The current state of cybersecurity has devolved into a high-stakes arms race, where the primary weapons are no longer just lines of code, but generative AI models. As bad actors leverage AI to discover software vulnerabilities and launch exploits at a speed that far outpaces human reaction time, the traditional security operations center (SOC) is reaching a breaking point.
For the analysts staffing these centers, the problem isn’t a lack of data—it’s an overwhelming abundance of it. Most security teams are drowning in a sea of “false positives,” where benign network hiccups trigger the same alarms as an actual breach. This “alert fatigue” creates a dangerous blind spot: the more noise there is, the easier it is for a sophisticated attacker to slip through unnoticed.
Exaforce, a three-year-old startup, is betting that the only way to fight AI-driven attacks is with AI-driven defense. The company recently secured $125 million in Series B funding to scale its platform, which aims to automate the tedious triage process and stop cyberattacks in real time. The round values the company at $725 million and drew participation from a heavy-hitting group of investors, including Khosla Ventures, Mayfield, Peak XV, HarbourVest and Seligman Ventures.
This latest influx of capital brings Exaforce’s total funding to $200 million, following a $75 million Series A just a year ago. The aggressive funding pace highlights a broader trend in the valley: the cost of building and deploying AI-enabled security tools is astronomical, but the market opportunity is equally massive as enterprises scramble to modernize their defenses.
Solving the ‘Needle in a Haystack’ Problem
Having spent years as a software engineer before moving into journalism, I’ve seen firsthand how “noise” can paralyze a technical team. In a SOC, that noise manifests as hundreds of daily alerts that require manual investigation. When every alert looks like a crisis, nothing is a priority.
Umesh Padval, a managing partner at Seligman Ventures, describes the current analyst experience as searching for a needle in a haystack. Exaforce intends to burn the haystack down. The startup utilizes specialized AI agents, which they call “Exabots,” to handle the deep data analysis and initial triage that typically consumes a human analyst’s day.
By automating these routine checks, Exaforce claims its platform can reduce manual, time-consuming tasks by as much as 90%. The goal isn’t necessarily to replace the human in the loop, but to ensure that when an analyst is finally alerted, they are looking at a verified, high-priority threat rather than a glitch in the system.
| Funding Round | Amount Raised | Estimated Valuation | Key Investors |
|---|---|---|---|
| Series A | $75 Million | Not Disclosed | Various |
| Series B | $125 Million | $725 Million | Khosla, Mayfield, Peak XV, HarbourVest, Seligman |
| Total | $200 Million | $725 Million | — |
The Shift Toward ‘Vibe Hunting’
One of the more intriguing developments in Exaforce’s toolkit is a feature the company calls “vibe hunting.” While the name sounds casual, the underlying utility is a significant shift in how security teams interact with their data. Traditionally, querying a security database required complex syntax or specific known indicators of compromise (IoCs).
Vibe hunting allows security teams to query the platform using natural language, essentially allowing them to investigate based on a hunch or a hypothesis. For example, an analyst might ask, “Did we get any new attacks from Iran?” or “Is there any unusual activity mirroring the recent breach at a peer company?”
Ankur Singla, co-founder and CEO of Exaforce, notes that while the mandate—catching and stopping threats as they happen—is simple, the execution is incredibly complex. By lowering the barrier to entry for data interrogation, Exaforce is attempting to turn the “vibe” of a seasoned security professional into an actionable, AI-verified lead.
A Crowded Field of AI Defenders
Exaforce is entering a market that is rapidly becoming saturated. The company isn’t just competing with other agile startups like 7ai, Dropzone AI, and Prophet Security. it is also fighting for territory against industry titans like CrowdStrike and Palo Alto Networks, both of which have integrated AI and automation into their sprawling security ecosystems.
However, Singla argues that the current climate of high-profile cyberattacks has changed the conversation with potential customers. In the past, sales pitches often centered on why a company needed an AI-driven SOC. Now, the question has shifted to how to operationalize it.
The company officially brought its product to market in the fourth quarter of last year after two years of testing with design partners. It has already onboarded 20 customers, including Replit and Guardant Health. The momentum is palpable; Singla told TechCrunch that the company expects to grow its customer base to between 40 and 50 by the end of the year.
Disclaimer: This article contains information regarding venture capital investments. Investing in startups involves significant risk, and past performance is not indicative of future results.
As Exaforce scales, the next critical benchmark will be the company’s ability to maintain its 90% efficiency claim as it moves from a handful of design partners to a broader, more diverse set of enterprise environments. The company is expected to provide further updates on its customer acquisition and product roadmap as it approaches its year-end targets.
Do you think AI agents will eventually replace the need for human security analysts, or will they simply change the nature of the job? Let us know in the comments or share this story with your network.
