Оригинальный текст на языке EN взят с сайта-источника. Источник ↗

Artificial Intelligence

Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.

By

SecurityWeek News

| November 1, 2026 (7:15 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding.

Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.

The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.

Northstar aims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.

For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.

Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.

Advertisement. Scroll to continue reading.

Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.

“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.

Deeba co-founded Normalyze, which Proofpoint later acquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.

The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.

Related: Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

Related: Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

Related: Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Written BySecurityWeek News

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from SecurityWeek News

  • Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
  • In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
  • Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
  • In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
  • Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand
  • IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
  • In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
  • In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

Latest News

  • Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
  • PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  • In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
  • Passkeys Are Better Than Passwords. But They Are Not Enough.
  • Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
  • Fresh WordPress Vulnerability in Attackers’ Crosshairs
  • Drupal Commerce Core Vulnerability Exploited Against Online Stores
  • $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

Trending

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

Fresh WordPress Vulnerability in Attackers’ Crosshairs

In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: Agentic Pentesting for a Stronger CTEM Program

November 4, 2026

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

General Paul M. Nakasone has joined Armadin’s Board of Directors.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Passkeys Are Better Than Passwords. But They Are Not Enough.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)