Kevin Mandia raises record $190M for Armadin to fight AI-driven cyberattacks with autonomous agents

Mandiant Founder Returns With Record Funding for AI-Native Security

Kevin Mandia has launched Armadin, an AI-native cybersecurity startup, with $189.9 million in combined seed and Series A funding—what the company claims is a record for an early-stage security startup1

1

. The Mandiant founder, who sold his previous company to Google for $5.4 billion in 2022, is returning to cybersecurity at a moment when AI-driven cyberattacks are reshaping the threat landscape2

2

.

The record funding round was led by Accel, with participation from GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, and the CIA's venture arm, In-Q-Tel1

1

. While other security startups have raised similar or larger Series A funding amounts, none did so at such an early stage. Password-management company 1Password and privacy compliance firm OneTrust both raised $200 million in Series A rounds in 2019, but 1Password was already 14 years old and OneTrust was three years old and in growth mode1

1

.

Autonomous AI Agents Target Machine-Speed Threats

Armadin builds autonomous AI agents designed to identify and validate exploitable vulnerabilities by simulating real-world attack behavior3

3

. The platform addresses a critical gap in traditional vulnerability scanning systems, which often produce large volumes of theoretical findings that don't necessarily represent practical attack paths. Instead, Armadin's technology continuously models adversary behavior using automated agents that attempt to compromise systems in ways similar to human attackers3

3

.

The distributed AI agents emulate different phases of a cyberattack, including reconnaissance, privilege escalation, lateral movement, and exploitation of exposed services3

3

. By chaining together multiple steps that mirror real attack techniques, the platform identifies combinations of weaknesses that could be used to gain access or move deeper into a network. This approach provides decision-grade proof of what can actually be exploited, rather than theoretical risk scores4

4

.

Combating Hyperattacks in an AI-Accelerated Landscape

Mandia told CNBC that he believes autonomous AI hackers are on the way and should be feared, warning that attackers will be able to complete attacks in minutes that used to take days1

1

. "The AI shift is changing cybersecurity more rapidly than any transition in history," Mandia said. "In a world of machine-speed attacks, defense must become autonomous. You cannot have a human in the loop for every defense decision and expect to win"3

3

.

The startup aims to combat what it calls "hyperattacks"—sophisticated, multi-modal campaigns that move at machine-speed4

4

. According to the World Economic Forum, 87% of organizations said AI-related vulnerabilities are increasing risk across their environments4

4

. Gartner projects that by next year, 17% of cyberattacks will employ generative AI, signaling that AI-driven techniques are shifting from experimentation to mainstream threat capability4

4

.

Rapid Growth and Enterprise Deployment

Founded in September 2024, Armadin has already hired over 60 employees and started working with Fortune 100 companies in just six months2

2

. The company's co-founders include former Google Cloud Security principal engineer Travis Lanham, former Mandiant executive Evan Peña, and former Google SecOps engineer David Slater1

1

.

Mandia, an internationally recognized security expert who spent time as a venture capitalist at Ballistic Ventures after selling Mandiant, told CNBC he "wasn't going to sit on the sidelines watching another shift change in cybersecurity without leveraging 30 years in the industry to do something"2

2

. The company plans to use the funding to expand engineering and research teams, further develop its AI-driven attack simulation platform, and scale deployment in enterprise environments3

3

.

Ping Li, partner at Accel, said "Armadin is the first company we've seen that truly weaponizes the attacker's perspective to build a more resilient defense. By combining Kevin's unrivaled operational experience with a generational AI engineering team, Armadin is delivering the autonomous, comprehensive system of record for an enterprise's security posture that boards and CISOs have been demanding for years"3

3

. The platform's ability to continuously repeat simulations allows organizations to test how changes in infrastructure, software updates, or security controls affect an attacker's ability to progress through a network, providing ongoing cyber threat response capabilities3

3

.