Northstar Security Raises $7M to Build AI-Native Cybersecurity Graph

Northstar Security has raised $7 million in seed funding to build what it calls a Security Context Graph — a real-time map that connects fragmented enterprise security data so AI agents can find risks and fix them autonomously. Wing Venture Capital led the round. MVP, Outliers and a group of cybersecurity investors also participated.

The company came out of stealth with the announcement. It is still early in commercialization, with a handful of enterprise design customers and growing interest from mid-market and large enterprises. Co-founder and CEO Amer Deeba says the next financing round is planned for 2027, after the company builds a scalable enterprise business.

Why two security veterans started over

Deeba spent his career building cybersecurity companies. He started at Adobe in the late 1990s, then joined Qualys, where he helped expand its international presence and take the company public in 2012. He later helped build Normalyze, a cloud data security company acquired by Proofpoint.

Along the way, one problem never changed. "Organizations continue to struggle with fragmented security data and the inability to connect the dots across their environments," Deeba said.

He co-founded Northstar with Ed Rowe, a colleague from his Adobe days nearly three decades ago. The founding team also includes engineers Alexander Macdonald and Chris Brichford.

Two observations shaped the company. First, enterprises spend millions on security tools but cannot answer basic questions about their posture, because data sits scattered across dozens of disconnected systems. Second, Deeba believes software is shifting from "Software as a Service, where humans operate applications, to what we call Software as an Agent, where intelligent agents perform work and deliver outcomes autonomously."

His conclusion: agents cannot make reliable decisions without accurate, real-time context. That context problem became Northstar's product.

What does the platform actually do?

The Security Context Graph unifies security and business data — cloud security, endpoint protection, identity and access management, vulnerability management, IT asset databases and help desk platforms — into one connected view.

The platform does not just aggregate data. It maps relationships between assets, identities, vulnerabilities, permissions and critical business systems. That mapping exposes what Deeba calls "hidden risks and toxic combinations that individual security tools often miss."

Northstar launches with four use cases:

• Identity Security — finding excessive privileges, orphaned accounts and risky access, then driving remediation
• Endpoint Security Hygiene — detecting unmanaged devices, missing security agents and protection gaps, then automating fixes
• Cloud Security Hygiene — identifying misconfigurations, excessive permissions and exposed workloads
• Vulnerability Management — prioritizing bugs based on actual exposure, asset criticality, identity relationships and business impact

The platform ships with an AI assistant and agentic workflows. Teams can ask complex questions, investigate risks and automate remediation. The graph is also accessible through MCP, the protocol that lets other AI agents and enterprise applications consume Northstar's intelligence.

Who is using it?

Cequence Security is an early customer. CISO Randy Barr and his team use Northstar to connect fragmented data and drive remediation through agentic workflows. "Northstar lets us do exactly that, using agentic workflows to continuously identify and remediate security issues," Barr said in the launch announcement.

Deeba called the deployment validation of the core vision: "The future of cybersecurity isn't about generating more findings. It's about giving security teams and AI agents the context to continuously identify and fix problems."

How big is the market?

Northstar's initial use cases sit across cyber asset management, identity security, endpoint security, cloud security posture management and vulnerability management. Together, Deeba said, those categories represent tens of billions of dollars in annual enterprise security spending.

The company's broader ambition is to become infrastructure. As security shifts from human-operated SaaS to autonomous agents, Deeba argues, organizations will need a shared intelligence layer connecting security and business environments. He wants the Security Context Graph to serve that role for third-party agents and enterprise-built workflows, not just Northstar's own applications.

What sets it apart from incumbents?

Traditional security visibility platforms were designed around asset inventory and human workflows. Northstar was built for a different consumer: AI agents.

"Agents require accurate, real-time context," Deeba said. "They need to understand not just which assets exist, but how identities, vulnerabilities, permissions, cloud resources, and business systems relate to one another."

The engineering challenge is real. Building and maintaining accurate relationships across large, constantly changing environments is hard, and Deeba says the company invested heavily in data architecture, integrations and contextual intelligence to make it work at scale. He may compete with existing platforms on visibility and hygiene use cases today, but the long-term bet is on becoming the context foundation for autonomous security operations.

What comes next?

The immediate plan is expansion: more enterprise customers, deeper use cases, and more capable autonomous agents that identify and remediate risks on their own. Deeba frames the shift bluntly — cybersecurity has been reactive for decades, generating alerts and relying on humans to respond, while AI now makes attacks faster and more sophisticated.

His goal is to invert that model: "moving toward proactive, continuous, and autonomous security that identifies and fixes risks before they can be exploited." Northstar's next test is whether a $7 million seed can carry that graph from design customers into the broader enterprise market before the 2027 raise.