Cyberhaven

Market position

Cyberhaven positions itself as the inventor of the Data Detection and Response category and as "the original data lineage company," competing against and seeking to displace traditional DLP, CASB, insider threat and DSPM point tools, which it characterizes as operationally complex and prone to false positives. Investors have framed the approach as analogous to the shift Endpoint Detection and Response brought to endpoint security. The company was named to Fortune's "Fortune Cyber 60" list of top security companies, and by April 2025 reported a $1 billion valuation.

Differentiation rests on lineage-based context rather than content-only inspection: classifying data by origin (for example Salesforce, Snowflake, GitHub, Figma, SharePoint, Google Drive, DocuSign), maintaining the trace through copy/paste and format changes, and detecting fragments and snippets that file-oriented tools miss. The company claims 90-95 percent fewer false-positive alerts, 5x faster incident investigation and 2x faster incident resolution, simpler policy authoring, and a cloud architecture with no servers or databases for customers to manage.

Technology

The core technology is data lineage: recording every event for every piece of data across endpoints, browsers and cloud applications to build a graph of data movement, then inferring sensitivity from origin, handling path and contributors rather than content alone. On top of this graph Cyberhaven runs a proprietary foundational AI model it calls a Large Lineage Model (LLiM), which powers the Linea AI Detection Agent for predictive detection of risky activity and the Linea AI Analyst Agent for automated investigation and reporting. Deployment uses cloud API connectors to sanctioned SaaS apps, a lightweight endpoint agent for Windows, macOS and Linux that performs processing in the cloud, and a browser extension for web-based apps; content intelligence adds text extraction, OCR and pattern identifiers for PII, PCI and PHI. The architecture is designed to capture data before client-side encryption sends it to unsanctioned cloud apps, addressing gaps the company attributes to firewalls, proxies and CASBs.

Go-to-market

Direct enterprise sales supported by demo requests, on-demand demos, downloadable datasheets, early-access programs for new products such as Flow, and a Trust Center for security reviews. The company publishes research through Cyberhaven Labs (for example a report on a 485 percent increase in corporate data flowing to AI systems year over year) and cites named customer executives such as Axos Financial CISO Raghu Valipireddy. Proceeds from later funding rounds were earmarked for aggressive go-to-market investment, market expansion and, in the case of the Series D, platform expansion through M&A as well as organic innovation.

Enterprise security teams — CISOs, security operations, insider risk and compliance functions — in sectors including financial services, SaaS and other IP-intensive organizations concerned with source code, product designs and customer records; a named reference customer is Axos Financial.

Geography

Press releases place the company in Palo Alto, California (2021 and 2025 announcements) and San Jose, California (2024 announcement). No other office locations are disclosed in the sources.

History

Cyberhaven announced a $33 million Series B in December 2021 led by Redpoint Ventures, bringing total funding to $52 million, at which point it described itself as the inventor of the first DDR platform. In early 2024 it launched Linea AI and its Large Lineage Model, and in June 2024 raised an $88 million Series C led by Adams Street Partners and Khosla Ventures, adding Adams Street partner Fred Wang to the board. In April 2025 it raised a $100 million Series D led by StepStone Group, reaching $250 million in total funding and a $1 billion valuation. Howard Ting was CEO through the 2021, 2024 and 2025 funding announcements; the current leadership page lists Nishant Doshi as CEO, Todd Rotger as President and founder Dr. Volodymyr Kuznetsov as CTO. The company subsequently introduced Cyberhaven Flow, positioned for the "agentic enterprise."