Composable security operations startup Abstract Security said Thursday that it has raised $25 million in a new funding round to accelerate development of its AI-native, streaming-first SIEM platform, bringing total capital raised since its 2023 launch to roughly $50 million.
Cheyenne Ventures and AVP co-lead the round
The round was co-led by Cheyenne Ventures and AVP, with additional participation from Olive Hill Ventures and follow-on investment from existing backers Crosslink Capital and Rally Ventures. Abstract said its valuation tripled versus its prior Series A but did not disclose specific dollar figures. The company, founded by a team of veterans from ArcSight, Bank of America, Mandiant and Palo Alto Networks, said it grew annual recurring revenue 380 percent over the past year, reached 264 percent net revenue retention and tripled its customer base.
Composable SIEM as an alternative to monoliths
Abstract's platform is built around what it calls composable security operations, an architectural approach that separates the source of security telemetry from its destination. Data is ingested from cloud, SaaS, endpoint and identity sources, normalized into common schemas such as OCSF, ECS and CIM, and then routed to real-time, hot or warm storage tiers depending on how it will be used. Detections run in-stream while data is still moving, and an Astro AI copilot performs triage, investigation and response across the SecOps workflow.
Where the new capital goes
Abstract said the fresh funding will widen the platform's in-stream detection coverage, extend capabilities across the SecOps workflow and grow its go-to-market team. The raise lands during a busy stretch for cybersecurity funding in July 2026, following Glow's $180M Series A at a $1.2B valuation, Cathedral's $160M raise and AegisAI's $36M Series A. CEO Colby DeRodeff argued that AI belongs woven into every layer of security operations rather than bolted on top of legacy SIEM stacks.
Reporting based on coverage from SecurityWeek, PR Newswire and Pulse 2.0.