Participated · Series A · Aug 2025

Vendict provides an AI-native platform that automates governance, risk, and compliance tasks for enterprises. Built on language models, knowledge graphs, and continuous feedback loops, the system generates context-aware, source-backed answers to security questionnaires, performs gap analyses across frameworks such as SOC 2, ISO 27001, GDPR, DORA, and ESG, and evaluates third-party risk. The product promises 100 % traceability, cuts questionnaire response times from six days to six minutes, and reduces manual control testing by 90 %. More than 100 customers have adopted the service in less than three years, many switching from legacy or manual solutions. By eliminating repetitive documentation work, Vendict positions GRC teams as strategic contributors rather than administrative overhead. The New-York-based company has raised $20 million to date, including the newly announced Series A, to further develop its AI-native, hallucination-free compliance platform. Investors view its explainable AI architecture and emerging two-sided network effects as key advantages in a GRC market expected to add $44.22 billion in value between 2025 and 2029.

Participated · Series A · Oct 2024

Noma Security offers an end-to-end platform for AI and agent security that continuously discovers AI assets, manages AI security posture, prioritizes risk, and provides red teaming and runtime protection. The company serves Fortune 500 and AI-forward organizations across financial services, life sciences, retail, and big tech, scanning thousands of model artifacts and AI environments. Noma reported ARR growth of more than 1,300% over the last year and finished the year with dozens of customers in production. Customers include deployments that process hundreds of millions of AI prompts monthly while identifying and prioritizing millions of AI and agent risks. Noma positions its product to help CISOs govern and secure agentic AI ahead of broad enterprise adoption. The company plans to use new funding to expand go-to-market across North America and EMEA and to grow product, R&D, and research teams in Tel Aviv. Noma Security is an enterprise AI security and governance platform headquartered in Tel Aviv, Israel. It offers AI asset discovery and governance, proactive security risk management, real-time runtime protection, and compliance alignment with evolving regulations such as the EU AI Act. Its capabilities span discovery, risk management, runtime protection and compliance to help enterprises secure AI at scale. The company is widely adopted by Fortune 500 customers. Noma says it will use the recent strategic investment to support continued growth and product development. The articles do not disclose revenue or user metrics. Noma develops a platform that scans AI development environments to identify vulnerable data pipelines, misconfigurations, sensitive data in training datasets, and threats such as prompt injection attacks. The product consolidates AI application security functions into a single dashboard that can be deployed in cloud-based or self-hosted environments. The company emphasizes governance controls to help organizations understand AI application footprints and mitigate risk so they can expand AI usage. Noma was founded in 2023 and already has paying customers, including Fortune 500 clients in B2B software, financial services, and retail. The startup has a 20-person team and plans to double headcount over the coming year to accelerate development and go-to-market efforts. Management said it had cash on hand but accepted new funding to speed growth.

Participated · Series A · Oct 2024

Noma offers a comprehensive security platform that protects enterprise data from the very start through training and deployment of AI models. Its three product domains cover data & AI supply chain security, AI security posture management (AI-SPM), and AI threat detection & response. The platform is delivered as an annual SaaS subscription with both an all-inclusive enterprise license and modular product options; 95% of customers have chosen the integrated approach. Noma’s solution installs in minutes via API, supports cloud, SaaS, and self-hosted environments, and is already used by several Fortune 500 companies. Co-founders Niv Braun and Alon Tron bring security and data-science expertise from service in Israel’s Unit 8200. With $32 million in fresh Series A funding, Noma is positioning itself to expand its presence in the emerging field of data and AI lifecycle security and is contributing to standards work such as NIST SP 800-218A through the OWASP AI Exchange.

Participated · Seed · Apr 2024

Miggo offers the first Application Detection and Response (ADR) platform that gives security teams direct, in-application visibility into application behavior at runtime. The platform analyzes interactions and data flows within distributed applications, discovers and maps application architecture, and establishes behavioral baselines to monitor deviations from intended design or code execution flows. Using live in-application context, Miggo assesses whether deviations indicate exploitability, active exploitation, or backdoors, and initiates targeted mitigations to contain breaches and recommend remediation. The company positions ADR as a response to high-profile 2023 application breaches (MOVEit, Microsoft SharePoint, Ivanti Gateway, GoAnywhere) and broader shifts to distributed application architectures that evade traditional sensors like EDR, WAF, and CNAPP. Miggo is led by CEO and co-founder Daniel Shechter and CTO and co-founder Itai Goldman and emphasizes reducing mean time to detect and respond for application-layer attacks. The company announced a $7.5 million seed funding round led by YL Ventures alongside the ADR platform launch.

Participated · Seed · Apr 2024

Miggo Security is a NYC- and Tel Aviv, Israel-based provider of a runtime, real-time Application Detection & Response (ADR) threat protection platform. Led by co-founder and CEO Daniel Shechter, its plug-and-play, always-on system proactively observes application behavior and blocks threats in real time without waiting for patch cycles or developer intervention. The platform centers on proprietary DeepTracing™ technology that maps application behavior and logic in real time, simulates potential attack paths and deploys targeted defenses. Miggo provides in-application context and runtime immunity distinct from tools like EDR, WAF or CNAPP. The company secures mission-critical applications across regulated industries such as financial services, e-commerce and SaaS and raised $17m to expand operations and development efforts. Miggo Security develops an Application Detection and Response (ADR) platform that looks inside running applications to map interactions between distributed services, draw behavioral baselines, detect malicious activity, and enable containment. The product provides continuous in-application context and a live map of application components and their interactions, which customers have used to discover unexpected or still-active services. Miggo positions ADR as a proactive evolution of solutions like EDR and DDR, aimed at detecting attacks that exploit application behavior and chains of trust. The company reports early commercial traction, saying it has secured quite a few customers following its seed raise. Miggo's medium-term plan is to drive adoption of ADR by enterprise AppSec teams and to become a standard in the AppSec field. The company raised a $7.5M seed round to support product development, go-to-market and broader adoption of ADR.