dspm
(12)
Bruno Kurtic Is Building the Missing Map for Enterprise AI
After helping take Sumo Logic from inception to the public markets, Bruno Kurtic spent a year asking what enterprise software still had not solved. His answer was hiding in plain sight: companies cannot govern AI until they understand the data beneath it.
Tarique Mustafa
Tarique Mustafa is a Silicon Valley cybersecurity founder, engineer and AI researcher who serves as CEO, CTO and founder of Chorology, Inc., a San Jose company applying deep AI to automate data discovery, classification, mapping and compliance enforcement for enterprises. A serial entrepreneur with two prior startups that ended in acquisitions, he previously founded GhangorCloud, a pioneer of fourth-generation data leak prevention, and held senior roles at Symantec, MCI WorldCom and others. He holds dual master's degrees and did PhD research in AI at USC, and holds multiple patents in deep AI.
Cyberhaven
Cyberhaven is a data security company that protects enterprises from data exfiltration and insider risk by tracing how information moves rather than just where it sits. Founded in 2016 by five PhD researchers with roots in the DARPA Cyber Grand Challenge, the company built a proprietary 'data lineage' engine and an AI layer, Linea AI, that combines Data Loss Prevention (DLP), Data Security Posture Management (DSPM), Insider Risk Management, and AI security into one platform. Reaching a $1 billion valuation in April 2025 after a $100M Series D, Cyberhaven serves customers such as Snowflake, Motorola, Reddit, and major law firms.
Bedrock Data
Bedrock Data is a Menlo Park, California data security company that builds an AI-native data security posture management (DSPM) platform. Its Metadata Lake technology discovers, classifies and tracks sensitive data across cloud, SaaS and AI systems at petabyte scale, giving enterprises visibility into what data they have, who can access it and how it moves - without copying that data out of a customer's environment.
Chorology, Inc.
Chorology, Inc. is a San Jose-based data security and compliance startup that uses a Deep-AI 'knowledge encoding' engine - rather than conventional machine learning - to automatically discover, classify, and map an enterprise's sensitive data across structured and unstructured repositories. Its flagship platform, CAPE (Compliance and Posture Enforcer), aims to give organizations a continuous, mandate-agnostic view of where regulated data lives so they can enforce data security posture and meet frameworks like GDPR, CCPA, and HIPAA. Founded by serial cybersecurity entrepreneur Tarique Mustafa, the company emerged from stealth in July 2024 with $9M in funding and a roster of early Fortune 500 users.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Relyance AI
Relyance AI is a San Francisco-based enterprise software company that maps how data actually moves through an organization - from source code and cloud infrastructure to third-party apps and AI models - and continuously checks that movement against customer contracts, privacy regulations, and compliance frameworks. Founded in 2020 by Abhi Sharma and Leila Golchehreh, the company sells an AI-native data governance and security platform used by companies including Coinbase, Snowflake, Notion, Plaid, and Canva. It raised a $32M Series B in October 2024 led by Thomvest Ventures, bringing total funding to roughly $62-67M.
Theom
Theom is a San Jose-based data security company building what it calls an AI-native Data Operations Center - a platform that discovers, classifies, tracks and protects enterprise data across cloud data lakes, warehouses, SaaS and generative-AI environments. Rather than guarding infrastructure or access alone, Theom takes a data-first approach: it maps who can touch which data, scores the financial value and risk of that data, detects breach behavior mapped to MITRE ATT&CK, and enforces policy in real time. Founded in December 2020 by former Cisco/Tetration and Google engineers, it raised a $20M Series A in May 2025 led by Wing VC with strategic backers Snowflake Ventures, Databricks Ventures and SentinelOne's S Ventures, and counts Fiserv, Grammarly, Tradeweb and JetBlue among its customers.
Seclore
Seclore is a data-centric security company that protects sensitive files and emails wherever they travel - across any user, device, app, or cloud. Its browser-based ARMOR platform unifies Data Security Posture Management, AI-powered Data Loss Prevention, data classification, and Enterprise Digital Rights Management so organizations keep persistent, granular control over data even after it leaves their walls. Founded in India in 2008 and headquartered in Santa Clara, California, Seclore serves more than 2,000 enterprises and government bodies across roughly 29 countries.
Elizabeth Nammour
Elizabeth Nammour is the co-founder and CEO of Teleskope, a New York-based data security company she launched in 2022 after wrestling with petabyte-scale data sprawl as a security engineer at Airbnb. Teleskope bills itself as the industry's first agentic data security platform, autonomously scanning, classifying, and remediating sensitive data so organizations can adopt AI without losing track of their information. In late 2025 the company raised a $25 million Series A led by M13, bringing total funding to $32.2 million, on the back of 600% year-over-year growth and an 85% pilot-to-paid conversion rate.
Teleskope
Teleskope is a New York-based data security company that builds what it calls the industry's first agentic data protection platform. Founded in 2022 by former Airbnb security engineers Elizabeth Nammour and Julie Trias, it autonomously discovers, classifies, and protects sensitive data across cloud, SaaS, and on-premises environments, then automatically remediates risk through redaction, masking, encryption, and access fixes. The platform uses smaller, fine-tuned models to read business context, aiming to move teams beyond alert fatigue toward real action.
Upwind Security
Upwind is a runtime-first Cloud Native Application Protection Platform (CNAPP) that unifies cloud and AI security across the full lifecycle. Founded in 2022 by the team behind Spot.io, the company uses eBPF-based runtime telemetry to give security teams real-time context on what's actually exploitable in production - cutting noise, surfacing real threats, and protecting cloud-native and AI workloads at the speed they run.