AI-native cybersecurity startups draw record venture funding in 2026

Overview

Horizon3.ai crossed a $2 billion valuation August 3 with a $250 million Series E, the first AI security company to reach that mark. The oversubscribed round, co-led by NightDragon and NEA, extended a run of large-check deals that began with Exaforce's $125 million Series B in May.

Incumbents are also spending. Cisco announced in June it will acquire WideField Security to extend Splunk's AI-agent monitoring. Onyx Security, which governs AI agents inside corporate networks, raised $113 million in late July after quadrupling its revenue in four months from launch.

Why it matters

If AI agents can investigate alerts in minutes instead of hours, the economics of running a security team and the cost of every breach both change.

Questions about this story

No questions yet — be the first to ask.

Play on this story Voices Debate Predict Higher or Lower Connections

Key Indicators

$725M

Exaforce valuation

Roughly double the implied value at the company's Series A 13 months earlier.

$200M

Total raised by Exaforce

All raised within three years of founding.

$2B+

Horizon3.ai valuation

The NodeZero maker reached this mark in its August 2026 Series E, the highest valuation for a pure-play AI security company on record. It tripled the company's $650 million Series D valuation from June 2025.

29 min

Median attacker breakout time

How fast AI-powered intrusions now move from initial access to lateral spread.

$172B

AI cybersecurity market by 2029

Gartner forecast, up from $10.8 billion in 2024.

Voices

Curated perspectives — historical figures and your fellow readers.

Ever wondered what historical figures would say about today's headlines?

Play

Exploring all sides of a story is often best achieved with Play.

Most of these play right now — no account needed. Sign up to save scores, keep a streak, and unlock Debate and Predict. Log in Sign Up

Predict 5 ways this could play out. Back the one you believe — contrarian picks score more when a scenario has a resolution date. Log in to play

People Involved

Ankur Singla

Leading Series B-funded expansion into Japan and Europe

Organizations Involved

Exaforce

AI cybersecurity startup

Series B funded, expanding internationally

San Jose company selling an agentic Security Operations Center platform built around autonomous AI agents called Exabots.

HarbourVest Partners

Private markets investment firm

Lead investor in Exaforce Series B

Boston-based private markets firm managing more than $130 billion across funds, secondaries, and direct investments.

7AI

AI cybersecurity startup

Holds record for largest cybersecurity Series A

Boston startup from Cybereason's founders selling AI agents that investigate security alerts at machine speed.

Horizon3.ai

AI cybersecurity startup

Series E funded at $2B+ valuation, August 2026

San Francisco company selling NodeZero, an autonomous penetration testing platform that finds and exploits vulnerabilities in corporate networks without human direction.

Onyx Security

AI security startup

Series B funded, July 2026

Israeli company selling an AI control plane that discovers, monitors, and limits what AI agents can do across an organization's network.

Timeline

April 2025 July 2026

9 events Latest: July 29th, 2026 · 2 weeks ago

Tap a bar to jump to that date

July 2026
Onyx Security raises $113 million Series B
Latest Funding

Bessemer Venture Partners leads the round for an Israeli company building a supervisory layer that monitors and restricts AI agents in enterprise environments. Revenue quadrupled in four months since the March 2026 stealth launch.
July 29th, 2026
June 2026
Cisco announces WideField Security acquisition
M&A

Cisco will acquire WideField Security to extend Splunk's AI-agent monitoring, correlating identity and session data across human users, non-human identities, and AI agents. It is Cisco's third cybersecurity deal of 2026.
June 22nd, 2026
May 2026
Rising in Cyber 2026 list released
Industry

Notable Capital's cohort of 30 startups has now raised more than $6.9 billion combined.
May 13th, 2026
Exaforce raises $125 million Series B
Funding

HarbourVest leads at $725 million valuation, with Peak XV, Mayfield, Khosla, Seligman.
May 12th, 2026
January 2026
WitnessAI raises $58 million
Funding

Sound Ventures, Qualcomm, and Samsung back AI-governance and threat-defense platform.
January 2026
December 2025
7AI sets cybersecurity Series A record
Funding

Index Ventures leads $130 million round at roughly $700 million valuation.
December 4th, 2025
September 2025
First fully autonomous AI cyberattack documented
Threat

Researchers report an intrusion where AI handled 80 to 90 percent of the operation.
September 2025
July 2025
Dropzone AI closes $37 million Series B
Funding

Theory Ventures leads, signaling investor appetite for autonomous SOC analysts.
July 28th, 2025
April 2025
Exaforce raises $75 million Series A
Funding

Khosla Ventures and Mayfield lead the round for the agentic SOC platform.
April 17th, 2025

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

June 2019

CrowdStrike IPO and the cloud endpoint wave (2019)

CrowdStrike went public at $34 a share, valuing the cloud-native endpoint security company at $11 billion on day one. Investors paid up for a startup that used cloud telemetry and machine learning to replace signature-based antivirus.

Then

The IPO pulled in $612 million and lifted valuations across the endpoint security category, helping SentinelOne and Carbon Black price later rounds and exits.

Now

CrowdStrike grew past $50 billion in market cap and set the template for selling AI-powered security as a SaaS platform. Endpoint detection became table stakes for enterprises by 2023.

Why this matters now

Agentic SOC vendors are pitching investors the same arc: cloud-delivered AI that replaces an older generation of manual tooling. The 2019 endpoint wave is the closest precedent for how that pitch plays out.

March 2025

Google acquires Wiz for $32 billion (March 2025)

Google agreed to buy cloud security platform Wiz for $32 billion in cash, the largest cybersecurity deal on record. Wiz had grown to roughly $500 million in annual recurring revenue four years after launch.

Then

The deal compressed time-to-exit expectations across security startups. Founders and investors began pricing later rounds against the possibility of a strategic exit at a similar revenue multiple.

Now

Hyperscalers became aggressive buyers of security companies, with Microsoft, Amazon, and Google all signaling appetite. Funding rounds for cloud and AI security accelerated through 2025 and 2026.

Why this matters now

The Wiz exit is the reference comp investors use when underwriting Exaforce-style bets. A $725 million Series B valuation only pencils if a Wiz-style strategic outcome is realistic.

March 2024

Splunk acquired by Cisco (March 2024)

Cisco completed its $28 billion acquisition of Splunk, the dominant Security Information and Event Management vendor. The deal closed Cisco's gap in security analytics and gave Splunk a path off the public markets after years of margin pressure.

Then

Splunk customers began evaluating alternatives, worried about price hikes and product roadmap shifts under Cisco. Vendors selling SIEM replacements saw pipelines fill.

Now

The acquisition crystallized the view that legacy SIEM was ripe for displacement. Agentic SOC startups now position explicitly as the replacement, with Exaforce marketing that it skips SIEM rules entirely.

Why this matters now

Exaforce, 7AI, and peers are betting the next decade of security spend shifts away from the SIEM model Splunk built. The Cisco deal is the catalyst they cite when explaining why now.