They will protect you tomorrow —
meet them today

CYERA

Data Security at Platform Scale

Cyera builds an AI-powered data security platform designed to discover, classify, and secure sensitive data across cloud, SaaS, and on-premises environments. Its funding trajectory tells part of the story: a reported $3 billion valuation in November 2024 (Cyera press release), then $6 billion in June 2025 (Cyera press release), $9 billion in January 2026 (Cyera press release), and $12 billion in June 2026 (Cyera press release).

That progression shows how quickly data security has moved into the center of enterprise architecture. Security teams no longer manage data exposure with point tools alone. They need continuous visibility across distributed systems, and they need policy engines that can operate at the speed of modern cloud infrastructure.

The engineering challenge is substantial. A platform like Cyera must ingest data from multiple clouds and SaaS applications, maintain an accurate inventory of sensitive data, enforce policies in near real time, and integrate with existing security and operations tooling. That is a data platform problem with security constraints.

For product and engineering leaders, Cyera's trajectory signals that data security has outgrown the compliance checkbox and become a core capability that sits alongside data lakes, warehouses, and analytics platforms. The companies that treat it as infrastructure will have an advantage when regulators, customers, and partners start asking for proof of data governance at scale.

VANTA

Compliance Automation as an Engineering Category

Vanta helped define compliance automation as a dedicated security software category. The company raised $150 million in Series C funding in July 2024 at a $2.45 billion valuation, led by Sequoia Capital (Business Wire), and another $150 million in July 2025 at a $4.15 billion valuation, led by Wellington Management (Forbes). A valuation that grows 69% in a single year signals how mature the category has become.

Compliance automation now demands much more than evidence collection. It requires continuous integration with cloud services, internal systems, HR platforms, and audit workflows. The product has to stay accurate, current, and defensible while supporting standards such as SOC 2, ISO 27001, HIPAA, and GDPR.

The engineering challenge is integration at scale. A compliance automation platform must connect with dozens of cloud services, generate audit evidence continuously, and maintain documentation that survives regulatory scrutiny. These are QA/SDET and integration engineering problems as much as they are security problems.

For engineering leaders, Vanta demonstrates how compliance automation evolved from a point tool into an enterprise engineering category with deep integration requirements. As audits shift from periodic to continuous, the advantage goes to the companies that treat compliance as a systems-integration challenge.

SILVERFORT

Identity Protection Across Mixed Estates

Silverfort builds unified identity protection, including MFA and zero-trust access across on-premises and cloud systems without requiring agents. The company raised a $116 million Series D in January 2024 (Crunchbase).

Identity has become one of the most difficult layers in enterprise security because it spans legacy systems, modern SaaS, and hybrid infrastructure at the same time. A platform like Silverfort has to connect into older environments without breaking them, while still enforcing policy consistently across cloud services.

The engineering challenge is orchestration across heterogeneous environments. The platform has to work with systems that were never designed for modern identity protocols, while still enforcing zero-trust principles.

For security software engineering teams, this is where the overlap with Softwarium's PAM engineering engagement with Thycotic/Delinea becomes relevant. Identity protection, MFA, and zero-trust access are adjacent to the engineering disciplines required for enterprise PAM and systems integration.

ABNORMAL AI

Behavioral Detection at Mailbox Scale

Abnormal AI raised $250 million in Series D funding at a $5.1 billion valuation in August 2024, led by Wellington Management with participation from CrowdStrike Falcon Fund (Abnormal AI press release, August 2024). The company rebranded from Abnormal Security to Abnormal AI in April 2025.

The company's focus on AI-native cloud email security reflects another major category shift. Email remains one of the easiest ways for attackers to reach users, but the threat has evolved beyond commodity phishing. Modern defenses now need to detect behavioral anomalies, account takeover attempts, business email compromise, and AI-generated social engineering across Microsoft 365 and Google Workspace.

The engineering challenge is building security on top of data pipelines and model signals rather than static rule sets. An AI-native email security platform must ingest email metadata, user behavior signals, and threat intelligence, then apply machine learning models to detect anomalies in real time. That requires security engineering built on data engineering, model operations, and workflow integration.

For product and engineering leaders, Abnormal AI shows how AI has moved from a marketing buzzword to a core engineering discipline in security. Teams that approach AI detection as a data engineering discipline will be positioned for AI-generated attacks at scale.

CHAINGUARD

Engineering the Software Supply Chain

Chainguard focuses on software supply chain security, especially hardened container images, dependency signing, and provenance verification for cloud-native environments. The company raised $140 million in Series C funding in 2024 at a $1.12 billion valuation (Crunchbase).

Its category is a strong example of how security has shifted into the build pipeline. Container images often inherit vulnerabilities from upstream dependencies and base images, which means the security problem starts long before deployment. Teams need SBOM generation, artifact signing, policy enforcement, CI/CD integration, and controls that work across heterogeneous build environments.

The engineering challenge is significant. Building a supply chain security platform requires understanding SBOM generation and verification, artifact signing and policy enforcement, CI/CD pipeline integration across heterogeneous build environments, and the policy-as-code tooling that makes these controls enforceable at scale without blocking developer velocity.

For security software engineering teams, this is where the overlap with Softwarium's capabilities becomes tangible. DevSecOps pipeline integration, container security practices, and QA/SDET for security-critical software are adjacent disciplines to what Chainguard is building. The question for CTOs is how much of it to build in-house versus partner on.