Cymphony says it raised $30M to secure permissions AI agents inherit

Why it matters

AI agents can act on years of accumulated access mistakes at machine speed. Cymphony is betting that identity and data security will converge around a new enterprise control layer, backed by financing whose size and investor structure remain unresolved.

Shy Dekel, Idan Berkovits and Erez "Edi" Gotlieb founded Cymphony, an Israeli cybersecurity startup built around the access risks created when enterprise AI tools inherit employee permissions. In an undated financing release, the company says it raised $30 million led by Sequoia Capital and Fin Capital.

The financing record contains a material discrepancy. TechCrunch reported a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund, valuing Cymphony above $100 million. Cymphony's release names Sequoia and Fin Capital, gives a $30 million figure and does not call the financing a Series A.

The supplied records do not resolve the round size, designation or SMBC Fin Atlas Beyond Fund's participation. They also do not establish when the financing closed or whether Cymphony's $30 million figure includes an earlier Sequoia seed investment. Startup Nation Central records that undisclosed seed in August 2024, the only dated funding event identified in the reviewed sources.

Dekel is Cymphony's CEO, Berkovits is chief product officer and Gotlieb is CTO. According to Cymphony's company materials, the founders attended the Israeli military's selective Talpiot technology and leadership program and later served in cyber roles spanning Unit 8200 and the Israeli Prime Minister's Office.

An early bet on three founders

Startup Nation Central records Cymphony as founded in May 2024. Publicly reviewed sources do not disclose revenue, annual recurring revenue, customer count, customer concentration or a standard pricing structure.

Cymphony's financing account nevertheless shows Sequoia backing the same founding team across at least two disclosed events: the August 2024 seed recorded by Startup Nation Central and the $30 million financing described in the company's release. How those events relate financially remains unclear because the release does not say whether its total includes the seed.

The founders are pitching a security architecture shaped by their military cyber backgrounds. Their premise is that companies have spent years accumulating stale permissions across employees, contractors, applications and files. AI agents connected to those accounts can search and act through the resulting access paths much faster than a person.

The access problem agents inherit

Cymphony describes its core product as a Workforce Graph connecting identities, permissions, data, devices, activity and behavior. The company says its agentless platform draws signals from existing enterprise systems to give security teams a common view of employees, contractors, AI agents and other non-human identities.

Its Maestro assistant can investigate incidents using plain-language queries and initiate remediation, according to Cymphony. The listed actions include revoking access and notifying data owners. These capabilities and outcomes are company-reported rather than independently benchmarked.

In its release, Cymphony describes a customer that connected ChatGPT to SharePoint, allowing interns to query sensitive litigation documents because of an access mistake. The company uses the example to argue that an AI security problem can begin with permissions granted long before an agent enters the environment.

Cymphony's release also quotes a customer saying, "I have another flashlight on a problem I can't solve." Cymphony's sales pitch centers on changing permissions and reducing exposure instead of leaving security teams with another alert feed.

Cymphony reports a 74% reduction in AI-driven data exposure during the first 30 days of deployment and a 45% reduction in internal blast radius at a 50,000-person enterprise. The figures have not been independently verified.

A funded field and an unresolved round

Investors have committed substantial capital to adjacent approaches. WitnessAI announced $58 million in January for technology that monitors and governs enterprise AI interactions. Hush Security announced a $30 million Series A in July around identity and scoped access for non-human workers. Zenity announced a $125 million Series C in August for securing autonomous agents and the applications used to build them.

Those companies address different parts of the problem, from AI interaction monitoring to agent identity and application governance. Cymphony is positioning its graph as a shared context layer for identity, access, behavior and data exposure.

The company's immediate task is to prove that enterprises will fund that combined layer as a durable security category. Its financing claims provide substantial backing for the attempt, although the conflicting accounts leave basic terms unresolved. Cymphony says the round was $30 million led by Sequoia and Fin Capital; TechCrunch says it was a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund at a valuation above $100 million.