Where the Smart Money Is Going in Cybersecurity

Across the sectors covered in CognitionHub's Follow the Money research, cybersecurity stands out on investor pedigree. Index Ventures, Greylock, Bessemer Venture Partners, Evolution Equity, and Insight Partners all took positions in the same sector within the same six-month window.

Threats evolve at machine speed. Security analysts review them sequentially. The capital flowing into cybersecurity is a direct bet on that gap closing.

Index Ventures, Greylock, Bessemer Venture Partners, Evolution Equity, and Insight Partners all took positions in the same sector within the Follow the Money research window: 7AI's $130M Series A (described by its investors as the largest in cybersecurity history), Torq's $140M Series D at a $1.2B valuation, Kai's $125M emerging from stealth in March 2026, Cylake's $45M seed, and Sola Security's $35M Series A. Different entry points; the same architectural thesis.

The speed gap is architectural, not a resourcing problem

A human security analyst reviews alerts sequentially. In a high-volume enterprise environment, the backlog is permanent. Sophisticated attacks are designed around this: dwell time between breach and detection is a direct function of analyst throughput.

Agentic AI removes the throughput constraint. Torq runs autonomous SOC operations: alert triage, investigation, and response at enterprise scale, without a human at each decision point. 7AI deploys agents that detect and respond across the full enterprise attack surface continuously.

The decision-making that makes a SOC operational under load is the function being replaced. The speed gap cannot be closed by hiring more analysts. It is an architectural problem, and the companies receiving this capital are building the architectural answer.

The Cylake founding is a category signal

Nir Zuk founded Palo Alto Networks. In March 2026, he raised $45M from Greylock at seed to start Cylake: AI-native cybersecurity for sovereign data environments, built for enterprises and governments that cannot move sensitive workloads to cloud infrastructure.

The specific thesis matters. Cylake is a bet on a new category created by two simultaneous conditions: the capability for AI-native security operations now exists, and a growing class of enterprises and governments cannot access that capability through cloud-dependent architecture. Both conditions have to hold for the market to exist. Greylock backing this at seed suggests they believe both do.

When a founder with that track record restarts in the same domain with a distinct architectural thesis, the thesis deserves evaluation on its own terms.

Consolidation and compliance are the other active theses

Sola Security raised $35M at Series A backed by S32 and Microsoft M12 to build a no-code platform for enterprise security applications covering identity, incident response, and compliance. Microsoft's corporate venture arm taking a position here is a strategic signal about where enterprise security infrastructure is heading.

Kai's thesis is consolidation. A single agentic platform combining threat detection, exposure management, and response treats the fragmentation of enterprise security across point solutions as a vulnerability in itself.

The five companies in this cohort represent different entry points into the same infrastructure layer: the autonomous security operations centre. The capital behind them is treating this as a category-defining position.

"Cybersecurity is perhaps the most natural home for AI-native businesses: it is a domain where the threat landscape changes faster than any human analyst can track, and where the cost of failure is existential."

Follow the Money, CognitionHub Research, March 2026

This article is based on data from Follow the Money: AI Native Startups Raising Funds Right Now, CognitionHub Research, March 2026.