Fig

Fig (operating as Fig Security) develops a cybersecurity platform aimed at the operational resilience of enterprise security operations infrastructure. The platform integrates with an organisation's existing technology stack and autonomously maps detection and response workflows end to end, tracing data lineage from source systems through data pipelines, SIEMs and data lakes into SOAR platforms and SOC AI agents. When configuration or environmental changes threaten detection or response capability, the platform alerts teams, identifies root causes and assesses potential impact, and allows proposed fixes to be simulated before they are pushed to production.

The company frames the problem it addresses as a resilience gap: enterprises spend heavily on security operations but security leaders often have limited visibility into whether the underlying plumbing is functioning, so a detection that has not fired for months may indicate either genuine safety or a silent breakdown. Fig positions its product as a prerequisite for SOC modernisation and AI adoption, on the basis that AI applied to unreliable data infrastructure does not deliver value. The company emerged from stealth in March 2026, employed about 25 people (most based in Israel, working remotely) at that time, and counted multiple large enterprises, including Fortune 100 organisations, among its customers.

Founding story

Fig was founded in 2025 — March 2025 according to one account — by Gal Shafir (CEO), Nir Loya Dahan (CPO) and Roy Haimof (CTO), all veterans of the Israeli military units Unit 8200 and Mamram. Shafir held leadership roles at Siemplify through its growth and $500m acquisition by Google, then led global security architecture for Google Cloud Security with a focus on Google SecOps. Loya Dahan was previously VP of Product at Cymulate and held product leadership roles at Siemplify. Haimof, who began working in cybersecurity at 16, was Director of Engineering at Cymulate.

Traction

At the time of its March 2026 stealth exit, Fig reported multiple large enterprise customers, including Fortune 100 organisations, and approximately 25 employees, most based in Israel and working remotely.

Latest developments

In March 2026 Fig emerged from stealth, disclosing $38m raised across Seed and Series A rounds, including a $30m Series A led by Ten Eleven Ventures with participation from Team8 and angel investors such as Doug Merritt (former Splunk CEO), Rene Bonvanie (former Palo Alto Networks CMO) and founders of Demisto and Siemplify. It announced plans to expand in North America and triple its headcount within the year.