Obsidian Security Hits $1.1 Billion Valuation as AI Agents Reshape Enterprise Security Landscape

Obsidian Security raises funding at $1.1 billion valuation on AI security demand

Aug 4 (Reuters) - Obsidian Security said on Tuesday it had raised $85 million in a Series D funding round that valued the AI security startup at $1.1 billion, as businesses seek to secure a growing number of AI agents accessing sensitive enterprise data. The round, led by Crescent Cove Advisors, comes as businesses adopt autonomous software agents with access ⁠to customer records, source code, and other critical enterprise systems amid growing scrutiny of AI agent safety. OpenAI disclosed last week that one of its frontier models escaped its testing environment after exploiting a misconfiguration and accessed AI platform Hugging Face to retrieve evaluation data. Anthropic separately said one of its experimental agents breached multiple enterprise environments during internal testing after exploiting weak authentication controls. Chief Executive Hasan Imam said enterprises are rapidly giving AI agents access to third-party applications, with nearly 70% of Obsidian's customers already allowing ⁠agents to interact with business data. "I think six to twelve months down the road, we are going to see a significant disruption in the agentic economy," Imam told Reuters, as cheaper proprietary and open-source models gain widespread enterprise adoption. Obsidian said it would use the proceeds ⁠to expand its platform, which monitors and governs AI agents operating across third-party applications such as Microsoft (MSFT.O), opens new tab Copilot Studio, Salesforce (CRM.N), opens new tab Agentforce and Anthropic's Claude. Crescent Cove founder and chief investment officer Jun ⁠Hong Heng said falling AI costs would accelerate enterprise adoption of autonomous agents and drive demand for security software. Obsidian said the funding should support the company ⁠until it reaches positive cash flow as it aims to establish itself as a leader in AI agent security. Existing investors Greylock Partners and Menlo Ventures also participated in the round. Reporting by Akash Sriram in Bengaluru; Editing by Vijay Kishore Our Standards: The Thomson Reuters Trust Principles., opens new tab * Suggested Topics: * Cybersecurity Akash Sriram Thomson Reuters Akash reports on technology companies in the United States, electric vehicle companies, and the space industry. His reporting usually appears in the Autos & Transportation and Technology sections. He has a postgraduate degree in Conflict, Development, and Security from the University of Leeds. Akash's interests include music, football (soccer), and Formula 1.

Obsidian Security hits a $1.1bn valuation as AI reshapes the threat

The SaaS-security firm has raised fresh funding as companies scramble to guard the AI agents now roaming their cloud apps. Obsidian Security has become the latest cybersecurity company to be repriced upward by artificial intelligence. The SaaS-security firm has raised a fresh funding of $85 Million Series D at a $1.1bn valuation as demand for tools that secure AI surges. The raise pushes Obsidian into unicorn territory and reflects a simple dynamic. Every new way that companies use AI is also a new way for them to be attacked, and someone has to guard it. Investors have clearly noticed the gap. Money has poured into startups securing enterprise AI, from Onyx's $113m round to keep humans in control of AI agents to a string of others racing to build the same guardrails. Obsidian, founded in 2017, made its name protecting software-as-a-service applications, the sprawl of cloud tools like Salesforce, Microsoft 365, and Workday that hold a modern company's data. Its systems watch for compromised accounts, risky configurations, and identity-based attacks across that estate. The problem it started with has only grown. A large company now runs hundreds of SaaS applications, each a door into its data, and most security teams struggle to see across all of them at once. Identity has become the real battleground. As the perimeter dissolved into the cloud, attackers stopped breaking in and started logging in, using stolen credentials and over-permissioned accounts, exactly the weakness AI agents now multiply. The pitch has now tilted toward AI. Obsidian has been building defences for the AI agents that companies are plugging into their SaaS tools, software that can read, write, and act on corporate data with far less oversight than a human employee. That autonomy is the whole worry. An agent handed broad access to a company's applications is powerful and dangerous in equal measure, and a single misconfigured or hijacked agent can reach data no phishing email ever could. The speed is what changes the maths. A compromised employee clicks a few wrong links; a compromised agent can move across dozens of apps and touch enormous volumes of data before anyone notices. Obsidian's advantage is that it already sits inside the SaaS layer where much of this plays out. Securing AI agents is, in large part, about controlling what they can touch, and Obsidian has spent years mapping exactly that. The timing suits the money. Agentic AI adoption has accelerated inside enterprises, and security budgets tend to follow new technology once the first breaches make the risk feel concrete. The bigger players are buying in, too. Databricks recently acquired Panther Labs in a cybersecurity push, a sign that AI-era security is becoming a category the giants want to own rather than partner for. Obsidian has raised from a roster of well-known investors over the years, including Greylock, Wing, GV, and Norwest, and the new valuation marks a sharp step up from its earlier rounds. The company has been signalling the shift in its own product line, rolling out AI-agent defences and SaaS supply-chain protection as agentic adoption picks up. The funding is the market's endorsement of that direction. Security has been one of the few software categories where AI clearly adds demand rather than threatening it. The same automation that unnerves defenders is also creating the work that keeps companies like Obsidian growing. Valuations in security have run hot before, and not every AI-security startup will grow into its price. The wager is that securing AI becomes as unavoidable as securing email once did. For Obsidian, the $1.1bn tag is a bet by investors that the SaaS security problem and the AI security problem are becoming the same problem. If they are right, the company spent a decade preparing for a market that has only just arrived.

Obsidian Security raises $85M as AI agents create cybersecurity's next major attack surface

Obsidian Security Inc. has raised an $85 million Series D funding round at a post-money valuation of $1.1 billion as enterprises increasingly look to secure autonomous artificial intelligence agents accessing cloud applications, Chief Executive Hasan Imam said today in an exclusive interview with theCUBE with me at our NYSE Wired studio in NYC. The funding will be used to expand research and development and accelerate go-to-market investments as organizations rapidly adopt AI agents that interact with enterprise software using non-human identities. "The raise is on the back of two things," Imam said. "We have seen incredible growth among our largest customers, with more than 14 customers paying us more than $1 million annually and more than 100 customers paying over $100,000 per year. The second is what we've seen over the last year with agents accessing data inside third-party applications." Imam said more than 65% of the company's enterprise customers have already granted AI agents access to data within third-party software-as-a-service applications, creating new security challenges that traditional identity and access management platforms were not designed to address. The rapid adoption of AI agents is creating a new category of cybersecurity focused on non-human identities. Unlike employees, autonomous agents authenticate through application programming interfaces, OAuth tokens and machine credentials, allowing them to interact directly with cloud applications and enterprise data. During the interview, Imam said enterprises need governance capabilities that extend beyond provisioning access to monitoring and controlling what agents can do after they begin operating. "We talk a lot about agent governance," Imam said. "But once the agents have access to the applications, then we are in runtime. The agents are interacting with a non-human identity inside the third-party application to act on data. Our ability to provide governance and runtime enforcement, where we can prevent catastrophic actions inside third-party applications, is a unique capability." The shift reflects broader changes in enterprise software architectures as AI systems increasingly perform tasks once handled by employees. Organizations are entering an era in which AI agents will operate across multiple platforms, creating new governance requirements. We're starting to see reasoning come in as a different mechanism with AI. They're touching resources, they're touching storage, they're touching memory, they're doing work. This is a huge issue, and they're are going to have identities. Imam argued the industry's traditional approach to cybersecurity -- detecting threats and relying on security operations teams to investigate alerts -- will not be sufficient as AI agents operate at machine speed. "The concept of detection and response doesn't work in the agentic world," he said. "Agents move in seconds, maybe milliseconds. The provider that detects it also has to resolve it and prevent it. It is not going to be acceptable for something to be detected and then responded to hours or days later." The company believes securing interactions between applications, AI agents and cloud services will become one of the fastest-growing segments of enterprise cybersecurity as organizations expand the use of autonomous systems. Imam said enterprises are unlikely to centralize AI agent identities the same way they manage employee identities because agents will operate across multiple departments, cloud providers and third-party platforms. Instead, Obsidian expects organizations to deploy governance alongside emerging AI infrastructure such as Model Context Protocol servers and gateways, providing runtime controls over what agents are permitted to do inside enterprise applications. The funding comes as enterprises accelerate AI deployments while balancing productivity gains against growing security risks. As organizations grant AI agents broader access to business systems, cybersecurity vendors are racing to develop new platforms capable of governing autonomous software operating outside traditional human identity frameworks. Video Interview at theCUBE's NYSE Wired Studio Here is my video with CEO discussing the news