· Venture Capital Tracker · investment-strategies · 3 min read
Cymphony’s $25M Series A: Sequoia Doubles Down on AI Agent Workforce Security
NYC–Tel Aviv Cymphony emerged Sep 9, 2026 with a $25M Series A co-led by Sequoia and SMBC Fin Atlas at >$100M post — securing humans and AI agents as one workforce graph.
VCT data record
Funding event facts
Source-backed financing and transaction details. Unknown terms remain undisclosed rather than estimated.
Cymphony raises $25M Series A
AI agent / workforce security; Sequoia and SMBC Fin Atlas Beyond co-led at >$100M post; ~$30M total funding with prior seed.
- Event type
- Funding Round
- Event date
- Sep 9, 2026
- Stage / label
- Series A
- Amount
- $25M
- Valuation
- >$100M post
- Confidence
- Company Disclosed
Company / target: Cymphony
Lead: Sequoia Capital , SMBC Fin Atlas Beyond Fund
Sources: techcrunch.com newswire.com
Cymphony announced a $25 million Series A on September 9, 2026, co-led by Sequoia Capital and SMBC Fin Atlas Beyond Fund, at more than $100 million post-money (TechCrunch). Combined with a previously undisclosed Sequoia seed, total funding is about $30 million. The company also framed the day as a launch with $30M (Newswire).
Spine: Security stacks were designed for human employees. Agents now touch more systems than any one person — Sequoia is buying the graph that treats that new workforce as first-class.
Key facts
| Field | Detail |
|---|---|
| Company | Cymphony (cymphony.io) |
| Round | $25M Series A (~$30M total capital) |
| Lead | Sequoia + SMBC Fin Atlas Beyond (co-lead) |
| Valuation | >$100M post (TechCrunch) |
| HQ | New York and Tel Aviv; ~30 employees |
| Traction (company → TC) | Double-digit enterprise customers; seven-figure ARR in first sales year |
| Named customers | KKR, Syngenta, Cass Information Systems, Athennian |
Who uses the product — and for what job
Users: enterprise security / identity / data-protection teams governing SaaS, files, and AI tools as agents proliferate.
Job: see every human and AI agent, what they can reach, and what they did → prioritize risk → investigate and remediate (including automated permission fixes), optionally with Cymphony’s managed service.
Company anecdotes (TechCrunch): ~85,000 files newly reachable by AI tools at one U.S. public company; an unsanctioned Claude instance scanning thousands of sensitive files via a collaborator’s access. Treat as case studies, not audited benchmarks.
Why now
- Agents bypass classic access assumptions while moving at machine speed.
- OpenAI-linked agent mishaps in 2026 (Hugging Face test compromise; wiki edit swarm) made “agent security as a category” board-visible.
- Gartner’s agentic-AI commentary (cited in Cymphony’s release) flags governance as a top adoption barrier — buyers will fund control planes even when models are cheap.
Why Sequoia — portfolio fit
Sequoia led the seed when Cymphony had no product — a classic Talpiot / Unit 8200 team bet (same talent pool as Wiz). Partner Bogomil Balkansky told TechCrunch the Series A required product, logos, and expansion motion; Sequoia also dogfoods the platform.
That pattern matches Sequoia’s cyber franchise: back Israeli technical founders early, re-up when enterprise proof appears, and argue the category is foundational (Balkansky: if enterprises are not spending on agent security, “I don’t know what else they’ll be spending money on”).
SMBC Fin Atlas Beyond Fund has no /fund/ page here.
Competitive map
| Approach | Tradeoff |
|---|---|
| Okta / CyberArk identity stacks | Strong for humans; weak agent runtime semantics |
| Wiz / CNAPP / DSPM / DLP point tools | Deep in one slice; fragmented for agent+data+identity |
| Microsoft / platform AI security | Bundle distribution; may lag specialist graphs |
| Cymphony workforce graph | Unified agent+human view; still proving category vs feature |
Balkansky’s near-term view: complementary to Okta today; potential to displace some DLP-style point solutions later.
What is not proven
- Exact ARR and customer count beyond “seven figures” / “double-digit.”
- Whether agent security stays a standalone budget vs. a checkbox on Wiz/Microsoft.
- How fast Europe/EMEA demand converts vs. North America concentration.
Practical takeaway
- Founders (AI security): Sell workforce graph (humans + agents + data), not another model firewall.
- Investors: Diligence expansion revenue inside KKR-class accounts and displacement vs. add-on spend.
- CISOs: Relevant if shadow AI and nonhuman identities already outrun IAM playbooks.
Sources
Follow Venture Capital Tracker in Google
Add VCT as a preferred source to make our venture-capital coverage easier to find in Google Search.
Editorial note: AI tools assisted with research, structure, or drafting. Venture Capital Tracker retains human editorial responsibility for factual accuracy, relevance, and source quality before publication.
