security-automation
(8)
Expel
Expel built the security service its founders once wished they could buy: one that keeps the tools, loses the alert pile, and shows its work. A decade in, its hardest product may be trust itself.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Praetorian
Praetorian is an Austin, Texas-based cybersecurity company that helps organizations prevent breaches by combining an adversarial, offensive-security mindset with automation and AI. Founded in 2010 by CEO Nathan Sportsman, the firm pairs elite red-team engineers with its flagship Chariot platform for Continuous Threat Exposure Management (CTEM) and attack surface management, plus services spanning penetration testing, cloud and product security, and adversarial emulation. Its clients include large technology, finance, healthcare, and automotive organizations, and it maintains open-source tools such as the Nosey Parker secrets scanner.
CyFlare
CyFlare is a U.S.-based Managed Security Service Provider that runs cybersecurity operations on behalf of MSPs, resellers and technology vendors. Through its CyFlare ONE platform and a 24/7 Open-XDR-enabled Security Operations Center, the company delivers managed detection and response, managed EDR, XDR, vulnerability management, managed email security and compliance support, letting channel partners offer enterprise-grade security to their clients without building an in-house SOC.
depthfirst
depthfirst is a San Francisco applied AI lab building an AI-native security platform that detects, triages and remediates software vulnerabilities before attackers can exploit them. Its 'General Security Intelligence' uses custom AI agents and purpose-trained security models to read a company's code, business logic and infrastructure, surfacing more true-positive vulnerabilities while cutting false positives and delivering developer-ready fixes. Founded in 2024 by leaders from Databricks, Google DeepMind and Faire, the company raised $120M across Series A and B within a few months of leaving stealth.
Radiant Security
Radiant Security builds an adaptive, agentic AI SOC platform that triages, investigates, and helps respond to every security alert a team receives - regardless of source, complexity, or novelty. Founded in 2021 by security veterans Shahar Ben-Hador and Barry Shteiman, the company aims to cut the alert noise that overwhelms security operations centers, escalating only real threats to human analysts and reducing analyst workload by up to 98%. It also folds in integrated log management to cut SIEM storage costs.
Amplifier Security
Amplifier Security is an AI-native workforce security company that turns the noisy gap between finding and fixing security problems into an automated, employee-friendly workflow. Its agentic platform builds a per-employee Human Risk Graph, then deploys AI agents that engage workers directly in Slack, Teams and the browser to remediate device, app, identity and behavior risks - with humans kept in the loop. Founded in 2023 by Shreyas Sadalgi (CEO) and Tommy Donnelly (CTO), the company has raised roughly $9M and counts security-industry founders and CISOs among its backers and early customers.
Illumio
Illumio is a Sunnyvale-based cybersecurity company that pioneered Zero Trust Segmentation. Its Breach Containment Platform - Illumio Segmentation plus the AI-powered Illumio Insights - assumes attackers will get in and focuses on stopping them from spreading. By mapping how applications talk to each other across data centers, public clouds, and endpoints, Illumio lets organizations isolate workloads and contain ransomware and breaches before they become disasters.