doxx.net Raises $38 Million and Opens Private Networks to People and AI Agents
The a16z-backed startup pairs private communications with controls over where agents connect—and lets agents help configure those controls.
Loading page…
The a16z-backed startup pairs private communications with controls over where agents connect—and lets agents help configure those controls.
Listen to this story
The open beta turns doxx.net’s $38 million Series A into a test of whether one network can protect both human communications and agents’ access to online services. Agents can get separate identities and private channels, and help configure devices and firewall rules—but only under user policies. The company says peer-to-peer calls, messages, and file transfers avoid a central communications server, while its own global network infrastructure still supports the service. Its DNS threat blocking is a separate safeguard, not proof of a particular detection rate.
Andreessen Horowitz led the round; Animo Ventures and Focal.vc also participated.
The closed beta began in December 2025, and the company reports blocking more than 38 million threats since then—a count, not a success rate.
Apps are available for iOS, macOS, and Android, with Windows and Linux support; users can start without an email address or phone number.
doxx.net is opening private networking to AI agents—not just the people directing them. On October 1, 2026, the Miami-based startup announced a $38 million Series A led by Andreessen Horowitz alongside its open-beta launch. Its pitch combines private channels for agents with controls designed to block dangerous destinations, while allowing agents to help configure the network itself.
Animo Ventures and Focal.vc also participated in the financing. Founder Barrett Lyon is bringing the company into public testing after a closed beta that began in December 2025. The new platform reaches beyond agent security: it also supports private browsing, device connections, file transfers and communications between people.
In their investment announcement, a16z partners Joel de la Garza and Martin Casado describe a parallel private network. Devices and agents can connect in encrypted groups, while calls, messages and file transfers travel directly between peers. The stated distinction is the communications path: those exchanges do not pass through a central communications server.
That is different from saying the service has no company-operated infrastructure. a16z says doxx.net built a global backbone with dedicated hardware, its own IP address space, a private naming system and a certificate authority—the system that supplies certificates used to secure its private domains. Those domains resolve inside doxx.net’s network rather than on the public internet.
We physically built something different: a platform where privacy comes from the architecture itself, not a policy document.
Barrett Lyon, doxx.net founder, in a statement quoted by Refresh Miami
The agent-specific proposition has two parts. doxx.net says agents can receive their own network identities and private channels. It also supplies a network API, a software interface, with native Model Context Protocol support for connecting AI tools to external systems. That interface allows agents to help configure infrastructure rather than merely communicate over it.
According to a16z, agents can connect devices, set firewall rules and establish private connections under the user’s policies. doxx.net calls this Agentic Defined Networking. The user-policy qualification is important to the promise: the agent is described as helping implement network boundaries, not receiving unrestricted authority to decide them.
A separate safeguard works at the destination level. The company says its DNS-level protection is designed to stop agents from reaching known or suspected phishing and malware destinations. This places the check at the stage where a person or agent tries to connect, before reaching the destination. It is a different function from the private channels used for communications.
doxx.net says it has blocked more than 38 million threats since the closed beta began. That is a company-reported count. It should not be confused with a measured success rate: the figure describes the volume the company says it blocked, not the proportion of dangerous activity its system catches.
Lyon’s background is in building and defending internet infrastructure. He founded Prolexic, which Akamai acquired, and later founded companies including BitGravity and Defense.net, acquired by Tata Communications and F5, respectively. a16z points to his more than two decades of network experience as part of its investment case.
The investor’s rationale goes beyond keeping conversations private. De la Garza and Casado argue that agents expand what needs protection because they can read documents, call software interfaces, move files and browse with access to a user’s accounts. Their concern is both where an agent connects and who can observe those connections—the two problems doxx.net’s launch seeks to address together.
Loading discussion...
Join the conversation
Explain which settings you would want to keep under your direct control.
Be the first to share a perspective or an experience.
Reader comments
Newest comments first. Replies stay oldest first.