New York- and Tel Aviv-based startup Cymphony has raised $30 million to develop security tools designed to monitor AI agents and non-human identities within companies. The funding includes a $25 million Series A round led by Sequoia Capital and SMBC Fin Atlas Beyond Fund, bringing the company's post-money valuation to more than $100 million.
The round follows an undisclosed initial investment from Sequoia. The company, founded two years ago, raised funding before settling on the product and problem it wanted to address, according to comments reported by TechCrunch from its partners and Cymphony's founders.
A Platform That Combines Identity, Data, and Activity
Cymphony is built around what it calls a workforce graph, a model that combines identity, data, and activity signals in a single view for security teams. This includes employees, AI agents, and other non-human identities, along with the systems and sensitive data each can access.
The company says AI agents do not always pass through the same access controls and identity-management processes applied to employees, despite interacting with multiple systems and large volumes of enterprise data. At one U.S. public company, Cymphony said it found approximately 85,000 files that had become available to AI tools and agents, then helped close the exposure and verified that those systems had not accessed the files. In another case, CEO Shay Dekel said an external contractor installed an unauthorized version of Claude and used their existing permissions to scan thousands of sensitive files.
What Changes in Practice?
The platform does more than monitor risks: It uses AI agents to investigate incidents, prioritize remediation, and automate certain actions, such as correcting access permissions. Customers can operate it with a high degree of automation or use a managed service in which Cymphony teams intervene in complex cases.
The significance of this approach is that an agent may take different paths to complete a task, acquire new capabilities, or create other agents, making it more difficult to control than an employee with a more stable role and set of permissions. That does not mean Cymphony replaces existing identity-management tools, however; its investor says customers currently use it as an additional layer, with the possibility of replacing some specialized tools in the future, particularly for preventing data leaks.
Funding in a Crowded Market
Cymphony says it has signed contracts with several enterprise customers and generated seven-figure annual recurring revenue during its first year of sales. Its customers include KKR, Syngenta, Cass Information Systems, and Athennian, while Sequoia has also been using the platform internally since its early stages. The company has approximately 30 employees in New York and Tel Aviv. Most of its customers are currently concentrated in North America, while demand is beginning to emerge from Europe, the Middle East, and Africa.
The company faces competition from firms such as Microsoft, Okta, CyberArk, Wiz, and Varonis, which are also expanding their offerings in identity, data, and AI security. The open question, therefore, is whether AI agent security will become an independent market or turn into a feature within larger security platforms. The exposure examples cited by the company are also based on its own disclosures, making independent verification of the scale of the risks and the results of remediation an important consideration when evaluating the product.