Zafran raises $60M Series C with Amex Ventures to coordinate AI-era cyber defence
What's the deal? Zafran Security, a New York-based cybersecurity startup, has secured a strategic investment from Amex VenturesDealroom has a profile for this one. Try Dealroom → — the venture capital arm of American Express — as part of its $60 million Series C round. Financial terms of Amex Ventures' specific stake were not disclosed.
Zafran builds what it calls an AI-native threat exposure management platform, designed to coordinate a company's existing security tools rather than replace them. Its target customers are large financial institutions and critical infrastructure operators managing complex, hybrid IT environments.
Why now? Large enterprises have spent years assembling security stacks — endpoint detection, firewalls, cloud controls, vulnerability scanners — but the tools rarely work in concert. As AI accelerates digital transformation across financial services, the attack surface grows faster than security teams can manually manage, while regulators and boards simultaneously demand more accountability.
Amex Ventures' participation is strategically significant: American Express is itself a large financial institution with the exact security challenges Zafran targets, making the investment a customer validation as much as a capital commitment.
What could go wrong? Zafran's pitch — coordinating existing tools rather than selling new ones — is compelling in theory but commercially tricky. Convincing buyers to add another layer to an already complex stack requires overcoming long procurement cycles, tight budgets, and widespread security tool fatigue in financial services. The source material is also entirely company-issued, with no independent customer validation or performance data to verify platform effectiveness.
The signal: The raise reflects a broader maturation in enterprise security thinking. The industry spent the past decade selling more tools; the next phase is about making those tools work together.
As AI embeds itself deeper into financial infrastructure, the coordination problem — knowing which vulnerabilities actually matter and which controls are working — becomes more urgent, not less. Strategic investment from a major financial institution signals that this category is moving from concept to procurement priority.
Source:
Zafran Security
A.M.
