Daylight

Daylight (Daylight Security) is a Tel Aviv-based cybersecurity company that delivers managed detection and response through a model it calls Managed Agentic Security Services (MASS), in which agentic AI investigates, reasons and executes across security workflows while human experts retain judgment, accountability and ownership of outcomes. The company positions MASS as an alternative both to traditional labor-intensive managed services and to AI tools that attempt to remove humans entirely, arguing that the service operating model rather than services themselves is the problem.

The service portfolio spans threat detection and response, incident response including containment and remediation, threat hunting across endpoints, cloud and networks, and regulatory compliance support referencing GDPR, HIPAA and NIS2 with audit-ready reporting. Core capabilities described by the company include agentic AI investigation that correlates signals and forms conclusions without waiting for human triage; contextual intelligence drawn from business-critical systems such as identity platforms and HR systems to prioritize signals; ChatOps collaboration through Slack and Microsoft Teams; end-to-end threat resolution rather than triage-only handoffs; and dashboards and reports for tracking MTTR and trends. The company publishes a catalogue of roughly 100 integrations across EDR, SIEM and log aggregation, cloud security, identity, email security, data security, ticketing/communication, threat intelligence enrichment and AI security, including CrowdStrike, SentinelOne, Microsoft Defender, Wiz, Okta, Entra ID, Splunk, Snowflake, Slack and Jira.

Beyond the founding pair, the disclosed team includes a Head of Security Operations, VP of Sales, Head of Product, Head of Brand Creative, and a business development and alliances lead. Enrique Salem, Partner at Bain Capital Ventures, is quoted on the company's site in support of its approach.

Founding story

Co-founders Hagai Shapira and Eldad Rudich met at age 18 while serving together in the Israeli Army's Intelligence Corps (described in press coverage as Unit 8200) and discussed starting a company together. They later reunited at Torq, where Rudich was the company's first employee and engineer and Shapira joined as its first product manager. There they concluded that security services had become reactive, labor-intensive and overly dependent on customers' internal knowledge, leaving customers holding too much work and risk. Rather than replacing services with full automation as many others proposed after the arrival of AI, they set out to rebuild the service model itself, founding Daylight to deliver Managed Agentic Security Services.

Business model

Daylight sells a managed security service rather than software licensed to customer teams: it operates the detection, investigation and response workflow on behalf of the customer, combining its agentic AI platform with its own security operations staff. Its own comparison content frames the distinction as a managed service that investigates and responds for the customer versus AI SOC tools that customer teams run themselves.

Not disclosed in the sources for Daylight specifically; a company blog post on SOC-as-a-Service pricing states that MDR pricing in the market generally starts at $8 to $35 per endpoint before managed SIEM and tooling costs.

Traction

Reported to serve dozens of enterprises across the U.S. and Europe as of November 2025, with named customers including The Motley Fool, Cresta and McKinsey Investment Office. Published customer material cites a 5x MTTR reduction at Cresta. Four Gartner Peer Insights reviews dated February 2026 appear on the company site, including one customer stating it replaced an incumbent MDR with Daylight. The company also publishes case studies covering Lusha, LVT and Antidote Health and lists open hiring.

Latest developments

In November 2025 Daylight announced a $33 million Series A led by Craft Ventures, bringing total funding to $40 million, with proceeds allocated to U.S. expansion, product development, and new modules for identity threat response and cloud workload protection. During 2026 the company published customer case studies (Antidote Health, The Motley Fool, LVT, Lusha), competitive and market analyses of AI-native security operations platforms, and security research on supply chain attacks and iClickFix-style campaigns; Gartner Peer Insights reviews were posted in February 2026.