Former Spy Raises $60M as Zafran Tackles Surging AI-Driven Cyberattacks with New AI Agents

Cybersecurity Startup Zafran Secures $60 Million Funding Amid Rising AI Threats

Zafran, a fast-growing cybersecurity startup, announced it has raised $60 million in Series C funding led by Menlo Ventures, with participation from Sequoia Capital, Cyberstarts, PSP Growth, Vintage Investment Partners and Knollwood Investment 1

1

2

2

. The round brings the company's total funding to $130 million since its founding in 2022, with the startup tripling its annual recurring revenue since its last $70 million raise in September 2024 1

1

. While Zafran did not disclose its valuation, the company confirmed it has doubled since the previous round 2

2

.

CEO Sanaz Yashar, a former Israeli intelligence officer, told CNBC the funding addresses the accelerating speed and pace of cyberattacks driven by artificial intelligence, noting the threat landscape is "becoming much more severe than it was even a year ago" 1

1

. The company plans to use the capital to expand its workforce as demand for advanced threat exposure management solutions intensifies 1

1

.

AI Agents Transform Vulnerability Management Platform Operations

Zafran unveiled Agentic Exposure Management, a new offering that deploys AI agents to streamline how organizations identify and remediate security flaws 2

2

. When researchers discover zero-day exploits, the system automatically checks whether they affect a company's applications by analyzing SBOM files that list software components. The platform then generates temporary mitigation strategies that can be deployed until developers release official patches 2

2

.

The automation tackles a critical bottleneck in cybersecurity operations. In large organizations, identifying the colleague responsible for maintaining a vulnerable workload can consume several hours, creating windows of opportunity for hackers. Agentic Exposure Management uses artificial intelligence to instantly identify the staffer in charge of vulnerable systems, dramatically reducing response times 2

2

. The system also evaluates exploitability, automatically determining whether a vulnerability requires immediate patching or can wait based on factors like firewall protection 2

2

.

From Unit 8200 to Combating Ransomware Attack Threats

Yashar, who moved to Israel from Tehran at 17, served for 15 years in Unit 8200, an elite cybersecurity unit within the Israel Defense Forces 1

1

. She also led major investigations at threat detection firm FireEye and Mandiant, which Google acquired in 2022 1

1

. Yashar and co-founders Ben Seri and Snir Havdala created Zafran following an investigation into a ransomware attack on a hospital in Israel, where they discovered that cohesive security tools communicating with each other could have prevented the breach 1

1

.

The startup joins a lineage of successful companies founded by Unit 8200 alumni, including Palo Alto Networks, Check Point Software and CyberArk 1

1

. Cyberstarts, one of Zafran's investors, was also an early backer of Wiz, which Google acquired for $32 billion in March 1

1

.

Market Consolidation Signals Urgency in Vulnerability Management

Companies are scrambling to reinvigorate their cybersecurity capabilities as AI reshapes the sophistication of cyber criminals 1

1

. The market has seen significant consolidation, with Palo Alto Networks acquiring identity security provider CyberArk for $25 billion in July 1

1

. Zafran's platform addresses this need by analyzing technical data from multiple security tools, organizing it into consistent formats and removing duplicates to provide actionable remediation suggestions 2

2

.

Menlo Ventures partner Rama Sekhar noted that "vulnerability management burns massive analyst hours on repetitive triage and manual patching, the kind of service-oriented work that AI agents excel at automating" 2

2

. Zafran's customer base spans healthcare, financial services, insurance, technology and Fortune 500 companies 1

1

. As AI threats continue to evolve, organizations will need to monitor how automated vulnerability management platforms handle emerging attack vectors and whether they can keep pace with increasingly sophisticated cyberattacks.