, Overline, and Silver Buckshot Ventures, bringing total disclosed funding to over $23 million. Former Mandiant CEO Kevin Mandia joined the company’s board in connection with the round, and cybersecurity journalist Nicole Perlroth came on as a board observer — notable signals of credibility from people who have sat on the other side of major breach responses.

The company is using the new capital to expand its network of MSSP and professional-services partners offering incident-response-as-a-service on top of the platform, and to deepen integrations with existing detection and SIEM tooling. BreachRx’s core bet is that regulatory complexity around breach notification will keep increasing, making a purpose-built orchestration layer for legal and compliance response more valuable than another point tool for detection.