Comp AI raises $34M Series A to automate security and compliance
What's the deal? Comp AIDealroom has a profile for this one. Try Dealroom →, a cybersecurity and compliance startup, has raised US$22M Series A round, the company announced Thursday. Roo CapitalDealroom has a profile for this one. Try Dealroom → and Grand VenturesDealroom has a profile for this one. Try Dealroom → co-led the round, which brings total funding to $37.5 million.
What's the endgame? Comp AI is building an agentic platform to handle tedious security and compliance work. Its AI agents help write company security policies and collect evidence for audits, while continuously monitoring whether a company meets compliance controls. The platform also offers AI-powered penetration testing that proactively probes codebases and infrastructure for vulnerabilities.
How it started: Founder Lewis Carhart (chief executive officer) built the idea alongside brothers Claudio Fuentes (chief operating officer) and Mariano Fuentes (chief technology officer). The trio previously ran LeapAIDealroom has a profile for this one. Try Dealroom →, a workflow platform that grew to more than a million users before they shut it down. The tedious SOC 2 compliance process they hit while scaling that startup inspired Comp AI.
Why it matters: "For a lot of software companies, security and compliance are directly tied to revenue," Carhart said, noting how a customer might ask a startup for a SOC 2 report before closing a deal. Comp AI automates much of the work around that process — but doesn't replace independent audit review or human oversight.
The human factor: "An agent might draft a policy, for example, but a person still reviews and approves it," Carhart said. Human workers help onboard the AI, support controls, and maintain the agentic workflow. "As agents take on more consequential actions over time, we believe the level of safeguards and human approval should increase accordingly," he added.
Why now? Rapid adoption of AI is creating demand for continuous — and perhaps autonomous — security. Carhart described a company completing a SOC 2 audit, then deploying a new AI agent two weeks later that can access customer data or introduce vulnerabilities: the audit isn't invalid, but the picture has shifted.
The signal: At $34 million, Comp AI's round sits above the 95th percentile for US Series A deals in the legal space — a sign of investor appetite for the new wave of compliance startups like Vanta and Drata built for the agentic era.
Image credit: Comp AI
