Startups
Cybersecurity innovators founded in the last three years that have raised under $10M, ranked by Innovation Matrix score.
Quilr
CISO ReviewedEarly-stage agentic AI security startup building a 'Service-as-Software' platform to guard against human-related breaches and secure AI agent…
Tenzai
An agentic AI penetration testing startup building autonomous 'AI hackers' to find and validate exploitable vulnerabilities at a…
Charm Security
Agentic AI workforce that investigates and intervenes on scams and fraud in real time, reading manipulation and intent…
cside
Client-side web security platform that watches scripts, users, and AI agents live in the browser session to stop…
Airrived
Agentic AI platform purpose-built for enterprise security operations, orchestrating composable multi-agent workflows for identity governance, incident response, and…
Honeycake
CISO ReviewedA Philadelphia-based seed-stage startup building client-side-encrypted "self-protecting files" that carry their own permissions, redaction, and revocation, founded by…
Ent AI
A San Francisco seed-stage startup building 'intent-aware' AI-native endpoint security, founded by the creators of RiskIQ and Microsoft…
Copperhelm
Agentic cloud security platform where AI agents monitor cloud environments, investigate threats, and perform autonomous remediation with engineer-level…
Konvu
AI agents trace real code and runtime data flow to prove which flagged vulnerabilities are actually exploitable.
Huskeys
AI-driven edge security management platform that orchestrates and tunes existing WAFs and CDNs across multi-cloud environments instead of…
Archestra.AI
A London startup building an open-source broker that checks identity and policy before AI agents can touch internal…
Way Security
A Tel Aviv startup that automates the operational grunt work of deploying and maintaining identity and access management…
enQase
U.S. quantum-safe security platform unifying post-quantum cryptography, key governance and hardware-rooted entropy.
Bonfy AI
AI-native platform that classifies and protects unstructured data as it moves through email, SaaS apps, copilots, and AI…
Opnova
AI agents that learn from video demos to perform identity and access operations in legacy and modern apps…
Twine Security
Twine Security builds autonomous 'AI digital employees' — starting with Alex, an IAM specialist — that execute identity…
Dux
Agentic exposure management platform using AI workers to determine which vulnerabilities are truly exploitable and mitigate them faster…
imper.ai
imper.ai detects deepfake and AI-generated impersonation in real time across enterprise communication platforms like Zoom, Teams, Slack, WhatsApp,…
Root Evidence
A Boise, Idaho startup from well-known security researchers building vulnerability management that prioritizes flaws proven to be exploited…
Certiv
A Seattle startup that installs a runtime assurance layer on endpoints to discover and police what AI coding…
MindFort
Y Combinator-backed swarms of AI agents that continuously attack live applications and ship validated exploits instead of scanner…
AISLE
San Francisco startup building an AI-native 'Cyber Reasoning System' that autonomously discovers, remediates and verifies software vulnerabilities end…
Apate.AI
AI decoy bots that engage scam calls and texts in real time, wasting attacker time and harvesting fraud…
Zynap
A Barcelona-based, well-funded early-stage vendor combining stolen-credential monitoring, attack surface visibility, and AI-driven automated response into a single…
Blast Security
Tel Aviv startup building a preemptive cloud defense platform that compiles security policy into guardrails to block risky…
Confident AI
A YC-backed startup commercializing DeepEval, a widely-used open-source framework for unit-testing, red-teaming and guardrailing LLM applications.
FAZE Security
Israeli offensive-security platform using autonomous AI agent swarms for continuous breach-and-attack simulation and pentesting.
Tenet Security
A seed-stage startup from former Cisco AI Defense researchers building predictive simulation that blocks risky AI agent actions…
Kontext
Munich startup providing runtime security controls that evaluate and block AI agent actions before they execute.
Clawvisor
An open-core authorization gateway that scopes and audits what AI agents are allowed to do before granting them…
Eve Security
Austin startup building "agent-in-the-loop" runtime policy enforcement that restricts what AI agents are allowed to do based on…
SplxAI
A Zagreb-founded startup that automates red-teaming for AI agents, running simulated attacks to catch prompt injection before deployment.
Tonic Security
Israeli startup founded by Sygnia and Unit 8200 veterans, building an AI-driven exposure management platform to prioritize what…
Shush
Shush operates a silent, SIM-based mobile network authentication platform (Sherlock) that lets banks and CPaaS providers verify a…
LatticaAI
Very early-stage Israeli startup building fully homomorphic encryption infrastructure to let AI systems compute on sensitive data without…
Tynapse
A Seoul-based seed-stage startup building a runtime "AI Trust Layer" to detect hallucinations, data leaks, and jailbreaks in…
Grego AI
Miami startup using 'Deep Invariant Analysis' to hunt for software vulnerabilities that manual code review typically misses.
Bynario
Milan-based startup whose AI validates which software vulnerabilities are actually exploitable, cutting through CVE noise.
DetectifAI
DetectifAI builds compact, on-device AI models that detect AI-generated and cloned voices in real time during phone calls,…
CodeIntegrity
Runtime guardrail platform for production AI agents, built by offensive-security researchers who publicly compromised the Notion app in…
Cotool
Cotool is a Y Combinator-backed AI co-pilot for security operations teams that automatically assembles investigation context across a…
Clearly AI
Clearly AI uses AI to continuously review new products, features, vendors, and AI deployments for security and privacy…
RemoteThreat
Maryland startup selling the O/C/O Platform, an integrated offensive cyber operations environment for red teams and vetted government…
BeeSafe AI
Y Combinator-backed San Francisco startup deploying AI agents that directly engage scammers to expose and disrupt their infrastructure.
Neural Defend
Techstars-backed API that detects deepfake audio, video, image, and document manipulation for identity verification and fraud teams.
Zenyard
Tel Aviv startup whose AI agent analyzes full software binaries to verify third-party code safety and patch known…
Circumvent
AI-driven cloud security platform that correlates alerts across existing tools to cut alert fatigue and surface validated, human-verified…
Gitar
San Mateo startup deploying AI agents to review, validate, and secure AI-generated code inside CI/CD pipelines.
Ossprey
Ossprey continuously scans open-source dependencies with an AI code analyzer to catch malicious packages before they reach production,…
Manufact
Manufact is a YC-backed startup building open-source SDK and cloud hosting infrastructure for deploying MCP servers that connect…
Confident Security
Confident Security builds CONFSEC, a confidential-computing layer that lets enterprises use third-party AI models while cryptographically proving prompts…
Eve Security
Austin-based startup building EveGuard, a runtime observability and policy-enforcement layer for securing autonomous AI agents in the enterprise.
Arrakis Security
Autonomous workforce governance platform that discovers AI agents, monitors their behavior, and blocks policy violations across SaaS, cloud,…
Offroad
Agentic identity security platform using AI agents to investigate and remediate access risk across human, machine, and AI…
Capsule Security
Runtime guardrail platform that monitors and controls AI agent actions the instant before they execute, across tools like…
Gecko Security
Gecko Security is a Y Combinator-backed AI security testing platform that uses LLMs and custom code indexing to…
Enigmata
Nashville startup whose Enigmata Cipher lets AI train on, search and analyze data while it stays encrypted.
LeoTrace
London startup whose LeoPrevent tool checks AI coding agents' output for security flaws in real time, before code…
RASPIRE
A Y Combinator-backed startup that hardens compiled Android and iOS apps against tampering and fraud without requiring an…
CodeWall
London startup building autonomous AI attack agents that test whether external attackers could compromise a company.
Caution
Cayman Islands-based Y Combinator startup building a verifiable compute platform that cryptographically proves production code matches its reviewed…
Tinfoil
Open-source confidential computing platform that lets sensitive data be processed by AI models without exposing it to the…
AllSecureX
AllSecureX is an Indian startup building a software-defined platform to discover cryptographic assets and manage the transition to…
Ciphero
AI-native verification layer that captures and governs every AI interaction across employees, agents, and models to catch shadow…
Evoke Security
Pre-seed platform for continuously inventorying, threat-modeling, and monitoring AI agents across the enterprise.
Aurva
Early-stage data security posture management and data detection-and-response platform built to track human, service, and AI-agent data access…
StrongestLayer
Early-stage email security startup using LLM-based reasoning to assess the intent behind a message, aimed at catching AI-generated…
Soverli
ETH Zurich spin-off running an isolated, patent-pending sovereign OS layer alongside stock Android and iOS to protect high-risk…
Quantro Security
AI-native vulnerability management startup whose VM.Analyst agent ingests, deduplicates, and prioritizes risk data while keeping humans in the…
Reken
On-device AI platform defending against AI-powered phishing, deepfakes and fraud, led by a former Google click-fraud head.
Mallory
AI-native threat intelligence platform that contextualizes threat data against an organization's own attack surface.
Gambit Cyber
Netherlands-based startup using coordinated AI agents to continuously discover, validate, and prioritize exploitable exposures across an organization's attack…
Asymmetric Security
AI-driven digital forensics and incident response platform founded in 2025 with offices in London and San Francisco.
Pulse Security
AI-driven operational management platform that acts as a system of record for the cybersecurity program, built for CISOs.
Herd Security
A San Francisco-based agentic AI platform that generates security awareness training and cross-channel phishing simulations directly from a…
WiseBee
A New York/Sofia-based pre-seed startup building AI agents that combine attack surface monitoring, threat intelligence and vendor risk…
Fleuret AI
Paris startup using two AI agents to run continuous, affordable penetration tests in place of one-off manual engagements.
Malanta
Pre-attack prevention platform built by former CyberArk executives that aims to disrupt attacker infrastructure before an intrusion begins.
Lumia Security
A Team8-backed platform giving enterprises visibility and policy control over how employees and AI agents use thousands of…
HelmGuard AI
London-based agentic GRC platform where AI agents monitor controls, manage third-party risk, and govern other AI agents.
Ryft
A New York and Tel Aviv AI-agent data lake startup acquired by Cyera for an estimated $100M-$130M.
Repello AI
AI red-teaming startup running continuous automated adversarial testing and runtime guardrails against generative AI applications.
Strand Intelligence
Manchester startup automating digital forensics and incident response investigations for MSPs and mid-sized firms without a dedicated SOC.
Xen Quantum
A University of Cambridge spinout building chip-based quantum key distribution modules using standard silicon photonics manufacturing.
TandemTrace
Madrid startup building autonomous AI agents for SOC threat hunting and incident investigation.
OpenBox AI
San Francisco startup building a trust and governance layer for enterprise AI agents, with real-time audit trails and…
Lyrie
Lyrie is a Dubai pre-seed startup building an open cryptographic trust protocol and autonomous pentesting tools to secure…
Cydelphi
Cydelphi is an AI-native digital forensics and incident response platform aiming to compress catastrophic breach recovery from months…
Helmet Security
Washington DC startup securing the Model Context Protocol layer that lets AI agents connect to enterprise tools and…
Multifactor
Multifactor provides authentication, authorization, and auditing infrastructure purpose-built for AI agents, letting organizations share account access with both…
Veria Labs
Veria Labs is a Y Combinator-backed continuous AI pentesting company whose LLM-based agents actively exploit vulnerabilities to confirm…
Almure
A Tokyo seed-stage startup building confidential-computing infrastructure so enterprise AI agents can process sensitive data in hardware-isolated, encrypted…
Almanax
AI-driven smart contract vulnerability detection for Web3 projects, built on proprietary security models.
ZeroDrift
New York startup building a pre-delivery compliance firewall that screens AI-generated enterprise communications for regulatory violations before they…
Infrawatch
London startup building an internet infrastructure intelligence layer to track and disrupt the infrastructure behind attacks, fraud and…
Voxmind
Early-stage London startup building on-device software to flag AI voice deepfakes on live phone calls in real time.
Neuramancer
Bavarian startup building forensic deepfake-detection and attribution tools aimed first at the insurance industry's fraud exposure.
Hacktron
An AI-native platform, built by competitive CTF hackers, that reviews pull requests and runs autonomous penetration tests on…
Dam Secure
AI-native AppSec platform built to catch logic-level security flaws in AI/LLM-generated code that traditional scanners miss.
Aviel Intelligence
Pre-seed London startup that deploys AI 'honeybot' personas to engage scammers directly and feed banks real-time mule-account intelligence.
Manifold
San Diego startup providing AI detection-and-response (AIDR) that monitors autonomous AI agents at runtime on enterprise endpoints.
Dawnguard
Dawnguard builds an AI-native security-architecture-as-code platform that lets engineering teams design, validate, and continuously enforce secure cloud architecture…
TovenAI
AI agents that automate manual, data-intensive compliance surveillance and evidence work for institutional trading firms.
Fabrix Security
A 2025-founded Tel Aviv AI-driven runtime access-control startup acquired by Silverfort.
Midship
A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.
PromptArmor
PromptArmor is a Y Combinator-backed LLM security and compliance platform focused specifically on prompt injection, the top-ranked vulnerability…
GhostEye
GhostEye is a Y Combinator-backed continuous red-team service that simulates real-world social-engineering attacks — help-desk vishing, deepfaked executive…
Antigen
Antigen is a Y Combinator-backed continuous offensive security platform that runs nightly automated attack simulations against an organization's…
ZeroPath
ZeroPath is a Y Combinator-backed developer tool that autonomously detects, verifies, and submits pull-request fixes for code vulnerabilities…
SecStrike
Thai offensive-security startup offering subscription Pentest-as-a-Service, powered by a patent-pending engine that continuously adapts its test scenarios.
RefortifAI
A Y Combinator startup that obfuscates AI model weights so licensed models stay unusable outside an authorized runtime.
PanIAM Cloud
A Luxembourg startup offering an agentless, EU-hosted CNAPP that maps cloud attack paths and ranks fixes by risk…
Crosslayer Labs
A Princeton-spinout startup that monitors DNS, BGP, TLS certificates, and JavaScript dependencies to detect website and API impersonation…
Keycard
An a16z-backed agent-identity startup that acquired Anchor.dev and Runebook to add certificate management and MCP connectivity.
Conifers.ai
Conifers.ai builds CognitiveSOC, an agentic AI platform that automates threat intelligence, threat hunting, detection engineering, investigation, and remediation…
ZeamiCyberSecurity
A very early-stage Tokyo startup building a no-install, browser-based continuous threat exposure management service for Japanese enterprises.
Hilt
Early-stage San Francisco startup building kernel-level monitoring to catch insider data breaches that look like normal, permitted activity.
Candor Security
A San Francisco YC startup (formerly branded Haleum) building agentic AI that monitors internal communications to catch insider…
8Layers
Madrid startup unifying identity security posture management and identity threat detection for European enterprises.
FALKIN
FALKIN is a London startup building AI tools embedded in banking apps to flag scam manipulation before a…
Nebula Security
Nebula Security builds VEGA, an autonomous AI cybersecurity agent that continuously discovers vulnerabilities in codebases, monitors code changes,…
Syrix Security
A Tel Aviv pre-seed startup building continuous SaaS security posture enforcement focused on Microsoft 365 environments.
Verdict Machine
Verdict Machine is an early-stage Tel Aviv startup using AI to assess and pre-approve institutional blockchain transactions against…
deepidv
A young Toronto-based startup bundling AI identity verification, document fraud checks, and layered deepfake detection into one API.
Fabraix
Fabraix builds AI red-teaming agents, led by its product Nyx, that test customer-facing AI systems by directly interacting…
Fortyx Security
A Bristol, UK startup building AI agents that read email context in real time to catch mis-sent messages,…
Traceforce
Traceforce is a YC S26 startup that installs on employee devices to inventory and control AI apps and…
Loom Security
Kansas-based startup building CINQUE, a persona-based platform correlating identity, device, network, app, and data risk signals.
Agentic Fabriq
Agentic Fabriq provides identity, governance, and visibility infrastructure for AI agents, managing authentication, permission enforcement, and audit trails…
Riptides
Issues short-lived, auto-rotating cryptographic identities at the kernel level to replace static API keys for services, workloads, and…
ContextFort
Y Combinator-backed startup whose Chrome extension gives security teams visibility and rule-based controls over AI browser agents.
Cipher
A 2025-founded New York agentic-application security startup acquired by Soxton to secure its own legal workflows.
LogosGuard
LogosGuard is a Y Combinator-backed sensitive-data redaction layer for AI, helping enterprises safely adopt tools like ChatGPT and…
Satark AI
Satark AI is an early-stage Indian startup building an AI layer that correlates security alerts across SIEM, XDR,…
Secludy
San Francisco startup generating differentially-private synthetic data so regulated companies can train AI models without exposing real customer…
CRACI
Helsinki pre-seed startup automating EU Cyber Resilience Act compliance and software-supply-chain documentation inside CI/CD pipelines.
InfoHawk
InfoHawk is an AI platform that maps online scam and fraud infrastructure to detect and block deception in…
Probo
Probo is a Y Combinator-backed AI compliance platform that acts as an automated compliance team for startups pursuing…
Qpher
Solo-founder startup offering post-quantum cryptography as drop-in REST APIs and SDKs, implementing NIST's ML-KEM and ML-DSA standards with…
Soxton
A New York AI-powered law firm that acquired agentic-security startup Cipher in March 2026 to secure its own…
How this list is built: where we have researched a company’s total funding, that figure decides (under $10M is listed). Otherwise a company is listed when it was founded within the last three years, its funding stage is Pre-Seed, Seed, bootstrapped or early-stage (or Series A with tracked rounds under $10M), and the Deal Tracker shows no financing of $10M or more. Companies with an undisclosed or unspecified funding stage are not listed.