Security startups
Startups defending the systems everyone else is racing to build, including the new attack surface that AI itself introduces.
What counts as Security
Security covers startups defending the systems everyone else is racing to build, including the new attack surface AI itself introduces. On this hub that means AI security and agentic security operations, software supply chain and connected product security, identity verification and fraud, data protection, and consumer privacy products built by people who were attacked first.
Two things AI did to security
The newest companies on this hub split cleanly. One group treats AI as a new thing to defend. Noma Security provides enterprise guardrails covering AI discovery and security posture, on the premise that every model an organisation adopts widens the attack surface.
The other treats AI as the defender. Exaforce runs a full-lifecycle AI security operations platform that automates detection, triage, investigation and response - and, notably, gives a security operations capability to teams that never had one.
The supply chain is the perimeter
Endor Labs works on the risk that arrives with open source dependencies, and frames it as a prioritisation problem rather than a scanning one - the interesting claim being that it makes developers faster rather than slower. Cybellum applies the same thinking to physical goods, letting manufacturers manage security in connected products they have already shipped.
Most attacks go through a person
Several of the strongest profiles here refuse to treat security as a systems problem. Picnic protects against social engineering directly, on the argument that it is the biggest threat vector in cyber today. Phalanx works on human error and on the simple question of who is accessing which files.
Founded by the victim
Efani is the clearest example of a pattern worth noticing on this hub - founder Haseeb Awan was SIM swapped four times, and built a security-first mobile network because no existing carrier would solve it. That origin story is common enough in security that it is almost a category of its own.
Privacy as a consumer product
Atsign wants to invert how app data is held, as free open-source infrastructure. FindMyData helps people reclaim personal information already out there, Prisidio secures the documents a household actually needs, and Sentrya takes on the most everyday version of the problem - the inbox.
Security for companies without a security team
Judy Security and Cyvatar are both built on the same observation: enterprise security tools assume staff to operate them. Their answer is to bundle the platform with the operating, whether through automation or through people.
| Company | What it does | Defends |
|---|---|---|
| Noma Security | Guardrails for enterprise AI, covering discovery through to security posture management. | AI systems |
| Exaforce | Full-lifecycle AI security operations platform automating detection, triage, investigation and response. | Security operations |
| Endor Labs | Gives DevSecOps teams the context to prioritise open source risk and secure CI/CD pipelines. | Software supply chain |
| Cybellum | Product security management so manufacturers can build and maintain secure connected devices. | Connected products |
| Judy Security | All-in-one AI-backed cybersecurity platform purpose-built for small and medium businesses. | Small business |
| Cyvatar | End-to-end cybersecurity combining platform technology with human expertise. | Small business |
| Kasada | Defends against advanced persistent bot attacks across web, mobile and API channels. | Bots |
| Sumsub | AI-driven identity verification for onboarding clients under AML and KYC rules. | Identity |
| Shufti Pro | Global identity verification offering KYC and AML solutions to financial businesses. | Identity |
| FiVerity | Cyber fraud defence for financial institutions, aimed at where fraud and cyberattack converge. | Fraud |
| Cigent | Data security approach built to stop ransomware and data theft outright. | Data |
| Sotero | Next-generation zero trust platform for protecting sensitive data. | Data |
| Phalanx | Tackles human error and the lack of visibility into who is accessing which files. | Data |
| Prisidio | Cloud app for securely collecting, organising and sharing a person's most essential documents. | Personal records |
| Picnic | Proactively protects people and companies against social engineering attacks. | Social engineering |
| Efani | Security-first mobile network founded in 2019 by Haseeb Awan after four SIM swap attacks. | Consumer privacy |
| Atsign | Free open-source platform giving users control over their app data and privacy. | Consumer privacy |
| FindMyData | Privacy service letting people take back control over their personal information. | Consumer privacy |
| Sentrya | Stops spam and junk email reaching a personal Gmail inbox. | Consumer privacy |
Latest in Security
Noma Security: Enterprise Guardrails for Secure AI Innovation
The Noma Security platform provides comprehensive guardrails for the secure build and adoption of enterprise AI. From AI discovery and security posture…
Exaforce is Redefining Security Operations with Agentic AI
Exaforce delivers a full-lifecycle AI SOC platform that automates detection, triage, investigation, and response. For teams without a SOC, it provides…
Eliminate Spam and Junk with Ease
Sentrya is a platform designed to eliminate spam and junk emails forever. It prevents unwanted emails from reaching your personal Gmail inbox, letting you…
Judy Security: Bridging the Cybersecurity Gap for Small to Medium-Sized Businesses(SMBs) with AI
Judy Security offers a comprehensive, all-in-one cybersecurity platform, underpinned by artificial intelligence and automation, and purpose built for…
Endor Labs Delivers the Impossible, Creating Secure Software SupplyChains That Make Developers More
[Endor Labs](https://www.endorlabs.com/) gives DevSecOps teams the context they need to prioritize open source software (OSS) risk, secure CI/CD…
Cybersecurity's New Era: Cyvatar Empowers Unmatched Protection
Cyvatar is revolutionizing the cybersecurity industry by providing a comprehensive, end-to-end cybersecurity platform that combines cutting-edge…
Efani: The Revolutionary Mobile Network That Prioritizes Your Security
Efani is a mobile network provider that puts security and privacy first. It was founded in 2019 by Haseeb Awan, a sim swap (4x) victim whose solution was…
Could Ransomware Come to an End?
Cigent offers a new approach to data security for organizations of all sizes to stop ransomware, data theft and achieve compliance. Data is protected…
Phalanx Conquers Human Error for a Cyber-Secure Future
Phalanx solves two big problems for organizations: human error and a lack of easy visibility to who is accessing what files, which is a recipe for…
Protect Life’s Most Vital Pieces of Information with Prisidio’s Trusted User-Friendly Mobile App
Prisidio is a cloud-based mobile app storage solution that makes it easy to securely collect, organize and share life’s most essential documents and…
Picnic Protects Your Company from Social Engineers
Picnic is a cybersecurity firm that proactively protects people and companies from the biggest threat vector in cyber today: attacks by social engineers.
Shufti Pro - The Best Client Onboarding & Verification Solution
Shufti Pro is a globally acclaimed identity verification service provider, that offers award- winning KYC and AML solutions to businesses in the finance…
Ensure Online Safety as a Part of Everyone’s Job
Coming from a law enforcement family with a father who was a Chicago police officer and DEA retiree after over 30 years, it wasn’t enough to prevent the…
The Atsign Company wants to flip the internet - and give online privacy back
The Atsign Company is dedicated to giving users control of their app data and privacy. It’s a free, open-source platform where developers can create…
Privacy enhancement provided by FindMyData
FindMyData offers a privacy enhancing service, which empowers people to take back control over their personal information. With FindMyData, people have…
Combat cyber and fraud with FiVerity
FiVerity provides financial institutions with cyber fraud defense to combat a dangerous and growing threat - the convergence of fraud-related theft with…
Prevent bot attacks with Kasada
Kasada provides the most effective and easiest way to defend against advanced persistent bot attacks across web, mobile, and API channels. The Kasada…
'Protect sensitive data' with Sotero
Sotero is the global innovator and leader in next generation zero trust for data security. Sotero’s data security platform enables their customers with a…
Fighting off fraud attacks with Sumsub ID verification technology
Sumsub is an international startup to help companies onboard new clients online and adhere to AML/KYC regulations using its AI-driven identity…
Manufacturers keeping their products secure with Cybellum
Cybellum enables manufacturers to develop and maintain secure connected products. Their cybersecurity management platform lets product security teams…
Frequently asked questions
What does the Security hub cover?
Six areas - AI security and security operations, software supply chain and connected product security, identity verification and fraud, data protection, small business cybersecurity, and consumer privacy tools.
How is AI changing what these companies build?
In two opposite directions. Noma Security treats AI as the thing that needs defending, providing guardrails for enterprise AI from discovery through posture management. Exaforce treats AI as the defender, running a full-lifecycle agentic platform that automates detection, triage, investigation and response.
Is anyone here focused on small businesses?
Two companies specifically. Judy Security builds an all-in-one AI-backed platform purpose-made for SMBs, and Cyvatar pairs its platform with human expertise. Both exist because enterprise security tooling assumes a security team that a smaller company does not have.
What is the most common attack these startups defend against?
Attacks that target people rather than systems. Picnic works on social engineering specifically, Phalanx on human error and file access visibility, and Efani was founded by someone who had been SIM swapped four times.
Are there startups working on identity and fraud?
Yes, and it is the most commercially mature cluster here. Sumsub and Shufti Pro both do AI-driven identity verification for KYC and AML onboarding, FiVerity defends financial institutions where fraud and cyberattack converge, and Kasada blocks bots across web, mobile and API.