Cybersecurity Startups

Keepsafe provides privacy and security apps with AES-256 encryption to protect personal content on user devices. The service enables individuals to set boundaries, organize their private files, and control what they share.

3 investors

Kerys develops YS::Desktop, a workstation virtualization platform designed for field maintenance teams in industrial environments. It enables offline operation, remote updates, direct equipment connectivity, and multi-environment isolation while meeting IEC 62443 and NIS2 security standards.

3 investors

Keycard provides access control and identity management for AI agents, resolving a composite identity (user, device, agent, task) and issuing short-lived, least-privilege credentials scoped to each task when an agent requests access to tools, APIs, and data. It enforces policy at the edge, logs every agent action and policy decision to SIEMs like Splunk and Datadog, and is aimed at developers and organizations building or adopting agentic tools.

3 investors

Keycard provides infrastructure for AI agents to operate safely and securely in production environments, enabling developers to connect agents to services across multiple clouds while maintaining identity, policy, and audit controls.

3 investors

Keyfactor provides a platform for managing machine identities and cryptography, giving security teams visibility and control over certificates, PKI, and code signing across their environments. It targets enterprises and government agencies seeking to secure data, machines, and AI while preparing for post-quantum cryptography.

3 investors

Keygraph is an application security platform that runs continuous, AI-driven penetration testing on every build, reporting findings only when accompanied by a working exploit. It combines static analysis (SAST), software composition analysis with reachability, secrets detection, blackbox/whitebox agentic pentesting, and AI-generated patch pull requests, deployed inside a customer's own AWS, GCP, or Azure environment.

3 investors

PingOne Recognize is a biometric authentication platform that uses zero-knowledge cryptography to enable secure identity verification and re-authentication while preserving privacy. The platform serves enterprises and financial institutions seeking to reduce account takeover fraud and authentication costs across login, payment, and account recovery use cases.

3 investors

Kindo provides AI-native agents designed for DevOps, SRE, and platform engineering teams to automate CI/CD pipeline validation, system troubleshooting, and operational workflows. The platform autonomously executes infrastructure tasks, reduces mean time to recovery, and accelerates internal tool development across cloud infrastructure and observability systems.

3 investors

Kipling Secure is an AI governance and security platform built for managed service providers (MSPs) to discover shadow AI usage, assess AI-related risk, enforce data policies, and respond to AI threats across client environments. It also lets MSPs monetize AI governance through risk assessments, compliance reviews, and AI detection and response services.

3 investors

Knostic provides security tooling that discovers and protects AI agents and coding assistants along with related supply chain components such as MCP servers, skills, IDE extensions, and rules. Its platform detects shadow AI, blocks data exfiltration, and stops destructive commands.

3 investors

KnowBe4 provides security awareness training, simulated phishing attacks, and AI-powered human risk management for organizations worldwide. The platform helps enterprises secure both human employees and AI agents against cybersecurity threats through attack simulation, training, and behavioral security interventions.

3 investors

Kodem provides AI security posture management (AI-SPM) that reconstructs the runtime hierarchy of AI agents, tools, MCP servers, models, and credentials running inside applications from runtime evidence. It attributes actions to specific agents and maps reachable risk to enable per-agent policy and enforcement through AI gateways.

3 investors

Kondukto, now part of Invicti, provides an application security posture management (ASPM) platform that unifies DAST, SAST, and SCA scan results and applies runtime intelligence to validate and prioritize vulnerabilities. It serves security and development teams needing to prioritize their vulnerability backlog, enforce policy, and produce audit-ready compliance reporting.

3 investors

Kry10 provides an operating system (KOS) and platform built on the formally verified seL4 microkernel for developing, deploying, and managing mission-critical connected devices. It offers development tools (supporting C, Rust, Elixir, and Erlang) and fleet management services aimed at security, self-healing, and no-downtime upgrades for high-trust systems.

3 investors

Kusari builds a software supply chain security platform that maps direct and transitive dependencies from source, prioritizes vulnerabilities by reachability and exploitability, and generates continuous, audit-ready SBOMs. It serves security teams and integrates with existing scanners and SBOM tools to provide visibility, autonomous code review, and automated remediation.

3 investors

Lasso Security offers an AI security platform that discovers, assesses, and protects AI agents and applications across their lifecycle, addressing risks like Shadow AI, prompt manipulation, and guardrail bypasses. It is aimed at enterprises seeking visibility and governance over the AI tools and agents their employees build and deploy.

3 investors

LatticeFlow AI provides technical assessment and governance platforms for AI systems, helping organizations validate and manage AI model risk and compliance. The company serves enterprises and compliance teams requiring AI risk management, governance, and regulatory control.

3 investors

LeakSignal provides data governance and protection solutions for securing sensitive data in motion, including classification, policy enforcement, and compliance monitoring across AI applications, APIs, and endpoints.

3 investors

Legion builds AI security workers for the Security Operations Center (SOC) that observe how analyst teams work and scale those behaviors, rather than relying on pre-built playbooks or generic models. The product targets security teams and operates in the cybersecurity and AI space.

3 investors

LiveAction provides a Network Intelligence platform that collects, correlates, and visualizes application and network data for NetOps and SecOps teams, supporting network performance monitoring, troubleshooting, and security across on-premises, SD-WAN, cloud, and hybrid networks. It serves enterprise and service provider customers managing large, complex, multi-vendor networks. The company has been acquired by BlueCat.

3 investors

Living Security offers a human risk management platform that measures and responds to employee security behaviors rather than relying solely on awareness training. It helps organizations address social engineering threats including deepfakes, voice phishing, and impersonation attacks.

3 investors

Lockchain provides a platform for monitoring cryptocurrency wallets across more than 25 blockchains, sending validated real-time transaction alerts via Slack, email, or webhook. It offers centralized multi-chain wallet management along with third-party transaction verification and full audit logs for security and transparency.

3 investors

LogRhythm is a Boulder-based SIEM, log management and security analytics vendor that merged with Exabeam in July 2024.

3 investors

Malloc is a mobile privacy and security app combining AI-driven spyware detection with a no-log VPN to protect users' data and privacy on Android and iOS devices. The app targets consumers concerned about data tracking, malware, and spyware threats on their smartphones.

3 investors