Cybersecurity Startups

OutThink connects to existing security tools via 60+ connectors to aggregate human risk signals from email, endpoints, identity, and other security systems, delivering behavioral intelligence and automating targeted interventions across an organization's security stack.

2 investors

P0 provides runtime access control and authorization for AI agents, human users, and non-human/machine identities, discovering sensitive identities and enforcing end-to-end access policies across cloud, servers, and data systems. It is aimed at security teams and developers managing privileged access in hybrid and multi-cloud environments.

2 investors

Palqee builds Prisma, an SDK and API that validates and monitors AI and human-in-the-loop workflows for oversight and compliance in financial services, detecting policy violations, AI hallucinations, and regulatory risks such as CFPB issues. It routes high-risk cases to human reviewers and produces structured evidence for regulators, deployable on-premises or in a private cloud.

2 investors

Pangram Labs builds AI-detection models to identify AI-generated text and mitigate issues caused by generative AI, such as AI-generated spam. Its most recent product is the Pangram 4 model.

2 investors

Panther is an AI-powered SOC (security operations center) platform that ingests and normalizes security logs at scale, lets teams write detection rules in Python or via natural language, and uses agents to triage alerts, run investigations, and hunt threats. It serves enterprise security teams and offers both a hosted managed cloud and a model that runs inside a customer's own AWS account against Snowflake or Databricks.

2 investors

Passbase offers an investor onboarding solution that automates data and document collection from institutional and individual clients, with beneficial owner mapping and compliance monitoring tools. It helps compliance teams onboard corporate entities and lets issuers verify investor status to support capital raising.

2 investors

Peak offers TAP, a platform that provides advertisers with visibility into where their programmatic ads appear adjacent to child sexual abuse material (CSAM) and other high-risk content. The platform helps brands identify problematic ad placements, receive alerts, and audit domain lists to protect brand safety and consumer trust.

2 investors

FortiMail Workspace Security (formerly Perception Point) provides AI-powered threat protection for email, browsers, collaboration tools, and cloud applications used across the workplace. It serves organizations looking to secure their modern digital workspace.

2 investors

Permify is an open-source authorization service, inspired by Google's Zanzibar, that lets engineering teams model and enforce fine-grained access controls using a centralized permission database and schema language. It supports RBAC, ABAC, and ReBAC models and provides real-time data syncing and access checks across an application's stack.

2 investors

Perseus (Cyber Perseus) develops hypervisor-based security and performance solutions for connected and software-defined vehicles, targeting automotive brands. Its technology addresses in-vehicle system security, hacking threats to connected services and data transmission, and Linux boot-speed performance for future connected cars.

2 investors

Petra provides identity threat detection and response (ITDR) for Microsoft 365 environments, focusing on catching business email compromise and identity attacks. The platform automatically reconstructs attack timelines and delivers forensic reports for IT teams.

2 investors

Phin provides a security awareness training and phishing simulation platform built for MSPs and MSSPs, offering multi-tenant management, fast client onboarding, and phishing analysis integrated into help desks. It focuses on reducing the time these providers spend managing training and analyzing reported phishing while improving user security behavior.

2 investors

Picus Security develops security validation technology, including Breach and Attack Simulation and automated penetration testing, to help organizations identify and prioritize cyber exposures and apply mitigations. It serves enterprise security teams in the Adversarial Exposure Validation and cyber resilience category.

2 investors

Ermit designs and manufactures connected hardware devices with embedded software and AI capabilities, serving companies building IoT and field-operated products. The company offers end-to-end development from electronics and firmware through data infrastructure and user interfaces, including an integrated IoT security module.

2 investors

Pistachio provides automated cybersecurity products for organizations, integrating with Microsoft SSO so tools can be set up quickly and run in the background without ongoing maintenance. Founded in Norway, it focuses on making cybersecurity accessible to teams regardless of security expertise.

2 investors

PIXM uses AI computer vision to detect and block phishing attacks directly in the browser, catching malicious clicks that email gateways, firewalls, and training miss. It provides visibility into threats and targeted users through a web portal or SOC integration, and deploys via a licensed installer with automatic updates.

2 investors

PlainID provides an authorization management platform that discovers, visualizes, and monitors access control policies across SaaS applications and identity providers. It serves organizations seeking to manage least-privilege access, meet audit and compliance requirements, and reduce identity-related security risks.

2 investors

Ploy is an identity governance platform that automates joiner-mover-leaver processes, access reviews, permission removal, and audit evidence collection, using an AI agent called Luna. It offers access graph visualization, no-code workflow automation, and integrations with systems like Active Directory, Okta, AWS, Azure, and Google Workspace.

2 investors

Polygraf AI provides an inline data-governance and security platform that enforces organizational AI policies in real time, removing PII, secrets, and regulated content from prompts before they reach external LLMs and restoring it afterward. It also detects AI-generated content, synthetic voices, and prompt-injection attacks, offering enterprises visibility and control over Shadow AI across tools like email, Slack, and cloud file services.

2 investors

Portal26 provides enterprise AI management solutions that enable organizations to deploy and govern artificial intelligence systems.

2 investors

Post-Quantum develops quantum-safe cryptographic solutions and standards for protecting sensitive communications and critical infrastructure against quantum computing threats. The company serves government, defense, and enterprise organizations worldwide with production-ready technologies used in NATO communications and critical infrastructure protection.

2 investors

Prediction Guard provides a self-hosted control plane that lets enterprises manage, govern, and deploy AI systems, agents, models, and MCP tools within their own security boundary. It unifies fragmented AI assets (such as AWS Bedrock, Azure OpenAI, and self-hosted models) and enforces AI security and governance policies aligned with NIST and OWASP standards.

2 investors

Presidio is an IT services and digital transformation company that guides enterprises through technology adoption and modernization. The company bridges traditional IT environments with cloud and automated solutions, serving hospitals, financial institutions, educational institutions, and government organizations.

2 investors

Prevalent, a Mitratech product, is an AI-powered third-party risk management (TPRM) platform for assessing, monitoring, and remediating risks across the vendor and supplier lifecycle from onboarding to offboarding. It combines automated risk assessments, continuous monitoring, contract management, and a vendor intelligence network for enterprise risk and compliance teams.

2 investors