COMPANIES

Identify Verification and Passwordless Authentication

1Kosmos BlockID unifies identity proofing and authentication to provide workers, customers and citizens frictionless onboarding and passwordless access to online services. The FIDO2 and NIST certified distributed digital identity platform virtually eliminates the risk of identity impersonation by combining strong multi-factor authentication with strong identity.

• Sector: Identity

• Founded In: 2018

• Partnered In: 2021 (Series A)

• CEO: Hemen Vimadalal

• Investment Team: Alberto Yépez, Ernie Bio

• Status: Active

Fraud Prevention

• Sector: Identity

• Acquired by: American Express

• Investment Team: Sean Cunningham

• Status: Prior

Unified Security Management

• Sector: Infrastructure, Security Operations

• Acquired by: AT&T

• Investment Team: Alberto Yépez

• Status: Prior

Compliance Automation and Cloud Security

Anitian is the leading cloud security and compliance automation provider. Anitian’s Compliance Automation Platform and SecureCloud products help high-growth enterprises and SaaS companies get applications to the cloud and market 80% faster and at 50% of the cost by delivering a complete cloud security infrastructure environment – pre-engineered and preconfigured to rigorous security standards such as FedRAMP, PCI, CMMC, SOC 2, and ISO27001.

• Sector: Governance and Compliance, Infrastructure

• Founded In: 2019

• Partnered In: 2019 (Series A)

• CEO: Rakesh Narasimhan

• Investment Team: MJ Ramachandran, Sean Cunningham

• Status: Active

Runtime Code Analysis for Developers

AppMap is an open source company that helps developers and their organizations keep their software aligned, clear and secure through software design observability and runtime code analysis.  Unlike legacy static code analysis systems, AppMap is dynamic, powering the streaming and integration of data from Continuous Integration and Development platforms (CI/CD), analysis of data flows, and identification of key functions and dependent services for any feature or functionality.

• Sector: Code

• Founded In: 2019

• Partnered In: 2022 (Seed)

• CEO: Elizabeth Lawler

• Investment Team: MJ Ramachandran

• Status: Active

Mobile Application Security Analysis

• Sector: Data, Security Operations

• Founded In: 2016

• Partnered In: 2018 (Series B)

• CEO: Anne Bonaparte

• Investment Team: Sean Cunningham

• Status: Acquired

Deception-based Threat Detection

Attivo Networks® (acq. by SentinelOne), experts in identity security and lateral movement attack prevention, delivers a superior defense for preventing privilege escalation and lateral movement threat activity. The portfolio provides patented innovative defenses at critical points of attack, including at endpoints, in Active Directory, and cloud environments.

• Sector: Identity, Infrastructure

• Founded In: 2011

• Partnered In: 2017 (Series B)

• CEO: Tushar Kothari

• Investment Team: Alberto Yépez

• Status: Acquired

ICS / OT Security

• Sector: Infrastructure

• Founded In: 2012

• Partnered In: 2016 (Series A)

• CEO: Kevin Senator

• Investment Team: Alberto Yépez

• Status: Acquired

Behavioral Biometrics and Continuous Authentication

BehavioSec is a behavioral biometrics company providing continuous authentication for end users based on their interactions with web and mobile apps. Its solutions are deployed across Global 2000 companies to dramatically reduce fraud, friction, threat and theft.

• Sector: Identity

• Founded In: 2007

• Partnered In: 2018 (Series B)

• CEO: Neil Costigan

• Investment Team: Alberto Yépez

• Status: Acquired

Security Testing and Attack Surface Management

Bishop Fox delivers offensive security, including continuous pen testing, red teaming, security assessments, and attack surface management solutions to secure the world’s top organizations. They work with hundreds of businesses — including 25% of the Fortune 100, 8 of the top 10 global tech companies, and all of the top media companies — to deliver proactive protection that is consistently rated as “world class” in NPS surveys.

• Sector: Infrastructure, Security Operations

• Founded In: 2005

• Partnered In: 2018 (Series A)

• CEO: Vincent Liu

• Investment Team: Don Dixon, Ernie Bio

• Status: Active

• Sector: Infrastructure, Security Operations

• Acquired by: Madison Dearborn

• Investment Team: Alberto Yépez

• Status: Prior

Data Infrastructure and Dataware

Cinchy is the Dataware platform that makes integration obsolete. Cinchy is the world’s first comprehensive dataware platform that unlocks data from enterprise apps and connects it in a universal data network. Built for real-time data collaboration, Cinchy Dataware addresses the root cause of data fragmentation and data silos, eliminates the need for costly and time-consuming data integration, and mitigates risks of data duplication.

• Sector: Data

• Founded In: 2017

• Partnered In: 2022 (Series B)

• CEO: Dan DeMers

• Investment Team: Alberto Yépez, Leo Casusol, Reynaldo Kirton

• Status: Active

Identity, Authorization & Consent for Open Data Exchange

Cloudentity provides identity-aware authorization and application security solutions for the API-first economy. Its dynamic, fine-grained API and M2M authorization governance solution accelerates application delivery by expediting security validation with full data lineage for audit, forensics, and compliance.

• Sector: Code, Identity

• Founded In: 2011

• Partnered In: 2020 (Series A)

• CEO: Brook Lovatt

• Investment Team: MJ Ramachandran, Sean Cunningham

• Status: Active

Email and Anti-Phishing Security

Area 1 Security (acq. by Cloudflare) stops business email compromise, malware, ransomware, and targeted phishing attacks. Its cloud native SaaS solution supports preemptive anti-phishing across all threat vectors (email, web, social, network), cloud email security/secure email gateway replacement, and phishing security automation for security teams.

• Sector: Infrastructure, Security Operations

• Founded In: 2013

• Partnered In: 2020 (Series B)

• CEO: Patrick Sweeney

• Investment Team: Alberto Yépez, MJ Ramachandran

• Status: Acquired

Cloud Governance and Security-as-Code

Concourse Labs enables organizations to manage cloud risk at the speed of automation. As the innovator in Security-as-Code, Concourse embeds advanced security at every stage of the cloud application lifecycle, removes gaps, empowers shift-left prevention, and protects against drift and attack at runtime.

• Sector: Infrastructure

• Founded In: 2017

• Partnered In: 2020 (Seed)

• CEO: Don Duet

• Investment Team: Don Dixon, MJ Ramachandran

• Status: Active

Cyber Intelligence and Digital Risk Protection

Constella, a leader in digital risk protection, helps organizations anticipate, identify, and remediate targeted digital threats to their people, brands, and assets – at scale. Its solutions are a unique combination of proprietary data, technology, and human expertise—powered by the most extensive breach and social data collection on the planet, from the surface, deep and dark web.

• Sector: Governance and Compliance, Identity

• Founded In: 2014

• Partnered In: 2015 (Series B)

• CEO & Founder: Julio Casal

• Investment Team: Alberto Yépez, Andrew McClure

• Status: Active

Cyber Insurance and Risk Management

Converge is a modern managing general agent (MGA) that fuses cyber insurance, security, and technology. By deploying a proprietary data ecosystem underpinned by expert underwriting, Converge provides precise cyber risk solutions that deliver improved outcomes for its customers, starting with SMBs.

• Sector: Governance and Compliance, Security Operations

• Founded in: 2021

• Partnered in: 2021 (Series A)

• CEO: Tom Kang

• Investment Team: Andrew McClure, Connie Qian, Don Dixon

• Status: Active

Cyber Risk Analytics and Cyber Insurance

CyberCube is the leading provider of data-driven cyber risk analytics for insurers. With best-in-class data access and advanced, multidisciplinary analytics, CyberCube’s SaaS platform helps insurance companies make better decisions when underwriting cyber risk and managing cyber risk aggregation.

• Sector: Governance and Compliance, Security Operations

• Founded In: 2017

• Partnered In: 2018 (Series A)

• CEO: Pascal Millaire

• Investment Team: Alberto Yépez, Andrew McClure, Don Dixon

• Status: Active

Data Detection and Response

Cyberhaven has built the industry’s first Data Detection and Response (DDR) platform to transform the stagnant and ineffective data protection market by applying data lineage and large scale graph analytics to a decades-old unsolved problem.

• Sector: Data

• Founded In: 2016

• Partnered In: 2021 (Series B)

• CEO: Howard Ting

• Investment Team: Shane Shook

• Status: Active

SOC-as-a-Service

Cysiv SOC-as-a-Service provides enterprises with better detection and faster response of true threats. They do this by uniquely combining their cloud-native next gen SIEM with a data-centric approach and a team of experts that operate as a seamless extension of any SOC.

• Sector: Security Operations

• Founded In: 2018

• Partnered In: 2020 (Series A)

• CEO: Partha Panda

• Investment Team: Alberto Yépez

• Status: Acquired

Knowledge Process Automation

DeepSee helps business users in highly regulated industries drive digital transformation and deliver better outcomes by providing best-in-class intelligent automation, knowledge management, and process analytics with its pre-configured, AI-powered cloud platform and composable applications.

• Sector: Governance and Compliance

• Founded In: 2019

• Partnered In: 2021 (Series A)

• CEO: Steve Shillingford

• Investment Team: MJ Ramachandran, Sean Cunningham

• Status: Active

Cloud Infrastructure Security Platform

Ermetic (acq. by Tenable) provides a comprehensive security platform for AWS, Azure and GCP proactively limits the cloud attack surface, detects threats and reduces the blast radius in case of a breach. Ermetic enables security and DevOps teams to remediate the toxic scenarios that put data at risk, and implement zero trust and least privilege access across multi-cloud infrastructure.

• Sector: Identity, Infrastructure

• Founded In: 2019

• Partnered In: 2021 (Series B)

• CEO: Shai Morag

• Investment Team: Alberto Yépez

• Status: Acquired

Managed Detection and Response with ThreatOps

Huntress is a leading provider of advanced breach detection and actionable cybersecurity intelligence for SMBs. Huntress tracks down and evicts hackers hiding in plain sight, enables earlier detection of potential ransomware incidents, maximizes frontline protection with Microsoft Defender, and highlights external vulnerabilities to tighten perimeter defenses.

• Sector: Infrastructure, Security Operations

• Founded In: 2015

• Partnered In: 2020 (Series A)

• CEO: Kyle Hanslovan

• Investment Team: Alberto Yépez, Ernie Bio

• Status: Active

Consumer Breaches and Digital Privacy Protection

IDX is the nation’s largest provider of identity protection and data breach services for companies and individuals, combining consumer-centric software with concierge-style professional services.

• Sector: Identity

• Founded In: 2003

• Partnered In: 2016 (Series B)

• CEO: Tom Kelly

• Investment Team: Sean Cunningham

• Status: Public

Bug Monitoring and Application Performance Monitoring

Instabug provides best-in-class mobile application performance monitoring, (APM), including crash reporting, bug reporting, and a powerful infrastructure that supports over two billion devices. Instabug is the most intuitive mobile-first observability platform that can be utilized throughout the entire mobile app lifecycle, empowering organizations to optimize user experience and overall performance.

• Sector: Code

• Founded in: 2016

• Partnered in: 2022 (Series B)

• CEO: Omar Gabr

• Investment Team: Ernie Bio

• Status: Active

Supply Chain Risk

Interos is a supply chain risk and business relationship intelligence platform that enables customers to instantly discover and visualize their supplier ecosystem, identify supplier concentration risk, conduct multi-facet filtering to enforce sanction controls, and expose high risk outliers to proactively monitor black swan events.

• Sector: Governance and Compliance

• Founded In: 2005

• Partnered In: 2021 (Series C)

• CEO: Jennifer Bisceglie

• Investment Team: Alberto Yépez, Ernie Bio

• Status: Active

Kubernetes Security Operations Center

KSOC reduces an organization’s attack surface through Kubernetes Detection and Response (KDR) as well as Kubernetes Infrastructure Entitlements Management (KIEM). KSOC is the security partner of choice for enterprises looking to adopt and scale Kubernetes across their business without impacting development velocity. The event-driven, SaaS platform offers rapid remediation of misconfigurations and vulnerabilities, allowing developers and security teams to secure their workloads at code-level.

• Sector: Infrastructure

• Founded In: 2018

• Partnered In: 2022 (Seed)

• CEO: Brooke Motta

• Investment Team: Ernie Bio

• Status: Active

Customer Identity and Access Management

LoginRadius offers a cloud-based Customer IAM (Identity and Access Management) platform. With its no-code/low-code Customer IAM platform, companies can securely manage customer identities, deliver a unified digital experience across web and mobile applications, and comply with all major privacy regulations such as GDPR and CCPA.

• Sector: Identity

• Founded In: 2012

• Partnered In: 2018 (Seed)

• CEO: Rakesh Soni

• Investment Team: Don Dixon, MJ Ramachandran

• Status: Active

Continuous Compromise Assessment™

Lumu is focused on helping organizations illuminate threats and isolate confirmed instances of compromise. Applying principles of continuous compromise assessment, Lumu has built a powerful closed-loop, self-learning solution that helps security teams accelerate compromise detection, gain real-time visibility across their infrastructure, and close the breach detection gap from months to minutes.

• Sector: Infrastructure, Security Operations

• Founded In: 2019

• Partnered In: 2022 (Seed)

• CEO: Ricardo Villadiego

• Investment Team: Leo Casusol, Reynaldo Kirton

• Status: Active

Security Advisory Services

• Sector: Governance and Compliance

• Acquired by: Cisco

• Investment Team: Alberto Yépez

• Status: Prior

API Security

Noname Security is the only company taking a complete, proactive approach to API Security. Noname works with 20% of the Fortune 500 and covers the entire API security scope across three pillars — Posture Management, Runtime Security, and API Security Testing.

• Sector: Code, Infrastructure

• Founded In: 2020

• Partnered In: 2021 (Series B)

• CEO: Oz Golan

• Investment Team: Leo Casusol

• Status: Active

Mobile Application Security

NowSecure’s automated mobile application security testing suite — which stands alone or integrates with existing development pipelines — performs static, dynamic, and behavioral analyses, and auto-generates reporting and remediation guidelines.

• Sector: Code

• Founded In: 2009

• Partnered In: 2019 (Series B)

• CEO: Alan Snyder

• Investment Team: Alberto Yépez, Ernie Bio

• Status: Active

Runtime Application Security

• Sector: Code

• Founded In: 2013

• Partnered In: 2017 (Series B)

• CEO: Julien Bellanger

• Investment Team: Andrew McClure, Sean Cunningham

• Status: Acquired

Vulnerability Management

• Sector: Governance and Compliance, Security Operations

• NASDAQ: QLYS

• Investment Team: Don Dixon

• Status: Prior

Enterprise Kubernetes Management and Operations

Rafay Systems offers the industry’s first Kubernetes Operations Platform to help enterprises maximize the value of containerized applications that deliver today’s business innovation. With Rafay, platform teams can operate modern application infrastructure at scale across public clouds, data centers, and the Edge.

• Sector: Infrastructure

• Founded In: 2017

• Partnered In: 2021 (Series B)

• CEO: Haseeb Budhani

• Investment Team: Connie Qian, Leo Casusol, MJ Ramachandran

• Status: Active

Software Attack Surface Optimization Platform

RapidFort is a cloud-native cybersecurity company that helps developers automatically optimize and secure their cloud workloads and applications.

• Sector: Infrastructure

• Founded in: 2020

• Partnered in: 2022 (Seed)

• CEO: Mehran Farimani

• Investment Team: Ernie Bio

• Status: Active

Privileged Access Management

Remediant is a Zero Trust Privilege Security company. Our product, SecureONE, is an agentless Zero Standing Privilege solution that reduces your attack surface due to privilege sprawl, prevents lateral movement, and eliminates the risk of credential exposure utilizing MFA to administer dynamic Just-in-Time (JIT) account access.

• Sector: Identity

• Founded In: 2013

• Partnered In: 2019 (Series A)

• CEO: Raj Dodhiawala

• Investment Team: Don Dixon

• Status: Acquired

Malware Analysis, Threat Hunting, and Software Supply Chain Security

ReversingLabs is the leading provider of malware analysis, threat hunting and supply chain security for SOC and software development teams. The ReversingLabs cloud platform automatically analyzes binaries for sophisticated threats hidden across the network, endpoint and software packages to enrich analysis during event response and instill trust during software release.

• Sector: Code, Security Operations

• Founded In: 2009

• Partnered In: 2017 (Series A)

• CEO: Mario Vuskan

• Investment Team: Alberto Yépez, Sean Cunningham

• Status: Active

Security Training for Developers

Secure Code Warrior provides an online security training platform that makes secure coding a positive and engaging experience for developers as they increase their software security skills.

• Sector: Code

• Founded In: 2015

• Partnered In: 2019 (Series B)

• CEO: Pieter Danhieux

• Investment Team: Sean Cunningham

• Status: Active

Managed Security Services

Incubated within Forgepoint, SolCyber is the first modern Managed Security Service Provider (MSSP) to deliver a curated stack of enterprise-strength security tools and services that are streamlined, accessible and affordable for any organization.

• Sector: Security Operations

• Founded In: 2020

• Partnered In: 2020 (Series A)

• CEO: Scott McCrady

• Investment Team: Don Dixon, Leo Casusol, Shane Shook

• Status: Active

Big Data Security Intelligence and Analytics

• Sector: Infrastructure, Security Operations

• Acquired by: Blue Coat Systems

• Investment Team: Alberto Yépez

• Status: Prior

Identity and Entitlements Governance

SPHERE is solving the age-old problem of permission sprawl with their unique Cyber Hygiene solution. SPHEREboard delivers automation to address visibility and remediation requirements while SPHERExperts organize into teams for accelerating those goals. SPHERE’s solution is integration-friendly, allowing for the implementation of an evergreen process for ongoing governance.

• Sector: Identity

• Founded In: 2010

• Partnered In: 2020 (Series A)

• CEO: Rita Gurevich

• Investment Team: Connie Qian, Don Dixon

• Status: Active

Multi-cloud Identity Orchestration

Strata delivers multi-cloud identity orchestration and management, enabling enterprises to seamlessly unify on-premise and cloud-based authentication and access systems for consistent identity management.

• Sector: Identity

• Founded In: 2019

• Partnered In: 2019 (Seed)

• CEO: Eric Olden

• Investment Team: Alberto Yépez, Ernie Bio

• Status: Active

Incident Response and Resilience

Surefire Cyber brings swift, strong response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats. Surefire provides its clients confidence in helping them prepare for, respond to, and recover from cyber incidents, and fortify their cyber resilience in anticipation of future events.

• Sector: Security Operations

• Founded in: 2021

• Partnered in: 2021 (Series A)

• CEO: Billy Gouveia

• Investment Team: Andrew McClure, Don Dixon, Reynaldo Kirton

• Status: Active

Data Security Posture Management

Symmetry Systems unifies access control for data across the enterprise, granting companies full visibility and control over the data in their storage services.

• Sector: Data

• Founded In: 2018

• Partnered In: 2019 (Series Seed)

• CEO: Mohit Tiwari

• Investment Team: Leo Casusol, Reynaldo Kirton

• Status: Active

AI Quality Diagnostics and Monitoring

TruEra provides AI Quality solutions to help enterprises analyze machine learning, improve model quality, and build trust. TruEra helps eliminate the black box surrounding widely used AI and ML technologies. This visibility leads to higher quality, explainable models that achieve measurable business results, address unfair bias, and ensure governance and compliance.

• Sector: Data

• Founded in: 2019

• Partnered in : 2021 (Series B)

• CEO: Will Uppington

• Investment Team: MJ Ramachandran

• Status: Active

Blockchain Digital Identity

• Sector: Identity

• Founded In: 2016

• Partnered In: 2018 (Seed)

• CEO: Amit Jasuja

• Investment Team: Alberto Yépez

• Status: Acquired

Security Analytics

Uptycs provides the first unified, cloud-native security analytics platform that enables both endpoint and cloud security from a common solution. With Uptycs, security professionals can quickly prioritize, investigate, and respond to potential threats across a company’s entire attack surface.

• Sector: Governance and Compliance, Infrastructure, Security Operations

• Founded In: 2016

• Partnered In: 2017 (Series A)

• CEO: Ganesh Pai

• Investment Team: Alberto Yépez, Leo Casusol

• Status: Active

Digital Payments

Verituity’s verified digital payments platform modernizes bank treasury services and enables first-time and on-time digital payout experiences.

• Sector: Governance and Compliance

• Founded In: 2020

• Partnered In: 2021 (Series A)

• CEO: Ben Turner

• Investment Team: Connie Qian, Don Dixon, MJ Ramachandran

• Status: Active

Proactive Vendor Security Assessments

Whistic is a provider of proactive vendor security and an innovator in changing the way that companies publish and evaluate security posture to build trust. Whistic is the single source of trust for both buyers and sellers, helping companies speed up the pace of business.

• Sector: Governance and Compliance

• Founded in: 2015

• Partnered in: 2022 (Series B)

• CEO: Nick Sorensen

• Investment Team: Andrew McClure

• Status: Active

Data Privacy

With WireWheel, global brands achieve privacy control and compliance at scale. The WireWheel platform offers an enterprise-class solution for managing data subject access requests and consents and preferences and for managing privacy programs including vendor risk management and data inventory and mapping.

• Sector: Data, Governance and Compliance, Identity

• Founded In: 2016

• Partnered In: 2020 (Series B)

• CEO: Justin Antonipillai

• Investment Team: Andrew McClure, Don Dixon

• Status: Active