Fundraising Fox

Xage Security

Palo Alto, US · Founded 2017 · Delaware corporation · 116 employees on LinkedIn · 14 known investors

Find your way into Xage Security

515 people in our graph share verified history with the Xage Security team — schools, employers, funds. One of them is your warm intro.

Yibo Nianunlockedknows Roman Arutyunov · together at University of California, Berkeley, Haas School of Business (overlapped)
×2knows the team · via University of California, Berkeley, Haas School of Business
×2knows the team · via Columbia Business School
×6knows the team · via University of California, Berkeley
knows the team · via Xage Security

Xage builds zero trust access and security solutions to protect critical infrastructure systems and prevent cyberattacks. The company serves organizations across energy, manufacturing, logistics, and the public sector.

Also known as Xage · Xage Security, Inc.

Founders & leadership

Xage Security was founded in 2017 by Roman Arutyunov and Susanto Irwan.

RARoman Arutyunov
Roman ArutyunovinCo-Founder and Chief Product OfficerHe has built and led organizations developing cybersecurity and networking solutions, managed globally distributed teams, and guided multiple startups through product development, fundraising, and exits.
SISusanto Irwan
Susanto IrwaninCo-founder, President & CTO
SSri
SriinFounder
DGDuncan Greatwood
Duncan GreatwoodinChief Executive Officer
DE
Dorea El-SayedNamed on SEC filing
NT
Norman ThorlaksonNamed on SEC filing

Board

MGMark Gudiksen
Mark GudikseninInvestor and Board MemberManaging Partner at Piva Capital
MDMichael Dolbec
Michael Dolbecin𝕏Board Member2022–2023Managing Partner, Momenta at The Hive
SM
Sumant MandalBoard director

Investors · 14

Also in the syndicate · 2

March CapitalOverture Climate Fund

Reported raises · per SEC filings

Form D private placements

$72M disclosed across 4 of 5 rounds · 2018–2025

$14.8MraisedMar 2026 · 52 investors · Other
Rule 506(b)
Officers, directors & promoters on the filing
  • Geoffrey MattsonExecutive Officer
  • Sumant MandalDirector
  • Susanto IrwanExecutive Officer, Director
  • Mark GudiksenDirector
  • Duncan GreatwoodExecutive Officer, Director
Offering amount
$15.1M
Amount sold
$14.8M
First sale
Dec 2025
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
$15.4MraisedNov 2023 · 13 investors · Other
Rule 506(b)
Officers, directors & promoters on the filing
  • Susanto IrwanExecutive Officer, Director
  • Geoffrey MattsonExecutive Officer, Director
  • Mark GudiksenDirector
  • Duncan GreatwoodExecutive Officer, Director
  • Sumant MandalDirector
Offering amount
$25M
Amount sold
$15.4M
First sale
Nov 2023
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
$25.3MraisedDec 2021 · 11 investors · Other
Rule 506(b)
Officers, directors & promoters on the filing
  • Dorea El-SayedExecutive Officer
  • Duncan GreatwoodExecutive Officer, Director
  • Mark GudiksenDirector
  • Michael DolbecDirector
  • Norman ThorlaksonExecutive Officer
  • Roman ArutyunovExecutive Officer
  • Sumant MandalDirector
  • Susanto IrwanExecutive Officer, Director
Offering amount
$34M
Amount sold
$25.3M
First sale
Dec 2021
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
$16.5MraisedOct 2018 · 15 investors · Other
Rule 506(b)
Officers, directors & promoters on the filing
  • Dana MoralyExecutive Officer
  • Susanto IrwanDirector
  • T. M. RaviExecutive Officer
  • Kamesh RaghavendraDirector
  • Sumant MandalDirector
  • Duncan GreatwoodExecutive Officer, Director
Offering amount
$21.1M
Amount sold
$16.5M
First sale
Jun 2018
Incorporated
Corporation, Delaware, 2016
Federal exemptions
06b
Full filing on SEC EDGAR ↗

Source: SEC EDGAR Form D. Amounts as filed; amended filings shown once at their latest values.

Company profile

researched Aug 2026

Xage Security develops a zero trust cybersecurity platform for organizations that operate a mix of information technology, operational technology (OT), cyber-physical systems, and cloud infrastructure. Its core technology is the Xage Fabric Platform, a distributed cybersecurity mesh that is overlaid on an existing environment without network re-architecture, rip-and-replace, or endpoint agents. Fabric nodes are deployed as virtual machines or containers on premises, in the cloud, and at remote sites, and are administered centrally from a browser while enforcing policy locally at each site and, where needed, at the level of an individual asset.

On top of the Fabric, Xage sells several products: Zero Trust Access (ZTA) for local and remote user-to-machine and machine-to-machine access control with MFA and SSO; Extended Privileged Access Management (XPAM), which eliminates standing privileges and uses a distributed, quantum-resistant credential vault; Critical Asset Protection for OT, IoT, and infrastructure assets via granular access control, segmentation, and virtual patching; Zero Trust Data Exchange (ZTDE) for authenticated, integrity-checked data sharing across siloed networks and with partners; and Unified Zero Trust for AI, which applies protocol- and network-level least-privilege enforcement to large language models, AI agents, AI pipelines, and data sources to limit data leakage and unauthorized agent behavior. Stated use cases include PAM, zero trust segmentation and microsegmentation, VPN replacement, vendor and third-party remote access, universal ZTNA, OT secure remote access, and multi-user session collaboration and shadowing.

The company also offers Cybersecurity Services covering assessment and design, implementation, and SLA-based support, aligned to frameworks such as IEC 62443, C2M2, NIST 800, and NERC, and delivered together with a partner ecosystem. Xage describes the platform as being deployable in as little as one day and as capable of operating in denied, degraded, intermittent, or latent (DDIL) environments without cloud dependencies, using Shamir's Secret Sharing and Federated Byzantine Agreement to keep distributed credential and policy data synchronized.

Founding story

Xage was founded in 2016 by Susanto Irwan and Roman Arutyunov after the two observed growth in attacks on Internet of Things devices such as surveillance cameras and temperature sensors. They set out to build a cybersecurity platform able to protect IoT devices and operational technology — the hardware and software used to monitor, control, and upgrade industrial systems — whether those assets are isolated or connected to the cloud.

Business model

Xage sells enterprise cybersecurity software products built on the Xage Fabric Platform — Zero Trust Access, Extended PAM, Critical Asset Protection, Zero Trust Data Exchange, and Unified Zero Trust for AI — deployable on premises or as software-as-a-service. It complements the software with professional Cybersecurity Services spanning assessment and design, implementation, and ongoing SLA-based support, delivered directly and through a partner and technology-integration ecosystem. The company reports both revenue and bookings, indicating contract-based enterprise sales, including large government contracts.

Enterprise software sales of platform products, supplemented by consulting, implementation, and support services; large public-sector contracts (for example a $17 million U.S. Space Force award and a $743,000 U.S. Air Force contract) form part of the revenue base.

Traction

As of the November 2023 funding announcement, Xage had roughly 90 employees and reported revenue growth of 420% and bookings growth of 560% in the first half of 2023 year over year. Contract wins include a $17 million award from U.S. Space Force Space Systems Command for zero trust access control and data protection across current and next-generation ground and space architectures, and a $743,000 U.S. Air Force contract. Customers cited publicly include Kinder Morgan and EPIC Midstream.

Latest developments

Recent product activity centers on AI security: Xage announced a Zero Trust for Agentic AI solution (May 27, 2026) offering end-to-end visibility and control over AI agent autonomy, followed by an announcement on June 1, 2026 extending it with NVIDIA Vera BlueField-4 STX security innovations, and on August 4, 2026 introduced Critical Asset Protection for comprehensive asset defense against AI-enabled threats. The company also signed CISA's Secure by Design pledge and publishes guidance mapping its capabilities to NERC CIP updates, NIS2, and MITRE frameworks.

Full profile — market position, technology, go-to-market, geography, history

Market position

Xage positions itself as a zero trust security vendor for real-world and critical infrastructure environments, competing in the market for platforms that secure IoT and industrial systems, where TechCrunch identified Dragos as its largest startup rival. It markets its platform as a consolidation of VPNs, jump servers, PAM, firewalls, and network segmentation tools.

Xage emphasizes an overlay deployment model that requires no network changes, agents, or asset replacement, enabling protection of legacy devices with no built-in security; a distributed architecture with no single point of failure and no cloud dependency for trust brokering, allowing enforcement in disconnected or DDIL environments; a distributed, quantum-resistant credential vault; day-one protection with deployment in as little as one day; and unified coverage across IT, OT, cyber-physical systems, cloud, and AI systems in a single platform.

Technology

The Xage Fabric is a distributed, cybersecurity mesh overlay with no single point of failure or single point to hack. It distributes credential and policy data across nodes so authentication and policy enforcement continue when a site is offline, using Shamir's Secret Sharing and Federated Byzantine Agreement for synchronization. Nodes deploy as VMs or containers without firewall rule or routing changes, and work across asset types from legacy OT devices lacking native security to cloud workloads. Capabilities include a distributed, quantum-resistant password vault, multi-factor authentication at every layer and even per device, granular identity-based policy enforcement, segmentation, virtual patching, just-in-time access with zero standing privileges, and session shadowing. The platform monitors device interactions and data movement to detect policy violations and trigger controls such as MFA challenges for logins from unknown locations. Zero Trust for AI applies network- and protocol-level least-privilege enforcement to LLMs, agents, and AI data pipelines, covering session management, data transfer, and command control.

Go-to-market

Xage sells directly to enterprise and government buyers and through a partner program and technology integrations (for example, integrations referenced with Forescout and NVIDIA BlueField), plus a strategic collaboration with SAIC to bring zero trust to federal government customers. Marketing is supported by an extensive content library of whitepapers, research reports, briefs, webinars, and customer case studies, along with on-demand demos and compliance-oriented material mapped to frameworks such as NERC CIP, NIS2, MITRE ATT&CK for ICS, MITRE ATLAS, and TSA pipeline security directives. Proceeds from the 2023 round were designated for R&D and expansion of go-to-market operations, with a focus on Asia Pacific.

Enterprises and public-sector organizations operating critical infrastructure, including oil and gas, clean and renewable energy, electric utilities, manufacturing, healthcare, transportation and logistics, space, the defense industrial base, and federal government agencies. Named or cited users include Kinder Morgan, EPIC Midstream, the U.S. Space Force, and the U.S. Air Force.

Geography

Headquartered at 445 Sherman Avenue, Suite 200, Palo Alto, California. The company has expanded into the Middle East and opened a Singapore office to serve an Asia Pacific customer base that includes major infrastructure operators.

History

Founded in 2016, Xage built its offering around a distributed cybersecurity mesh for industrial and critical infrastructure environments. Geoffrey Mattson was appointed chief executive officer in September 2023. In November 2023 the company announced a $20 million additional round that brought total funding to $80 million, alongside a strategic collaboration with SAIC; at that point Xage had roughly 90 employees. The company had expanded into the Middle East and, at the time of the 2023 round, opened a Singapore office to serve Asia Pacific customers. Subsequent product announcements included Zero Trust for Agentic AI (May–June 2026, including work with NVIDIA Vera BlueField-4 STX) and Critical Asset Protection (August 2026).

Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.

Key figures

latest reported
Bookings growth, H1 2023 year-over-yearNov 2023560%
EmployeesNov 202390 people
Revenue growth, H1 2023 year-over-yearNov 2023420%
Total funding raised to dateNov 2023$80M
U.S. Air Force contract valueNov 2023$743K
U.S. Space Force contract valueNov 2023$17M

Company-reported or press-reported figures, each dated to when it was claimed — not independently audited.

Founder mafia

2 people who came through Xage Security went on to found or lead other companies.

Competitors · 8

by search overlap
Palo Alto Networks81 shared keywordsPalo Alto Networks provides cybersecurity platforms and services to protect organizations' digital infrastructure across cloud, network, and security operations. The company serves enterprise organizations, governments, financial institutions, utilities, and healthcare providers globally.
BeyondTrust (Bomgar Corporation)80 shared keywordsBeyondTrust provides privilege-centric identity security through its Pathfinder platform, helping organizations manage privileged access and defend against external attacks and insider threats. Its products cover the identity attack surface for enterprise customers, including AI agent security.
Netezza75 shared keywordsIBM is a global technology company whose business spans enterprise software (including Red Hat, HashiCorp, and Confluent), IT infrastructure such as mainframes, servers, and storage, and IT consulting services. The company is also investing heavily in quantum computing and AI-based enterprise offerings, including its Lightwell open-source software security clearinghouse and the Anderon quantum wafer foundry.
ArrowPoint67 shared keywordsCisco provides networking, data center, and security technology for enterprises, including infrastructure to run traditional and AI workloads and tools to keep organizations running against cyberattacks and outages. Its platform connects networking devices and monitors security events across corporate networks.
strongDM63 shared keywordsStrongDM provides privileged access management and identity governance for infrastructure across cloud, on-premises, and hybrid environments. The platform centralizes access control, enforces zero standing privileges, and enables just-in-time provisioning for teams managing critical systems.
Sentinel One58 shared keywordsSentinelOne provides an AI-powered cybersecurity platform for enterprises that integrates endpoint protection, threat detection, and incident response capabilities. The company serves large enterprises, including many Fortune 500 organizations, to protect against cyber threats at scale.
Crowdstrike58 shared keywordsCrowdStrike provides an AI-native cybersecurity platform that unifies endpoint, identity, cloud, SaaS, and AI protection to detect and stop breaches for enterprise organizations. It combines automated response with human-led security operations including managed detection and response, threat hunting, and security services.
Delinea (FKA Centrify Corporation)48 shared keywordsDelinea provides an identity security control plane that enables real-time, context-aware access decisions across multi-cloud and on-premises environments for enterprises. The platform helps security teams govern access to data, infrastructure, and AI systems while automating privilege management and risk evaluation.

Companies competing with Xage Security for the same Google search keywords, organic and paid, via search-intersection analysis.

Non-dilutive funding · 7 SBIR/STTR awards

Federal grants — no equity taken
AgencyPhaseYearAmount
U.S. Air ForceAir ForcePhase II2023$3.9M
U.S. Air ForceAir ForcePhase II2021$746.2K
Department of EnergyPhase I2021$199.4K
U.S. Air ForceAir ForcePhase II2020$743K
U.S. Air ForceAir ForcePhase I2020$49.6K
U.S. Air ForceAir ForcePhase I2020$48K
Department of EnergyPhase I2019$199.7K

Source: SBIR.gov award data (U.S. Small Business Administration). SBIR/STTR awards are competitive federal R&D grants and contracts — non-dilutive capital alongside any venture rounds above.

Timeline · 8

launches, deals, and filings
Aug 2026
Critical Asset Protection launched

Xage announced Critical Asset Protection, providing comprehensive asset defense as AI-enabled threats grow.

source ↗

Jun 2026
Zero Trust for Agentic AI extended with NVIDIA Vera BlueField-4 STX

Xage announced enhancements to its Zero Trust for Agentic AI solution using NVIDIA Vera BlueField-4 STX security innovations.

source ↗

May 2026
Zero Trust for Agentic AI with visibility and control over AI agents

Xage announced a solution providing jailbreak-proof AI agent autonomy with end-to-end visibility and control.

source ↗

Nov 2023
Singapore office opened to serve Asia Pacific

Following an earlier Middle East expansion, Xage opened a Singapore office to increase coverage of the Asia Pacific region and support a growing regional customer base of infrastructure operators.

source ↗

Nov 2023
Xage raises $20M additional funding, bringing total to $80M

Xage announced a $20 million B2 round from existing investors Piva Capital, March Capital, SCF Partners, Overture Climate Fund, Valor Equity Partners and Chevron Technology Ventures, plus new investor SAIC. Proceeds earmarked for R&D and go-to-market expansion, with focus on Asia Pacific.

$20M source ↗

Nov 2023
Strategic collaboration with SAIC on zero trust for federal customers

Xage and Science Applications International Corporation announced a strategic collaboration to deliver zero trust security solutions for critical infrastructure and distributed operations across OT, IT, and cloud environments.

source ↗

Sep 2023
Geoffrey Mattson appointed CEO

Geoffrey Mattson was appointed chief executive officer of Xage Security in September 2023.

source ↗

Jan 2023
$17M U.S. Space Force Space Systems Command contract

Xage was awarded a $17 million contract by U.S. Space Force Space Systems Command to provide zero trust access control and data protection across current and next-generation ground and space architectures.

$17M source ↗

Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.

Legal entities · 1

corporate structure
Xage SecurityDelaware

In the news

Research sources · 8

primary sources listed

8 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does Xage Security do?
Xage Security provides zero trust access control and protection for IT, OT, cloud, and AI environments in critical infrastructure.
Who founded Xage Security?
Xage Security was founded by Roman Arutyunov, Susanto Irwan in 2017.
Who are Xage Security's investors?
Xage Security's investors include City Light, March Capital Partners, Momenta Ventures, Piva Capital, The Hive, Aramco Ventures, Chevron Technology Ventures, Hive Global AI and 4 more.
How much funding has Xage Security raised?
Xage Security has disclosed $72M raised across 4 of its 5 known rounds.
Where is Xage Security headquartered?
Xage Security is headquartered in Palo Alto, US.