insider-risk
(10)
Gurucul and the Trouble with Normal
The dangerous login may have the right password. Gurucul has built a business around what happens next - and why a security team should care.
Marshall Heilman Wants to Catch the Breach Before It Becomes One
The former Marine and Mandiant operator spent a career arriving after alarms went off. At DTEX, he is betting that the next chapter of cybersecurity begins earlier - in the faint signals of human and machine behavior.
Nishant Doshi Has Spent 20 Years Following Data - Now the Data Is Learning to Move Alone
The Cyberhaven CEO has built and sold two companies by noticing where enterprise software was heading. His latest bet is that protecting files is no longer enough when data travels through people, prompts, and autonomous agents.
From Smart Sprinklers to Insider Risk, Adarsh Ambati Follows the Signal
Before Candor began stitching together the clues behind insider risk, its founder spent years studying another kind of waste: sprinklers watering California lawns at the wrong time. The domains changed. His habit of following overlooked signals did not.
Candor
Candor (YC W25) is a San Francisco cybersecurity startup building agentic data loss prevention and insider risk management. Instead of drowning security teams in false positives like legacy DLP tools, Candor's AI agents watch both the data movement and the person behind it - stitching together the story of who is about to leak source code, exfiltrate IP, or misuse AI tools - so lean teams know exactly who to watch before damage is done.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
WireX Systems
WireX Systems is a cybersecurity company building network detection and response (NDR) and forensics technology under its EvidenceOps platform, powered by Ne2ition. Its patented Contextual Capture engine translates raw network packets into human-readable intelligence, retaining months of full payload data so security teams can investigate, prove, and respond to threats in minutes instead of days. Founded in 2010 by veterans of Israel's intelligence community, the company serves SOC teams across finance, healthcare, manufacturing and retail.
Living Security
Living Security is an Austin-based cybersecurity company that pioneered Human Risk Management (HRM), moving organizations beyond check-the-box compliance training toward measurable behavior change. Its AI-native Unify platform correlates behavioral, identity, and threat signals to find the small share of employees who drive most of an organization's risk, then guides targeted interventions. Founded in 2017 by Ashley and Drew Rose, the company serves more than 100 enterprises including Fortune 500 names, and was named a Leader in the 2024 Forrester Wave for Human Risk Management Solutions.
Nightfall AI
Nightfall AI is a San Francisco-based data security company that uses AI-native detection to find and protect sensitive data across SaaS applications, AI tools, and endpoints. It pitches itself as the first DLP and insider risk platform purpose-built for the AI era.
Rohan Sathe
Rohan Sathe is the Co-Founder and CEO of Nightfall AI, the AI-native data loss prevention platform built for the modern enterprise. A Forbes 30 Under 30 honoree and nationally ranked chess player, Sathe co-founded Nightfall in 2018 after leading backend engineering at Uber Eats, where managing petabytes of sensitive data across fragmented SaaS systems exposed the deep inadequacy of legacy DLP tools. Nightfall has raised $60.3M in total funding and is redefining how enterprises protect sensitive data across SaaS apps, endpoints, browsers, and AI workflows.