Comp AI Secures $34M Series A to Build Continuously Agentic Future for Security and Compliance

Comp AI Raises $34M Series A to Expand Agentic Security Platform

Comp AI announced it has raised a $34 million Series A round led by Roo Capital and Grand Ventures1

1

2

2

. The compliance automation startup has now raised $37.5 million in total funding since its founding in January 20251

1

. The Miami-based company plans to use the capital to push beyond compliance automation into continuous cybersecurity, expanding into real-time monitoring, control validation, and security testing across applications and infrastructure2

2

3

3

.

The company was founded by Lewis Carhart as CEO, alongside Claudio Fuentes as COO and Mariano Fuentes as CTO1

1

. The trio previously worked together on LeapAI, a workflow platform that grew to more than a million users before they shut it down after failing to find a sticky enough use case1

1

. Their experience with the tedious SOC 2 compliance process at LeapAI sparked the idea for Comp AI.

Building an AI-Driven Compliance Automation Platform

Comp AI is building an agentic platform to automate tedious security and compliance tasks that traditionally required months of manual work1

1

. The platform's AI agents handle onboarding, policy and risk generation, evidence gathering, control monitoring, and vendor security assessments2

2

. The software reads a customer's systems and documents for organizational context, then drafts policies and risk registers from what it finds3

3

.

The platform supports frameworks including SOC 2 and ISO 27001, with its core being open source3

3

. The company now serves more than 1,000 customers, including Corgi, Dub, OpenCode, Inference, and Primer2

2

. The startup has reported 15 times annual recurring revenue growth year on year2

2

, a metric that Nathan Owen, general partner at Grand Ventures, called "remarkable"2

2

.

Why Continuous Security and Compliance Matters

Carhart emphasized that for many software companies, security and compliance are directly tied to revenue, as customers often request SOC 2 reports before closing deals1

1

. However, traditional compliance approaches create only periodic snapshots of security posture. "Historically, compliance has been an approximation of security because so much of the work could only be performed manually and periodically," Claudio Fuentes explained2

2

.

Carhart illustrated the gap with a concrete example: "Imagine a company completes its SOC 2 audit and two weeks later deploys a new AI agent that can access customer data, change permissions across an internal system, or introduce a new vulnerability through code deployment. The audit didn't become invalid; it simply wasn't designed to tell you in real time what changed afterward"1

1

. This timing aligns with OWASP moving excessive agency up its top 10 list for LLM applications, and Spain's data watchdog reporting a breach by an agent on the same day as Comp AI's announcement2

2

.

Expanding Into AI-Powered Penetration Testing and Cybersecurity

Comp AI already offers AI-powered penetration testing, where the platform proactively tests codebases and infrastructures for vulnerabilities1

1

. The Series A funding will accelerate product expansion into continuous cybersecurity capabilities2

2

. "Security software shouldn't just track the work. It should understand the business, perform the work, and act as risk changes," Carhart stated2

2

.

The company plans to hire across product, engineering, operations, sales, customer success, and marketing at its Miami headquarters and New York office2

2

. This expansion positions Comp AI to compete with established players like Vanta, which was valued at $4.15 billion in a $150 million round last year3

3

.

Balancing Agentic AI with Human Oversight

While embracing agentic AI, the founders emphasized that the platform doesn't replace humans or independent audit reviews1

1

. "An agent might draft a policy, for example, but a person still reviews and approves it," Carhart explained1

1

. Human workers help onboard the AI, support controls, and maintain the agentic workflow. "As agents take on more consequential actions over time, we believe the level of safeguards and human approval should increase accordingly," he added2

2

.

Mariano Fuentes noted that as companies adopt more AI, they need to demonstrate what an agent accessed, what it attempted, and whether it stayed within boundaries1

1

. Comp AI is addressing this by starting with permissions and accountability, building toward a security layer that can monitor and validate risks more continuously as these systems evolve1

1

. The rapid adoption and experimentation companies are conducting with AI is creating demand for continuous and potentially autonomous security and compliance platforms1

1

. Investors have been steadily funding this space, with NeuralTrust raising $20 million for AI agent security in June and Trent AI raising $13 million in April to build multi-agent security2

2

.