Pull to refresh
Logo
AI-native cybersecurity startups draw record venture funding in 2026

AI-native cybersecurity startups draw record venture funding in 2026

Money Moves

Investors and incumbents race for AI-native security as automated attacks escalate

July 29th, 2026: Onyx Security raises $113 million Series B

Overview

Updated Aug 4

Horizon3.ai crossed a $2 billion valuation August 3 with a $250 million Series E, the first AI security company to reach that mark. The oversubscribed round, co-led by NightDragon and NEA, extended a run of large-check deals that began with Exaforce's $125 million Series B in May.

Incumbents are also spending. Cisco announced in June it will acquire WideField Security to extend Splunk's AI-agent monitoring. Onyx Security, which governs AI agents inside corporate networks, raised $113 million in late July after quadrupling its revenue in four months from launch.

Why it matters

If AI agents can investigate alerts in minutes instead of hours, the economics of running a security team and the cost of every breach both change.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

$725M
Exaforce valuation
Roughly double the implied value at the company's Series A 13 months earlier.
$200M
Total raised by Exaforce
All raised within three years of founding.
$2B+
Horizon3.ai valuation
The NodeZero maker reached this mark in its August 2026 Series E, the highest valuation for a pure-play AI security company on record. It tripled the company's $650 million Series D valuation from June 2025.
29 min
Median attacker breakout time
How fast AI-powered intrusions now move from initial access to lateral spread.
$172B
AI cybersecurity market by 2029
Gartner forecast, up from $10.8 billion in 2024.

Voices

Curated perspectives — historical figures and your fellow readers.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

People Involved

Organizations Involved

Timeline

April 2025 July 2026

9 events Latest: July 29th, 2026 · 1 month ago
Tap a bar to jump to that date
  1. Onyx Security raises $113 million Series B

    Latest Funding

    Bessemer Venture Partners leads the round for an Israeli company building a supervisory layer that monitors and restricts AI agents in enterprise environments. Revenue quadrupled in four months since the March 2026 stealth launch.

  2. Cisco announces WideField Security acquisition

    M&A

    Cisco will acquire WideField Security to extend Splunk's AI-agent monitoring, correlating identity and session data across human users, non-human identities, and AI agents. It is Cisco's third cybersecurity deal of 2026.

  3. Rising in Cyber 2026 list released

    Industry

    Notable Capital's cohort of 30 startups has now raised more than $6.9 billion combined.

  4. Exaforce raises $125 million Series B

    Funding

    HarbourVest leads at $725 million valuation, with Peak XV, Mayfield, Khosla, Seligman.

  5. WitnessAI raises $58 million

    Funding

    Sound Ventures, Qualcomm, and Samsung back AI-governance and threat-defense platform.

  6. 7AI sets cybersecurity Series A record

    Funding

    Index Ventures leads $130 million round at roughly $700 million valuation.

  7. First fully autonomous AI cyberattack documented

    Threat

    Researchers report an intrusion where AI handled 80 to 90 percent of the operation.

  8. Dropzone AI closes $37 million Series B

    Funding

    Theory Ventures leads, signaling investor appetite for autonomous SOC analysts.

  9. Exaforce raises $75 million Series A

    Funding

    Khosla Ventures and Mayfield lead the round for the agentic SOC platform.

Scenarios

1

Agentic SOC vendor reaches unicorn status before end of 2026

Likely Resolves by End of 2026

Discussed by: Crunchbase News, SC Media, Software Strategies Blog

At least one pure-play agentic security operations vendor crosses a $1 billion valuation in a new primary or secondary round. Exaforce, 7AI, and Prophet Security are the closest candidates given current trajectories and investor demand.

2

Large incumbent acquires an agentic SOC startup

Possible Resolves by Q2 2027

Discussed by: Cybersecurity Dive, Software Strategies Blog M&A coverage

CrowdStrike, Palo Alto Networks, Microsoft, Cisco, or another platform vendor buys one of the named agentic SOC startups to plug AI agents into an existing security suite. Strategic acquirers have spent more than $96 billion on cybersecurity M&A in 2026 alone.

3

Agentic security funding cools as customer metrics underwhelm

Unlikely Resolves by End of 2026

Discussed by: The Information, Crunchbase News

Enterprise pilots produce mixed accuracy and savings data, and Series C rounds price flat or down. Funding into the top 10 agentic AI security startups falls below 2025 levels as venture firms wait for proof of revenue durability.

4

Federal agency adopts agentic SOC for civilian network defense

Possible Resolves by Q1 2027

Discussed by: Federal News Network, NextGov/FCW

The Cybersecurity and Infrastructure Security Agency or a cabinet department signs a contract for an agentic SOC platform to defend federal networks against AI-driven intrusions. A public award would validate enterprise-grade claims and unlock the federal market.

5

AI-agent governance becomes a distinct security category

Likely Resolves by End of 2027

Discussed by: SecurityWeek, Bessemer Venture Partners (Onyx Series B press materials), Axios Pro

Onyx Security raised $113 million in July 2026 after quadrupling revenue in four months. If growth continues, analyst firms like Gartner and Forrester will define AI-agent governance as its own market segment — distinct from agentic SOC and identity management. A formal market guide or Magic Quadrant would steer enterprise buyers toward purpose-built governance vendors and away from bundled solutions.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

June 2019

CrowdStrike IPO and the cloud endpoint wave (2019)

CrowdStrike went public at $34 a share, valuing the cloud-native endpoint security company at $11 billion on day one. Investors paid up for a startup that used cloud telemetry and machine learning to replace signature-based antivirus.

Then

The IPO pulled in $612 million and lifted valuations across the endpoint security category, helping SentinelOne and Carbon Black price later rounds and exits.

Now

CrowdStrike grew past $50 billion in market cap and set the template for selling AI-powered security as a SaaS platform. Endpoint detection became table stakes for enterprises by 2023.

Why this matters now

Agentic SOC vendors are pitching investors the same arc: cloud-delivered AI that replaces an older generation of manual tooling. The 2019 endpoint wave is the closest precedent for how that pitch plays out.

March 2024

Splunk acquired by Cisco (March 2024)

Cisco completed its $28 billion acquisition of Splunk, the dominant Security Information and Event Management vendor. The deal closed Cisco's gap in security analytics and gave Splunk a path off the public markets after years of margin pressure.

Then

Splunk customers began evaluating alternatives, worried about price hikes and product roadmap shifts under Cisco. Vendors selling SIEM replacements saw pipelines fill.

Now

The acquisition crystallized the view that legacy SIEM was ripe for displacement. Agentic SOC startups now position explicitly as the replacement, with Exaforce marketing that it skips SIEM rules entirely.

Why this matters now

Exaforce, 7AI, and peers are betting the next decade of security spend shifts away from the SIEM model Splunk built. The Cisco deal is the catalyst they cite when explaining why now.

March 2025

Google acquires Wiz for $32 billion (March 2025)

Google agreed to buy cloud security platform Wiz for $32 billion in cash, the largest cybersecurity deal on record. Wiz had grown to roughly $500 million in annual recurring revenue four years after launch.

Then

The deal compressed time-to-exit expectations across security startups. Founders and investors began pricing later rounds against the possibility of a strategic exit at a similar revenue multiple.

Now

Hyperscalers became aggressive buyers of security companies, with Microsoft, Amazon, and Google all signaling appetite. Funding rounds for cloud and AI security accelerated through 2025 and 2026.

Why this matters now

The Wiz exit is the reference comp investors use when underwriting Exaforce-style bets. A $725 million Series B valuation only pencils if a Wiz-style strategic outcome is realistic.

Sources

(15)