dlp
(14)
Candor
Candor (YC W25) is a San Francisco cybersecurity startup building agentic data loss prevention and insider risk management. Instead of drowning security teams in false positives like legacy DLP tools, Candor's AI agents watch both the data movement and the person behind it - stitching together the story of who is about to leak source code, exfiltrate IP, or misuse AI tools - so lean teams know exactly who to watch before damage is done.
iboss
iboss is a Boston-based cloud security company that delivers a cloud-native Zero Trust Secure Access Service Edge (SASE) platform. Founded in 2003 by twin brothers Paul and Peter Martini, iboss consolidates network security functions - secure web gateway, ZTNA, CASB, data loss prevention and firewall - into a single SaaS service that connects users to applications from anywhere while replacing legacy VPNs, proxy appliances and VDI. The platform is used by thousands of enterprises, government agencies and school districts, and processes over 100 billion transactions daily.
ORION Security
ORION Security is an AI-native data loss prevention (DLP) company that protects enterprises from data leaks without relying on manually written policies. Founded in 2024 by Nitay Milner and Jonathan Kreiner, ORION uses large language models and specialized AI agents to map how data normally flows across SaaS, email, cloud, endpoints, and AI tools, then analyzes content sensitivity, user identity, behavioral intent, and data lineage to catch exfiltration and insider threats in real time. The platform targets the three core sources of data loss - human error, malicious insiders, and external attackers - while cutting the false positives and maintenance burden that plague legacy DLP.
Cyberhaven
Cyberhaven is a data security company that protects enterprises from data exfiltration and insider risk by tracing how information moves rather than just where it sits. Founded in 2016 by five PhD researchers with roots in the DARPA Cyber Grand Challenge, the company built a proprietary 'data lineage' engine and an AI layer, Linea AI, that combines Data Loss Prevention (DLP), Data Security Posture Management (DSPM), Insider Risk Management, and AI security into one platform. Reaching a $1 billion valuation in April 2025 after a $100M Series D, Cyberhaven serves customers such as Snowflake, Motorola, Reddit, and major law firms.
Nitay Milner
Nitay Milner is co-founder and CEO of ORION Security, a New York and Tel Aviv-based startup rebuilding data loss prevention around AI that learns how data actually moves inside a company. He raised a $32M Series A led by Norwest in February 2026, with IBM participating, less than a year after a $6M seed. Before ORION he was a senior product leader at Epsagon (acquired by Cisco for around $500M) and previously co-founded DatsMi, an event-media startup.
Proofpoint
Proofpoint is a cybersecurity and compliance company that protects organizations against the threats that target people - email attacks, data loss, and insider risk. Founded in 2002, it became the first SaaS-based cybersecurity vendor to cross $1B in annual revenue, was taken private by Thoma Bravo for $12.3B in 2021, and today runs a 'human-centric' security platform spanning email defense, data security, and identity threat protection used by a majority of the Fortune 100.
Seclore
Seclore is a data-centric security company that protects sensitive files and emails wherever they travel - across any user, device, app, or cloud. Its browser-based ARMOR platform unifies Data Security Posture Management, AI-powered Data Loss Prevention, data classification, and Enterprise Digital Rights Management so organizations keep persistent, granular control over data even after it leaves their walls. Founded in India in 2008 and headquartered in Santa Clara, California, Seclore serves more than 2,000 enterprises and government bodies across roughly 29 countries.
dope.security
dope.security is a Mountain View cybersecurity startup that rebuilt the Secure Web Gateway (SWG) so it runs directly on the endpoint instead of routing traffic through a vendor's cloud datacenter. Founded in 2021 by ex-Symantec and Forcepoint product leader Kunal Agarwal, its 'fly-direct' architecture inspects web traffic on-device, claiming faster performance, fewer outages, and better privacy than legacy cloud proxies. The company has expanded from its core dope.swg product into AI-powered data protection with CASB Neural and DOPAMINE DLP, backed by roughly $20M from GV (Google Ventures) and Boldstart Ventures.
Teleskope
Teleskope is a New York-based data security company that builds what it calls the industry's first agentic data protection platform. Founded in 2022 by former Airbnb security engineers Elizabeth Nammour and Julie Trias, it autonomously discovers, classifies, and protects sensitive data across cloud, SaaS, and on-premises environments, then automatically remediates risk through redaction, masking, encryption, and access fixes. The platform uses smaller, fine-tuned models to read business context, aiming to move teams beyond alert fatigue toward real action.
Nightfall AI
Nightfall AI is a San Francisco-based data security company that uses AI-native detection to find and protect sensitive data across SaaS applications, AI tools, and endpoints. It pitches itself as the first DLP and insider risk platform purpose-built for the AI era.
Spin.AI
Spin.AI is an AI-powered SaaS security and data-protection company based in Palo Alto. Its SpinOne platform unifies SaaS Security Posture Management, ransomware defense, automated backup and recovery, and browser extension risk control for Google Workspace, Microsoft 365, Salesforce, and Slack - serving more than 1,500 organizations across 100+ countries.
Alastair Paterson
Alastair Paterson is the co-founder and CEO of Harmonic Security, a San Francisco-based startup building language models that protect enterprise data as employees pour it into generative AI tools. He previously co-founded Digital Shadows in a London kitchen in 2011 and ran it for eleven years through to its $160M acquisition by ReliaQuest in 2022. A Bristol-trained engineer who cut his teeth at BAE Systems Detica, he is now back on his second cybersecurity company, this one wagering that coaching beats blocking.
Abhishek Agrawal
Abhishek Agrawal is the Co-Founder and CEO of Material Security, a San Francisco-based cybersecurity company that pioneered zero-trust protection for cloud email and collaboration environments. A Princeton-trained engineer who attended college at 16 and later earned his MBA from Harvard Business School as a Baker Scholar (top 5%), Agrawal co-founded Material Security in 2017 alongside former Dropbox colleagues Ryan Noon and Chris Park, inspired by the 2016 John Podesta email breach. Under his leadership, Material Security reached unicorn status ($1.1B valuation) after a $100M Series C in May 2022 led by Founders Fund, with backing from Andreessen Horowitz, Elad Gil, and Snowflake Ventures. The platform protects organizations like OpenAI, Anthropic, Reddit, Lyft, Roblox, and DoorDash against email-based threats and data loss in Google Workspace and Microsoft 365.
Rohan Sathe
Rohan Sathe is the Co-Founder and CEO of Nightfall AI, the AI-native data loss prevention platform built for the modern enterprise. A Forbes 30 Under 30 honoree and nationally ranked chess player, Sathe co-founded Nightfall in 2018 after leading backend engineering at Uber Eats, where managing petabytes of sensitive data across fragmented SaaS systems exposed the deep inadequacy of legacy DLP tools. Nightfall has raised $60.3M in total funding and is redefining how enterprises protect sensitive data across SaaS apps, endpoints, browsers, and AI workflows.