Fig Security

Fig Security provides a platform focused on maintaining the reliability of enterprise security operations. Founded in March 2025 by CEO Gal Shafir, CPO Nir Loya Dahan, and CTO Roy Haimof, the company emerged from stealth in March 2026 with $38 million in combined Seed and Series A funding. The founding team consists of veterans from the Israeli intelligence units 8200 and Mamram, with subsequent experience at prominent tech and cybersecurity firms like Google Cloud Security, Siemplify, and Cymulate. Shafir was a director at Siemplify through its acquisition by Google and later led global security architecture for Google SecOps. Dahan served as VP of Product at Cymulate and held product leadership roles at Siemplify, while Haimof was Director of Engineering at Cymulate.

Fig Security targets the operational gaps and 'silent failures' within a company's Security Operations Center (SOC) infrastructure. Its platform addresses the complexity of modern SecOps environments where changes can cause undetected breakdowns in detection and response workflows. The technology autonomously maps an organization's entire detection and response pipeline, tracing data from its source through various layers including SIEMs, data lakes, and SOAR platforms. This allows it to provide observability across the whole security infrastructure. By creating a 'data lineage', the platform can identify how upstream changes might impact downstream security capabilities.

When the system detects that changes, such as infrastructure drift or modifications, could disrupt security capabilities, it alerts the SecOps teams. The platform provides root-cause analysis, assesses the potential impact, and offers simulation capabilities to test fixes safely before they are deployed into a live production environment. This is designed to give security teams confidence to modernize their SOC and adopt AI without creating blind spots. The company's business model centers on this platform, serving enterprise clients, including Fortune 100 companies, who are looking to bolster their SecOps resilience. The company has offices in New York and Tel Aviv and plans to use its funding to expand its go-to-market efforts in North America.

Keywords: SecOps resilience, security operations, detection and response, SOC infrastructure, data lineage, security workflow mapping, silent security failures, SIEM observability, SOAR integration, cyber resilience, enterprise security, detection engineering, security data pipeline, security stack monitoring, security alert simulation, infrastructure drift, root-cause analysis, security architecture, Google SecOps, Cymulate, Siemplify