Vega Security raises $120M Series B to transform enterprise cyber threat detection with AI

Vega Security Closes $120M Series B to Scale AI-Native Security Analytics

Vega Security secured $120 million in Series B funding led by Accel, with participation from Cyberstarts, Redpoint Ventures, and CRV, nearly doubling the company's valuation to $700 million 1

1

. The two-year-old AI-powered cybersecurity startup now has $185 million in total funding, which it plans to use for product development, expanding its go-to-market team, and global expansion 1

1

. Founded in 2024 by Shay Sandler, a veteran of Israel's military cybersecurity unit and founding employee at Granulate (acquired by Intel for $650 million in 2022), Vega has attracted attention for its ambitious approach to solving one of enterprise security's most persistent challenges 1

1

.

Challenging Legacy Systems with Security Analytics Mesh Platform

Vega Security addresses a fundamental flaw in how enterprises handle cyber threat detection. Legacy systems like SIEM tools, dominated by Splunk (acquired by Cisco for $28 billion in 2024), require companies to centralize massive volumes of security data before analyzing it—a process that's become prohibitively expensive and slow in modern cloud environments 1

1

. The company's Security Analytics Mesh platform flips this model by deploying analytics and detection logic directly where data already resides, across cloud platforms, data lakes, SaaS services, and existing log repositories 2

2

. This federated approach allows security operations teams to detect threats from distributed data sources without duplicating or migrating logs into a single system, eliminating infrastructure overhead and delays caused by data movement 2

2

.

AI-Native Security Analytics Transforms Enterprise Cyber Threat Detection

AI sits at the core of Vega's offering, applied across multiple stages of security operations including detection creation, alert correlation, investigation, and triage 2

2

. The platform uses AI to assist with detection logic, enrich events with contextual data, and reduce alert noise—critical capabilities as enterprises struggle with exploding data volumes driven by AI adoption 1

1

. Vega also provides visibility into detection coverage and gaps, helping teams understand where telemetry exists but isn't actively monitored 2

2

. The platform is expanding to support response workflows within the same architecture, allowing analysts to move from alert identification to investigation and action without switching tools or exporting data 2

2

.

Rapid Enterprise Adoption Signals Market Shift

Despite being only two years old, the 100-person startup has already signed multi-million-dollar contracts with global banks, Fortune 200 companies, and cloud-heavy firms like Instacart 1

1

2

2

. Sandler attributes this rapid adoption to solving a painful problem: "The only reason they would do that with a two-year-old startup is because the problem is so painful and other solutions on the market require an unrealistic expectation that the enterprise change the way they operate or do two years of data migrations," he told TechCrunch 1

1

. Andrei Brasoveanu, partner at Accel, noted that "what stood out to us was not just the speed of adoption, but the size and significance of the customers committing to Vega early on" 2

2

.

Why This Matters for Incident Response Readiness

Vega's approach addresses a critical vulnerability in modern enterprises: in complex cloud environments, data centralization not only costs more but often increases exposure to threat actors by creating delays in detection and response 1

1

2

2

. Sandler emphasizes that Vega's "North Star" was building a solution that's not only more cost-effective but simple enough for the largest enterprises to adopt "within minutes" 1

1

. As organizations generate ever-larger volumes of security data across distributed infrastructure, the ability to achieve AI-native detection and response capability without migration or centralization becomes essential for maintaining incident response readiness. The company's rapid growth and substantial valuation suggest the market is ready to move beyond legacy security analytics models that can no longer keep pace with modern threats.