Pull to refresh
Logo
Daily Brief
Following Why Ranks Sign Up
AI-native cybersecurity startups draw record venture funding in 2026

AI-native cybersecurity startups draw record venture funding in 2026

Money Moves

Investors pour money into AI agents built to defend against AI attackers

3 days ago: Rising in Cyber 2026 list released

Overview

Exaforce, a three-year-old company building AI agents that staff a security operations center, raised $125 million on May 12 at a $725 million valuation. HarbourVest led the round, doubling the startup's price tag a year after its $75 million Series A.

The round is one piece of a larger pattern. Venture firms have funneled billions into startups promising AI defenders fast enough to catch AI attackers, with median breakout times for automated intrusions now measured in minutes rather than hours.

Why it matters

If AI agents can investigate alerts in minutes instead of hours, the economics of running a security team and the cost of every breach both change.

Play on this story Voices Debate Predict

Key Indicators

$725M
Exaforce valuation
Roughly double the implied value at the company's Series A 13 months earlier.
$200M
Total raised by Exaforce
All raised within three years of founding.
$3.6B
Agentic AI security funding
Crunchbase-tracked total across the top 10 agentic security startups heading into 2026.
29 min
Median attacker breakout time
How fast AI-powered intrusions now move from initial access to lateral spread.
$172B
AI cybersecurity market by 2029
Gartner forecast, up from $10.8 billion in 2024.

Interactive

Exploring all sides of a story is often best achieved with Play.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

Log in Sign Up

People Involved

Ankur Singla
Ankur Singla
Leading Series B-funded expansion into Japan and Europe

Organizations Involved

Exaforce
Exaforce
AI cybersecurity startup
Series B funded, expanding internationally

San Jose company selling an agentic Security Operations Center platform built around autonomous AI agents called Exabots.
HarbourVest Partners
HarbourVest Partners
Private markets investment firm
Lead investor in Exaforce Series B

Boston-based private markets firm managing more than $130 billion across funds, secondaries, and direct investments.
7AI
7AI
AI cybersecurity startup
Holds record for largest cybersecurity Series A

Boston startup from Cybereason's founders selling AI agents that investigate security alerts at machine speed.

Timeline

  1. Rising in Cyber 2026 list released

    Industry

    Notable Capital's cohort of 30 startups has now raised more than $6.9 billion combined.

  2. Exaforce raises $125 million Series B

    Funding

    HarbourVest leads at $725 million valuation, with Peak XV, Mayfield, Khosla, Seligman.

  3. WitnessAI raises $58 million

    Funding

    Sound Ventures, Qualcomm, and Samsung back AI-governance and threat-defense platform.

  4. 7AI sets cybersecurity Series A record

    Funding

    Index Ventures leads $130 million round at roughly $700 million valuation.

  5. First fully autonomous AI cyberattack documented

    Threat

    Researchers report an intrusion where AI handled 80 to 90 percent of the operation.

  6. Dropzone AI closes $37 million Series B

    Funding

    Theory Ventures leads, signaling investor appetite for autonomous SOC analysts.

  7. Exaforce raises $75 million Series A

    Funding

    Khosla Ventures and Mayfield lead the round for the agentic SOC platform.

Scenarios

Predict which scenario wins. Contrarian picks score more — points lock in when the scenario resolves.

Log in to predict. Track your picks, climb the leaderboard. Log in Sign Up
1

Agentic SOC vendor reaches unicorn status before end of 2026

At least one pure-play agentic security operations vendor crosses a $1 billion valuation in a new primary or secondary round. Exaforce, 7AI, and Prophet Security are the closest candidates given current trajectories and investor demand.

Resolves by: 2026-12-31
Source: Crunchbase or PitchBook reported funding announcement
Discussed by: Crunchbase News, SC Media, Software Strategies Blog
Consensus —
2

Large incumbent acquires an agentic SOC startup

CrowdStrike, Palo Alto Networks, Microsoft, Cisco, or another platform vendor buys one of the named agentic SOC startups to plug AI agents into an existing security suite. Strategic acquirers have spent more than $96 billion on cybersecurity M&A in 2026 alone.

Resolves by: 2027-06-30
Source: Acquirer press release or SEC 8-K filing
Discussed by: Cybersecurity Dive, Software Strategies Blog M&A coverage
Consensus —
3

Agentic security funding cools as customer metrics underwhelm

Enterprise pilots produce mixed accuracy and savings data, and Series C rounds price flat or down. Funding into the top 10 agentic AI security startups falls below 2025 levels as venture firms wait for proof of revenue durability.

Resolves by: 2026-12-31
Source: Crunchbase annual cybersecurity funding tally
Discussed by: The Information, Crunchbase News
Consensus —
4

Federal agency adopts agentic SOC for civilian network defense

The Cybersecurity and Infrastructure Security Agency or a cabinet department signs a contract for an agentic SOC platform to defend federal networks against AI-driven intrusions. A public award would validate enterprise-grade claims and unlock the federal market.

Resolves by: 2027-03-31
Source: SAM.gov contract award listing or agency press release
Discussed by: Federal News Network, NextGov/FCW
Consensus —

Historical Context

CrowdStrike IPO and the cloud endpoint wave (2019)

June 2019

What Happened

CrowdStrike went public at $34 a share, valuing the cloud-native endpoint security company at $11 billion on day one. Investors paid up for a startup that used cloud telemetry and machine learning to replace signature-based antivirus.

Outcome

Short Term

The IPO pulled in $612 million and lifted valuations across the endpoint security category, helping SentinelOne and Carbon Black price later rounds and exits.

Long Term

CrowdStrike grew past $50 billion in market cap and set the template for selling AI-powered security as a SaaS platform. Endpoint detection became table stakes for enterprises by 2023.

Why It's Relevant Today

Agentic SOC vendors are pitching investors the same arc: cloud-delivered AI that replaces an older generation of manual tooling. The 2019 endpoint wave is the closest precedent for how that pitch plays out.

Google acquires Wiz for $32 billion (March 2025)

March 2025

What Happened

Google agreed to buy cloud security platform Wiz for $32 billion in cash, the largest cybersecurity deal on record. Wiz had grown to roughly $500 million in annual recurring revenue four years after launch.

Outcome

Short Term

The deal compressed time-to-exit expectations across security startups. Founders and investors began pricing later rounds against the possibility of a strategic exit at a similar revenue multiple.

Long Term

Hyperscalers became aggressive buyers of security companies, with Microsoft, Amazon, and Google all signaling appetite. Funding rounds for cloud and AI security accelerated through 2025 and 2026.

Why It's Relevant Today

The Wiz exit is the reference comp investors use when underwriting Exaforce-style bets. A $725 million Series B valuation only pencils if a Wiz-style strategic outcome is realistic.

Splunk acquired by Cisco (March 2024)

March 2024

What Happened

Cisco completed its $28 billion acquisition of Splunk, the dominant Security Information and Event Management vendor. The deal closed Cisco's gap in security analytics and gave Splunk a path off the public markets after years of margin pressure.

Outcome

Short Term

Splunk customers began evaluating alternatives, worried about price hikes and product roadmap shifts under Cisco. Vendors selling SIEM replacements saw pipelines fill.

Long Term

The acquisition crystallized the view that legacy SIEM was ripe for displacement. Agentic SOC startups now position explicitly as the replacement, with Exaforce marketing that it skips SIEM rules entirely.

Why It's Relevant Today

Exaforce, 7AI, and peers are betting the next decade of security spend shifts away from the SIEM model Splunk built. The Cisco deal is the catalyst they cite when explaining why now.

Sources

(8)
+2
TechNode Global Business Wire SecurityWeek Software Strategies Blog The Hacker News BankInfoSecurity Business Wire Business Wire