Mave raises $34M in total funding, including $28M Series A
Mave emerged from stealth with $34 million in disclosed funding for security agents that work across existing tools rather than a new data store.
By Wei-Lin Zhao · AI Correspondent
· 3 min read
Mave raises $34M in total disclosed funding as it emerges from stealth with a product designed to investigate and respond to security incidents across a customer’s existing security and IT systems. The total includes a new $28 million Series A led by Red Dot Capital Partners, plus a previously raised $6 million seed round led by Dell Technologies Capital and Emerge Ventures. Lumir Growth Partners participated in the Series A.
The Israeli startup said the capital will fund AI research, enterprise product development and expansion to more security teams. Mave did not disclose a valuation, revenue or the amount of the $34 million that remains available after the earlier seed financing.
How does Mave work with existing security tools?
Mave’s pitch is that security teams should not have to move all of their telemetry into another centralized database before they can use its system. Its agents query connected security and IT products in their native interfaces, pull in live information as an investigation develops and combine the results into an account of an incident.
The company positions that architecture against a security-information-and-event-management, or SIEM, centered workflow. A SIEM can aggregate security data, but Mave argues that relevant context, such as current configurations, identity status and asset ownership, may remain in other systems. Its software is intended to support investigations, threat hunting, detection engineering and response from the same operating layer.
In practical terms, that can reduce the data-migration work of adding another security platform while allowing the system to check information where it resides. It also creates a dependency on the connected environment: missing telemetry, limited permissions or unavailable APIs can constrain what an automated system can establish. The announcement provides no independent benchmarks for Mave’s performance across customer environments.
For context on where this fits in the broader organization, enterprise security programs combine operational monitoring with identity, endpoint, network and data controls. Mave is targeting the work of joining evidence from those separate systems during a potential incident.
What controls does Mave say customers keep?
Mave says it records the queries, evidence, reasoning and actions behind its findings. Customers set the rules governing execution, including which actions can run automatically and which need human approval. The company also says integrations begin with read-only access and that destructive actions require approval by default.
Those controls are central to the proposition because the platform is meant to move beyond summarizing alerts toward taking authorized remediation steps. Mave says it can identify false positives, investigate alerts within minutes and carry out approved responses. Those are company claims, not independently validated results.
Mave says it is already operating in more than 200 security operations centers and is used by Fortune 200 companies and global managed security service providers. It also says the platform has helped contain live incidents by isolating systems, disabling compromised identities and blocking malicious activity. The company did not identify customers or provide outside evidence supporting those deployment and efficacy claims.
The financing gives Mave capital to pursue a familiar security-operations problem: enterprises have accumulated specialized tools, while analysts still have to reconcile their outputs manually. Its test is whether its agents can produce reliable investigations from varied toolsets while remaining within the access and approval boundaries customers set.
This story draws on original reporting from SiliconANGLE.
