Armadin raised $255.5 million in a Series B at a valuation exceeding $2.5 billion1,3,4. HiddenLayer raised a $100 million Series B2,12. Reco raised a $55 million Series B extension6. doxx.net raised $38 million10. Huskeys Security Ltd. raised a $27 million Series A5. ANALYSIS The capital is no longer a bet on a future problem; it is chasing breaches, vulnerability disclosures, and enterprise budgets that are already moving.
Why it matters
Gartner estimates companies will spend $2.83 billion this year on products meant to secure AI tools, 83% more than 2025, and expects spending to reach nearly $4.78 billion next year. ◆ That growth rate outpaces many of the AI application markets it protects, turning agent security from a niche concern into a standalone spending category with its own investor logic and competitive dynamics.
The big picture
Armadin, founded by Mandiant creator Kevin Mandia, raised $255.5 million in a Series B co-led by Andreessen Horowitz and Accel at a valuation exceeding $2.5 billion. The round, which included Bain Capital Ventures, Redpoint, GV, In-Q-Tel, Kleiner Perkins, and Menlo Ventures, brings Armadin's total funding to $445 million, only seven months after its public launch11. "Offense is uniquely advantaged right now. AI lets an attacker find and chain weaknesses faster than any human team can respond," Mandia said. On August 3, Armadin said it had sent 26,000 AI agents to attack a live institution's network for three days, with the institution's consent; the swarm chained 38 validated attack paths and produced 238 security findings.
HiddenLayer raised a $100 million Series B led by Delta-v Capital, with participation from Ten Eleven Ventures, Morgan Stanley, M12, and Booz Allen Ventures, bringing its total to over $155 million15. CEO Chris Sestito told TechCrunch that annual recurring revenue grew more than 10x over the past year, with ARR now "in the tens of millions of dollars" and over 90% of that growth driven by new customers. "We set out to pioneer trusted, secure use of AI for enterprises, long before most organizations saw the urgency we do today," Sestito said. The company plans to expand into Agentic Runtime Security and a new Agent Harness Security product for AI coding agents.
Smaller rounds filled in the gaps. Reco raised a $55 million Series B extension for technology that secures and governs AI agents across SaaS environments, taking its total to $140 million. doxx.net raised $38 million for a platform that prevents agentic misadventure while agents operate under a user's authority. Huskeys Security Ltd. raised a $27 million Series A for edge security.
Between the lines
The capital surge is arriving alongside concrete exploits, not hypothetical ones. A vulnerability class dubbed GitSpawn, disclosed by Manifold Security, allows a booby-trapped repository to silently execute code on a developer's machine the moment it is opened with an AI coding agent, "no prompt typed, no approval clicked, and in some cases before the user has even authenticated"14. The attack exploits git's core.fsmonitor configuration key; because nearly every CLI-based coding agent runs git commands on startup, the malicious command executes with the full privileges of the logged-in user, outside the agent's sandbox. Four of the eight tracked issues remained unpatched at publication.
ANALYSIS GitSpawn is notable not because it is sophisticated but because it is mundane: a documented git feature, repurposed. The attack surface is not the model itself but the tooling scaffolding around it, precisely the layer that HiddenLayer's new coding-agent product and Armadin's offensive swarms are designed to stress-test.
Meanwhile, OpenAI told House Democrats Greg Casar and Doris Matsui that its engineers are developing "automated shutdown capabilities" for AI systems8. OpenLeash, a separate tool, intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain13. ◆ The simultaneous emergence of platform-level kill switches and granular runtime controls illustrates a market splitting along two axes: catastrophic-scenario shutdowns at the top, and everyday behavioral guardrails at the agent level. Armadin's offensive swarms, HiddenLayer's runtime monitoring, and Reco's SaaS governance each occupy a different slice of that spectrum.
When HiddenLayer raised its Series A three years ago, "one of the big questions in the space was whether the AI threats the startup was protecting against would manifest in enough quantity to make for a real market". ◆ The GitSpawn disclosure and the scale of enterprise buying answer that question with exploits and purchase orders rather than projections.
What's next
Armadin said it will spend the new capital on its platform, research, training, and getting the product to customers. HiddenLayer plans to invest in agentic runtime security capabilities that cover AI coding agents. Gartner's projected $4.78 billion in AI security spending next year sets the ceiling these startups are building toward.