As AI agents become active participants in corporate workflows, security teams are facing a new kind of challenge: protecting systems that are no longer used only by people. Cymphony, a two-year-old startup focused on this shift, has raised $30 million to help enterprises manage access, identity, and data exposure across human and non-human users.
The round includes a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund, and values the New York- and Tel Aviv-based company at more than $100 million. Sequoia had already invested earlier, signaling continued confidence in the startup's direction.
Cymphony's platform gives security teams a unified view of employees, AI agents, and other digital identities, along with the systems and sensitive files they can reach. At the center of the product is a "workforce graph" that combines identity, data, and activity signals to show how access moves across an organization.
The company says its tools have already uncovered large-scale exposure inside enterprises, including one case involving tens of thousands of files accessible to AI tools. It also uses AI agents to help investigate incidents, prioritize risks, and automate fixes such as adjusting permissions. Customers can also choose a managed service for more complex situations.
Sequoia's renewed investment reflects both the founders' background and the traction Cymphony has built. The startup says it has signed enterprise customers, reached seven-figure annual recurring revenue in its first year of sales, and counts organizations such as KKR, Syngenta, Cass Information Systems, and Athennian among its users.
With major security firms also expanding into AI-related protection, Cymphony is positioning itself around a simple idea: identity and data security now need to be handled together. As companies deploy more autonomous systems, that approach could help define the next phase of enterprise cybersecurity.
