Fundraising Fox

Furl

4 known investors

Furl offers a continuous autonomous remediation platform that investigates security findings, generates environment-specific fixes, and deploys them without human handoffs. It targets security teams, handling vulnerabilities, misconfigurations, hardening gaps, and end-of-life systems that patch management leaves open.

Also known as Furl Β· furl.ai

Founders & leadership

DA
Derek AbdineFounder

Investors Β· 4

Also in the syndicate Β· 2

Corey ThomasTen Eleven Ventureslead

Company profile

researched Aug 2026

Furl is a Los Angeles-based security remediation company that applies agentic AI to the execution stage of the vulnerability management lifecycle. Its continuous remediation platform ingests findings from a customer's existing scanners, EDR, and asset systems β€” and runs its own detection β€” then deduplicates overlapping records into a single per-host item tied to an owner, generates a fix built for the specific environment, deploys it via an endpoint agent, validates that the fix landed, and rolls back on failure. Remediation actions include patching, uninstalling, upgrading, reconfiguring, and mitigating. The company positions the product against the portion of the attack surface that has no vendor patch, such as misconfigurations, hardening gaps, legacy software, and end-of-life systems.

The platform is organized around three primitives: checks (detection logic that surfaces a finding), strategies (the script, patch, configuration change, or uninstall that fixes it), and scopes (customer-defined boundaries covering included and excluded assets, maintenance windows, and approval settings). A component called the Forge researches newly disclosed CVEs and authors a check, a strategy, and a scope independent of vendor roadmaps. Underlying this is a live intelligence context graph of the environment β€” endpoints, owners, findings, and the relationships between them β€” which the company describes as the basis for deciding what is safe to touch and in what order. Customers set confidence thresholds and approval gates, and every primitive is reviewed, scoped, and versioned within the customer tenant.

Furl frames the market problem as one of execution rather than detection, citing a Cyentia report commissioned by Cisco stating that organizations fix only 1 in 10 vulnerabilities they identify, alongside months-long MTTR for high-severity findings and a shrinking window between disclosure and working exploit. The platform also produces logs and evidence of investigations, fixes, and validations for audit and compliance purposes.

Founding story

Furl was founded by veterans of Rapid7, Automox, and Censys. CEO and co-founder Derek Abdine has said the team, having built inside vulnerability management and endpoint tooling, saw how remediation breaks down in practice and set out to apply agentic AI to safely executing fixes with environmental context.

Business model

Furl sells a software platform to enterprise security and IT organizations that layers on top of, rather than replaces, the customer's existing scanning and patch management tooling. Specific pricing and contract structures are not disclosed.

Traction

Early adopters are reported to be using Furl to reduce remediation backlogs, eliminate manual handoffs between security and IT, and resolve issues that had stalled due to tooling limits. The company announced general availability of the platform following a period of work with early customers.

Latest developments

Following the January 2026 seed round, Furl said it would accelerate product development, expand operating system coverage, and extend remediation to more complex, multi-step fixes. The company has announced that the platform is generally available.

β–ΈFull profile β€” market position, technology, go-to-market, geography, history

Market position

Furl positions itself in the remediation and execution layer of the vulnerability management stack, downstream of detection and prioritization vendors, and integrates with scanners and endpoint tools including Rapid7, Tenable, Qualys, Automox, Action1, and SentinelOne. Its investor describes execution as the most neglected part of the security lifecycle.

Rather than generating additional tickets, dashboards, or scripts, Furl performs the remediation work itself, including for issues with no vendor patch such as misconfigurations, hardening gaps, and end-of-life software. It operates within customer-defined guardrails, validates fixes, and rolls back failures, and can author its own detection and fix logic for newly disclosed CVEs without waiting on vendor roadmaps.

Technology

An agentic AI system paired with an endpoint agent. It maintains a live context graph of endpoints, owners, findings, and trust relationships, deduplicates findings across multiple tools into single per-host records, and composes remediations from checks, strategies, and scopes. Execution includes deployment, post-fix validation, automatic rollback on failure, and audit evidence generation. The Forge component authors new checks and strategies for newly disclosed vulnerabilities.

Go-to-market

The company markets directly to security and IT teams through its website with a book-a-demo motion, and emphasizes integration with incumbent tools rather than rip-and-replace. It worked with early adopters ahead of broader availability, and announced general availability of the platform.

Enterprise IT security and IT operations teams responsible for vulnerability and configuration remediation across endpoints and servers, particularly those managing large backlogs and accountable for MTTR and audit reporting.

Geography

Headquartered in Los Angeles, California.

History

The company announced a $10 million seed round on January 21, 2026, led by Ten Eleven Ventures with participation from Rapid7 CEO Corey Thomas and the Open Opportunity Fund. At that time it said it was preparing for broader availability while working with early customers; its website subsequently stated the platform is generally available.

Compiled by commissioned research from 8 cited public sources β€” announcements, filings, and press listed under research sources below.

Key figures

latest reported
Disclosed funding to dateJan 2026$10M

Company-reported or press-reported figures, each dated to when it was claimed β€” not independently audited.

Competitors Β· 10

by search overlap
Upguard3 shared keywordsUpGuard provides a platform for managing cybersecurity risk, including third-party vendor and supply chain risk assessment. It is aimed at organizations seeking to evaluate and monitor the security posture of their vendors.
Sentinel One3 shared keywordsSentinelOne provides an AI-powered cybersecurity platform for enterprises that integrates endpoint protection, threat detection, and incident response capabilities. The company serves large enterprises, including many Fortune 500 organizations, to protect against cyber threats at scale.
Hackerone3 shared keywordsHackerOne operates a platform for coordinating cybersecurity vulnerability disclosures and bug bounty programs. The company connects security researchers with organizations to identify and remediate security vulnerabilities.
Backslash3 shared keywordsBackslash is a security platform for the agentic AI layer, giving enterprises visibility, governance, and real-time protection over AI agents, MCP servers, skills, and plugins running on developer and citizen-developer endpoints. It inventories shadow AI tools, rates their security and supply-chain risk, and detects threats such as prompt injection and data exfiltration for security teams.
Netwitness3 shared keywordsNetWitness builds a threat detection and response platform that combines network detection and response, SIEM, EDR, SOAR, and user behavior analytics with full packet capture, machine learning, and behavioral analysis. It serves security operations teams monitoring network, endpoint, and cloud environments in the cybersecurity industry.
cloud3 shared keywordsAccuKnox provides a Zero Trust security platform covering AI, API, application, cloud, Kubernetes, data, and supply chain security, using eBPF and LSM-based runtime protection for enterprise and public sector organizations. The platform offers AI security posture management, agentic AI sandboxing, prompt firewalls, CNAPP, and compliance/governance across public, private, air-gapped, and edge/IoT environments.
Vicarius3 shared keywordsVicarius vRx is a vulnerability remediation platform for enterprise IT and security teams that prioritizes CVE findings based on exploit probability, active exploitation status, and environmental reachability rather than CVSS scores alone. The platform integrates with existing vulnerability scanners and provides patching, patchless runtime protection, and automated remediation with full audit trails for compliance reporting.
Legit Security3 shared keywordsLegit Security provides an application security platform that helps organizations identify and manage software vulnerabilities and risks across their development environments. The platform serves enterprise security teams seeking to reduce alert fatigue and improve visibility into their application attack surface.
Centraleyes3 shared keywordsCentraleyes offers an AI-powered cyber risk register and GRC platform that links risks to controls, compliance frameworks, evidence, remediation, vendor oversight, and executive reporting. It targets security, IT risk, compliance, and audit teams looking to run risk assessments and manage the full GRC lifecycle.
Jamf3 shared keywordsJamf provides Apple device management and endpoint protection software for Mac and mobile devices. The platform enables IT and security teams across organizations to manage and protect devices, data, and applications while maintaining the Apple user experience.

Companies competing with Furl for the same Google search keywords, organic and paid, via search-intersection analysis.

Timeline Β· 2

launches, deals, and filings
Jan 2026
Furl raises $10M seed round led by Ten Eleven Ventures

Furl announced a $10 million seed round led by Ten Eleven Ventures with participation from Rapid7 CEO Corey Thomas and the Open Opportunity Fund. Proceeds are earmarked for product development, expanded operating system coverage, and support for more complex, multi-step remediation.

$10M source β†—

Jan 2026
Furl platform reaches general availability

Furl's website announces that the continuous remediation platform is generally available.

source β†—

Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.

β–ΈResearch sources Β· 8

primary sources listed
  • Furlfurl.ai Β· web

8 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does Furl do?
Furl is a security remediation startup whose agentic AI platform autonomously investigates findings and executes and validates fixes.
Who founded Furl?
Furl was founded by Derek Abdine.
Who are Furl's investors?
Furl's investors include Open Opportunity Fund, Ten Eleven.