Cisco backs Zafran, extending cyber startup's funding past $130M

What's the deal? Zafran Security has secured a strategic investment from Cisco Investments, extending its previously announced $130 million in total funding. The New York-based startup builds an AI-native Continuous Threat Exposure Management platform.

Who else is in? Cisco Investments joins existing backers Sequoia CapitalDealroom has a profile for this one. Try Dealroom →, Cyberstarts, Menlo Ventures, PSP GrowthDealroom has a profile for this one. Try Dealroom →, Vintage Investment Partners, and Amex Ventures.

What does it do? Zafran's platform, built on an AI-native Exposure Graph, maps the attack paths that matter most and turns a company's existing security tools into a coordinated system. It claims to prove that 99% of critical vulnerabilities are not exploitable, then focuses remediation on the riskiest 1%.

Why now? The company frames the raise around a shift in enterprise security, arguing AI now lets attackers chain low-severity weaknesses into sophisticated attack paths at machine speed. As the gap between vulnerability disclosure and exploitation shrinks, it says defenders must reduce risk before attack paths can be used.

What's the endgame? Zafran wants to be the "nerve center" that makes decades of security spending — on EDR, firewalls, cloud platforms, and vulnerability scanners — work together. "Organizations have made enormous investments in cybersecurity over the past decade. The opportunity now is to make those investments work together," said chief executive officer and co-founder Sanaz Yashar.

The signal: Cisco's backing points to a strategic, not purely financial, bet. "The challenge for security teams has extended from identifying vulnerabilities to effectively orchestrating their remediation," said Janey Hoe, vice president at Cisco Investments — a nod to where the crowded exposure-management market is heading.

Read more: finanznachrichten.de

Image credit: Generated with Gemini