Cymphony Raises $30M to Secure Enterprise AI Agents

The big picture: Cymphony, a New York- and Tel Aviv-based startup, has raised $30 million to help enterprises manage security risks posed by AI agents operating alongside human employees. The funding includes a $25 million Series A co-led by Sequoia Capital and SMBC Fin Atlas Beyond Fund, valuing the company at more than $100 million, following an earlier undisclosed seed round from Sequoia.

Why it matters:

• Identity Gaps: AI agents increasingly function as independent entities within organizations but often lack the identity and access controls designed for human staff, creating significant security vulnerabilities.
• Data Exposure: Cymphony discovered approximately 85,000 files exposed to AI tools at one client, highlighting the potential for widespread unauthorized data access.
• Unauthorized Deployments: The company identified an incident involving an unauthorized AI deployment scanning sensitive files, demonstrating the risk of shadow AI operations within corporate networks.

How it works:

• Workforce Graph: Cymphony built a ‘workforce graph’ that provides security teams with comprehensive visibility into employees, AI agents, and other non-human identities across corporate systems.
• Unified Security: The platform unifies identity and data security, allowing organizations to apply consistent access controls and monitoring to both human and AI workforces.
• Risk Mitigation: By mapping AI agent interactions and access, Cymphony enables security teams to identify and mitigate risks such as data leakage and unauthorized system access.

The catch: Cymphony operates in a competitive landscape, facing established security platforms including Microsoft, Okta, and Wiz. As AI agents gain more access to sensitive corporate systems, the challenge for Cymphony will be to differentiate its specialized offering against broader security suites.