Cyberhaven Valuation, Funding & Investors

Immuta is a Boston-headquartered data security provider trusted by Fortune 500 firms and US government agencies. Its platform automates sensitive data discovery, classification, and access controls across AWS, Azure, and Snowflake. Immuta integrates with Snowflake and Databricks for policy enforcement and monitoring. Founded in 2015, it serves finance, healthcare, and defense sectors with over 50 employees.

BTQ Technologies Corp is engaged in the development of computer-based technology related to post-quantum cryptography, particularly as it applies to blockchain and related technologies, and their protection from the emerging security risk of quantum computing. Its products include PQScale, Keelung, Kenting, and Qbyte. PQScale is a novel scaling technique for post-quantum cryptographic primitives. Keelung is a zero-knowledge toolkit for fast, private, and secure applications. Kenting provides acceleration for NIST-compliant post-quantum cryptography, post-quantum zk-SNARKs, and eco-friendly mining hardware, and Qbyte is a quantum risk calculator. Geographically, the company derives maximum revenue from Canada, and also has a presence in Taiwan, and Australia.

CommVault Systems Inc provides cyber resiliency solutions designed to help the enterprise protect, secure, and recover its data, applications, and identity systems in a world of increasing cyber threats and attacks. Its offerings provide cyber resilience, including data protection, cyber recovery, data security, and governance, aiming to enable customers to continue business. The company delivers its solutions through Commvault Cloud, a cloud native platform that unifies data security, cyber recovery and identity resilience across on-premises, hybrid, multi-cloud, and software-as-a-service environments. It sells its offerings through subscription-based arrangements, including SaaS and term-based subscriptions, and also offers perpetual licenses, customer support, and professional services.

Aikido Security is a Ghent-based cybersecurity platform that unifies code scanning, cloud security, and runtime protection. Its AI-driven system automatically detects and remediates vulnerabilities across applications, infrastructure, and deployments. Engineering teams at companies like bol.com and Showpad rely on Aikido for comprehensive coverage without workflow disruptions. The platform scans repositories, containers, and cloud environments such as AWS and Kubernetes, prioritizing fixes to eliminate security debt efficiently.

Aqua Security is a Tel Aviv-headquartered provider of cloud-native application security platforms protecting containerized and serverless workloads. The Aqua Platform scans images in CI/CD pipelines, enforces runtime policies on Kubernetes clusters, and monitors hybrid clouds from AWS, Azure, and Google Cloud. Serving over 400 enterprises including Deutsche Telekom and BNP Paribas, it blocks vulnerabilities with 99 percent accuracy across development to production. Recent integrations support OpenTelemetry for threat detection in microservices architectures.

Astronomer is a Cincinnati-headquartered data orchestration platform centered on Apache Airflow. The company enables deployment of scalable workflows for ETL pipelines, machine learning, and analytics. Serving enterprises like IBM and Deloitte, Astronomer supports multi-cloud environments with managed Airflow instances processing petabyte-scale data.

BigID is a New York-headquartered data intelligence platform that employs machine learning for data discovery, classification, and privacy management. The software supports compliance with GDPR and CCPA across petabyte-scale environments, safeguarding customer and employee data in cloud, on-premises, and hybrid infrastructures for enterprises worldwide.

BlueVoyant is a New York-based cyber defense company founded in 2017 that combines cybersecurity technology with managed services to protect organizations against internal and external threats. Its platform provides managed detection and response (MDR), third-party and supply-chain cyber risk management, digital risk protection, and incident response and threat intelligence services, delivered by teams based in the US, Israel, Europe, and Latin America. The company serves both government agencies, including the Defense Industrial Base, and private enterprises seeking to strengthen their cyber risk posture.

Bugcrowd is a San Francisco-headquartered crowdsourced cybersecurity platform that matches organizations with ethical hackers to identify vulnerabilities via AI-driven matchmaking. Established in 2012, it maintains the largest database of validated vulnerabilities and hacker profiles, supporting continuous testing programs for clients like Atlassian, Indeed, and Mastercard. Bugcrowd operates globally with penetration testing, bug bounties, and attack surface management across web, mobile, and API assets.

CHEQ is a New York-based cybersecurity company protecting brands from bots, AI agents, and online threats using a triple-layer intelligence engine analyzing over six trillion signals daily from one million domains. Trusted by more than 15,000 enterprises including Fortune 50 firms, CHEQ integrates with marketing and security tools, achieving a false positive rate below 0.009 percent. The Tel Aviv-headquartered firm operates globally to secure customer journeys.

Contrast Security is a code security platform embedding analysis and attack prevention into applications. Its deep instrumentation provides runtime protection without scans or extra infrastructure. The Bethesda-headquartered company serves enterprises securing software portfolios against known and unknown threats.

Defense Unicorns is an Austin, Texas-headquartered software firm building open-source platforms for US national security. Its UMA (Unicorn Management Architecture) enables continuous integration/deployment of mission apps in air-gapped DoD networks, supporting Kubernetes on classified clouds like IL5. Adopted by US Air Force for ABMS and JADC2 programs, the technology deploys AI models at tactical edges. Founded in 2020 by ex-Palantir engineers, Defense Unicorns collaborates with AWS GovCloud and holds CMMC Level 3 certification.

Expel is a Herndon, Virginia-based managed detection and response provider serving enterprises with 24/7 threat monitoring across cloud, endpoints, and networks. Its platform detects incidents like ransomware, phishing, and supply chain attacks using AI alongside human analysts. Clients access the Workbench interface for live investigations into business email compromise and application compromises. Expel integrates with tools like Splunk and CrowdStrike, supporting over 100 customers including financial firms. Founded in 2015, it operates SOCs in the U.S. and Europe with ISO 27001 certification.

Halcyon is a cybersecurity company headquartered in Tel Aviv, Israel, developing AI-powered ransomware protection for enterprises. Its platform uses pre-execution detection, behavioral analysis, and decoy files across Windows, Mac, and Linux endpoints. Launched in 2021, Halcyon protects financial firms and healthcare providers in Europe and North America.

JupiterOne is a Morrisville, North Carolina-headquartered cyber asset attack surface management platform. It continuously discovers, inventories, and models relationships across cloud, SaaS, on-prem, and code assets for security teams. Originating as a LifeOmic subsidiary in 2019, it supports compliance with NIST and SOC 2 via GraphQL APIs.

Kiteworks is a Palo Alto, California-headquartered cybersecurity firm offering a secure content communication platform. The solution enables compliant file sharing, email encryption, and SFTP transfers for regulated industries like healthcare and finance, integrating with Microsoft 365 and supporting zero-trust architecture.

Nsfocus Technologies Group Co Ltd is a China based internet and application security company. It offers enterprise-level network security solutions and services. The products offered by the company are Anti-DDoS system, Cloud DDoS protection service, Threat intelligence subscription service, Web application firewall, and Web vulnerability scanning system. In addition, it also offers solutions such as cloud DDoS defenses, on-premises DDoS defenses, Hybrid DDoS defenses, global threat intelligence, among others. The company has a business presence in China and other international countries.

Founded in 2000, Rapid7 is a cybersecurity company that began providing vulnerability management solutions. It has, however, expanded its portfolio to provide extended detection and response; security information and event management; cloud security, threat intelligence, and application security; and security orchestration, automation, and response. The Boston-based company went public in 2015.