Cymphony has emerged with $30 million in funding to help enterprises track the access held by employees, AI agents and other non-human identities. The financing includes a $25 million Series A co-led by Sequoia Capital and SMBC Fin Atlas Beyond Fund, valuing the two-year-old company above $100 million after the investment.
The round follows a previously undisclosed seed investment from Sequoia. Cymphony’s founders—Shy Dekel, Idan Berkovits and Edi Gotlieb—came through the Israeli military’s Talpiot technology and leadership program. Sequoia initially backed the team before it had selected a product problem, making the new round a test of what the company has built since.
A Workforce Graph Maps Human and Agent Access
Cymphony argues that enterprise security systems were designed around people with relatively stable roles. AI agents can move across several systems, handle large amounts of data, change their behavior at runtime and sometimes create other agents. Those traits make it harder to determine which entity can reach a sensitive resource.
The company’s platform combines identity, data and activity signals in what it calls a workforce graph. Security teams receive a unified view of people, agents and other machine identities, along with the systems and files they can access. Cymphony also uses its own agents to investigate incidents, prioritize fixes and automate some permission changes. Customers can choose a managed service that brings human specialists into complex cases.
At one US public company, Cymphony says it found about 85,000 files available to AI tools and agents, closed the exposure and verified that those systems had not accessed the files. In another case, an external collaborator allegedly installed an unauthorized Claude instance that used existing permissions to scan thousands of sensitive files. These examples are company accounts reported by TechCrunch, not independently audited incident findings.
Early Customers Give Sequoia a Second Signal
Cymphony says it signed a double-digit number of enterprise customers and reached seven figures in annual recurring revenue during its first year of sales. Named customers include KKR, Syngenta, Cass Information Systems and Athennian. Sequoia has also used the product internally since an early stage.
Those claims gave the investor more evidence than the founder-focused seed bet. Sequoia partner Bogomil Balkansky cited customer quality, product range and expanding use among existing customers as reasons to invest again. The article does not disclose exact revenue, contract sizes, retention or the proportion of deployments using the managed service.
Cymphony has about 30 employees in Tel Aviv and New York. Most customers are in North America, with early demand appearing in Europe, the Middle East and Africa. The Series A is therefore funding both product development and a geographic expansion into large enterprises.
Agent Security May Become a Feature or a Market
Competition is already crowded. Microsoft, Okta, CyberArk, Wiz and Varonis are extending identity, data and AI security products. Dekel says Cymphony is replacing some existing tools, while Balkansky currently sees it mostly as an additional layer. Both positions can be true across different customers, but they imply different long-term businesses.
The central question is whether agent governance becomes a standalone budget or a capability absorbed into established platforms. Cymphony’s attempt to unite identity and data access gives it a distinct framing, yet enterprises may prefer fewer vendors if incumbents can add similar graphs and controls.
Recent agent incidents make the problem concrete, but fear alone will not sustain a security category. Cymphony must show that its map remains accurate as agents change, that automated remediation does not remove legitimate access and that customers can measure reduced exposure. The financing validates investor interest; durable demand will depend on proving that non-human workers require controls existing security stacks cannot provide.
