Key facts
- Cymphony has secured $30 million in funding, including a $25 million Series A round.
- Sequoia Capital co-led the Series A round, valuing Cymphony at over $100 million.
- The startup addresses security risks associated with AI agents accessing corporate systems and data.
- Cymphony's platform offers a unified view of human and AI identities and their access.
- Recent incidents highlight the growing need for AI agent security solutions.
Sequoia Capital has significantly increased its investment in Cymphony, a startup focused on mitigating the burgeoning security risks posed by AI agents within enterprises. Cymphony announced $30 million in new funding, with a $25 million Series A round co-led by Sequoia and SMBC Fin Atlas Beyond Fund, valuing the company at over $100 million. This follows Sequoia's initial seed investment in the company.
The core problem Cymphony addresses is that AI agents, operating at machine speed, gain access to sensitive corporate data and systems, often bypassing traditional human-centric access controls. This creates a significant challenge for enterprises in tracking and managing who or what has access to critical information.
Cymphony's platform aims to solve this by creating a unified 'workforce graph' that consolidates identity, data, and activity signals for both human employees and non-human AI entities. This provides security teams with a single pane of glass to monitor access and potential exposures.
Co-founder and CEO Shy Dekel highlighted that enterprise security frameworks were not designed for the increasing number of independent AI entities joining the workforce. Cymphony has already identified substantial risks, such as one U.S. public company where AI tools had access to approximately 85,000 files. In another instance, an unsanctioned AI agent scanned thousands of sensitive files by leveraging an external collaborator's existing access.
Beyond risk identification, Cymphony employs AI agents to investigate incidents, prioritize threats, and automate remediation, including correcting access permissions. The platform can operate autonomously or offer a managed service for more complex scenarios.
Sequoia's decision to double down was influenced by Cymphony's product development, customer acquisition, and revenue growth, alongside the founders' strong pedigree from Israel's Talpiot program. Sequoia partner Bogomil Balkansky noted that Cymphony has secured a double-digit number of enterprise customers, including KKR and Syngenta, and achieved seven figures in annual recurring revenue within its first year.
The company enters a competitive landscape with established players like Microsoft and Okta also addressing AI security. However, Cymphony differentiates itself by treating identity and data security as an integrated problem, particularly crucial as AI agents' dynamic capabilities and access patterns differ significantly from human employees'. Balkansky believes Cymphony's approach is complementary to existing tools, though it may displace some point solutions over time.
Discussion