Cymphony Raises $25M for Security Controls Around AI-Agent Access
The startup is building a shared view of people, agents, data and activity. Its challenge is proving that layer belongs beside established enterprise-security tools.
Listen to this story
The audio brief
Story brief
3 key pointsCymphony’s $25 million Series A reflects growing demand for controls over AI-agent access to enterprise systems, not just employee identities. Its “workforce graph” maps employees, agents and other machine identities against data and activity signals, then helps prioritize or remediate risky permissions. The New York–Tel Aviv startup reports more than $30 million in total funding, a valuation above $100 million,...
- 01
Cymphony says it found roughly 85,000 files accessible to AI tools and agents at one U.S. public company.
- 02
The company reports customers including KKR, Syngenta, Cass Information Systems and Athennian.
- 03
Customers currently use Cymphony alongside core identity tools; Sequoia sees possible future overlap with data-loss-prevention products.
Cymphony has raised a $25 million Series A co-led by Sequoia Capital and SMBC Fin Atlas Beyond Fund. The funding backs its effort to help companies find and fix risky access paths as AI agents enter corporate systems. The round reportedly values the New York- and Tel Aviv-based startup at more than $100 million after the investment.
One view of people and machine identities
Cymphony’s platform centers on what it calls a workforce graph: a combined view of employees, AI agents and other non-human identities. It brings together identity, data and activity signals so security teams can see the systems and sensitive information those actors can access.
Agents can reach multiple systems and handle large amounts of corporate data, yet they do not necessarily pass through the access and identity controls built for employees. That can leave companies with a harder question: who, or what, can reach a particular resource?
Sequoia Capital and SMBC Fin Atlas Beyond Fund co-led the Series A.
TechCrunch reported that the investment valued Cymphony above $100 million after the round.
The disclosed total includes a previously undisclosed Sequoia seed investment.
The pitch goes beyond another alert
What Cymphony says its platform can do
- Use AI agents to investigate incidents and prioritize the issues security teams should address.
- Automate some remediation, including correcting access permissions.
- Offer a managed service that brings in Cymphony security experts for more complex cases.
Cymphony says it has already surfaced the kind of exposure it is designed to find. At one U.S. public company, it said about 85,000 files were accessible to AI tools and agents. The startup said it helped close the exposure and verified that the files had not been accessed through those systems.
The company also said it signed a double-digit number of enterprise customers and reached seven figures in annual recurring revenue within its first year of sales. Its named customers include KKR, Syngenta, Cass Information Systems and Athennian. The commercial figures are company-reported.
A new layer beside entrenched tools
Cymphony is entering a field where Microsoft, Okta, CyberArk, Wiz and Varonis are also expanding work around identity, data and AI. Sequoia partner Bogomil Balkansky said customers are mainly using Cymphony as an additional layer today, rather than replacing core identity systems. He said it could eventually displace some point products, particularly in data loss prevention.
Sequoia first invested before Cymphony had a product or clear direction, Balkansky said. The firm reinvested after the startup built its platform, signed customers and saw customers expand their use. Cymphony has about 30 employees across Tel Aviv and New York. Its next test is whether agent security becomes a durable market of its own rather than a feature of larger platforms.
Sources
- techcrunch.comSequoia doubles down on Cymphony as AI agents create new enterprise security risks | TechCrunch
Loading discussion...
Reader comments
Newest comments first. Replies stay oldest first.