Skip to content
Directory

Startups

Cybersecurity innovators founded in the last three years that have raised under $10M, ranked by Innovation Matrix score.

140 startups — showing 24 at a time Show All 140 Companies →
47 /100

Neuramancer

Bavarian startup building forensic deepfake-detection and attribution tools aimed first at the insurance industry's fraud exposure.

Emerging / Unranked AI Security
47 /100

Hacktron

An AI-native platform, built by competitive CTF hackers, that reviews pull requests and runs autonomous penetration tests on…

Emerging / Unranked Application Security
47 /100

Dam Secure

AI-native AppSec platform built to catch logic-level security flaws in AI/LLM-generated code that traditional scanners miss.

Emerging / Unranked Application Security
47 /100

Aviel Intelligence

Pre-seed London startup that deploys AI 'honeybot' personas to engage scammers directly and feed banks real-time mule-account intelligence.

Emerging / Unranked Threat & Vulnerability Management
47 /100

Manifold

San Diego startup providing AI detection-and-response (AIDR) that monitors autonomous AI agents at runtime on enterprise endpoints.

Emerging / Unranked AI Security
47 /100

Dawnguard

Dawnguard builds an AI-native security-architecture-as-code platform that lets engineering teams design, validate, and continuously enforce secure cloud architecture…

Emerging / Unranked Cloud Security
47 /100

TovenAI

AI agents that automate manual, data-intensive compliance surveillance and evidence work for institutional trading firms.

Emerging / Unranked Governance, Risk & Compliance
47 /100

Fabrix Security

A 2025-founded Tel Aviv AI-driven runtime access-control startup acquired by Silverfort.

Emerging / Unranked Identity & Access Management
47 /100

Midship

A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.

Emerging / Unranked Governance, Risk & Compliance
47 /100

PromptArmor

PromptArmor is a Y Combinator-backed LLM security and compliance platform focused specifically on prompt injection, the top-ranked vulnerability…

Emerging / Unranked AI Security
47 /100

GhostEye

GhostEye is a Y Combinator-backed continuous red-team service that simulates real-world social-engineering attacks — help-desk vishing, deepfaked executive…

Emerging / Unranked Cloud Security
47 /100

Antigen

Antigen is a Y Combinator-backed continuous offensive security platform that runs nightly automated attack simulations against an organization's…

Emerging / Unranked Cloud Security
47 /100

ZeroPath

ZeroPath is a Y Combinator-backed developer tool that autonomously detects, verifies, and submits pull-request fixes for code vulnerabilities…

Emerging / Unranked Cloud Security
45 /100

SecStrike

Thai offensive-security startup offering subscription Pentest-as-a-Service, powered by a patent-pending engine that continuously adapts its test scenarios.

Emerging / Unranked Threat & Vulnerability Management
45 /100

RefortifAI

A Y Combinator startup that obfuscates AI model weights so licensed models stay unusable outside an authorized runtime.

Emerging / Unranked AI Security
45 /100

PanIAM Cloud

A Luxembourg startup offering an agentless, EU-hosted CNAPP that maps cloud attack paths and ranks fixes by risk…

Emerging / Unranked Cloud Security
45 /100

Crosslayer Labs

A Princeton-spinout startup that monitors DNS, BGP, TLS certificates, and JavaScript dependencies to detect website and API impersonation…

Emerging / Unranked Attack Surface Management
45 /100

Keycard

An a16z-backed agent-identity startup that acquired Anchor.dev and Runebook to add certificate management and MCP connectivity.

Emerging / Unranked Identity & Access Management
45 /100

Conifers.ai

Conifers.ai builds CognitiveSOC, an agentic AI platform that automates threat intelligence, threat hunting, detection engineering, investigation, and remediation…

Emerging / Unranked Security Operations
43 /100

ZeamiCyberSecurity

A very early-stage Tokyo startup building a no-install, browser-based continuous threat exposure management service for Japanese enterprises.

Emerging / Unranked Attack Surface Management
43 /100

Hilt

Early-stage San Francisco startup building kernel-level monitoring to catch insider data breaches that look like normal, permitted activity.

Emerging / Unranked Data Protection
43 /100

Candor Security

A San Francisco YC startup (formerly branded Haleum) building agentic AI that monitors internal communications to catch insider…

Emerging / Unranked Data Protection
43 /100

8Layers

Madrid startup unifying identity security posture management and identity threat detection for European enterprises.

Emerging / Unranked Identity & Access Management
43 /100

FALKIN

FALKIN is a London startup building AI tools embedded in banking apps to flag scam manipulation before a…

Emerging / Unranked Governance, Risk & Compliance

How this list is built: where we have researched a company’s total funding, that figure decides (under $10M is listed). Otherwise a company is listed when it was founded within the last three years, its funding stage is Pre-Seed, Seed, bootstrapped or early-stage (or Series A with tracked rounds under $10M), and the Deal Tracker shows no financing of $10M or more. Companies with an undisclosed or unspecified funding stage are not listed.