A Startup Gets $75 Million to Help Companies Deal With Too Many Security Warnings

A cybersecurity company called Exaforce has raised $75 million in funding to expand its AI-powered platform for handling security alerts. The Wall Street Journal reported the funding on April 17, 2025, with major investors Khosla Ventures and Mayfield Fund leading the round, alongside Thomvest Ventures. The company has not disclosed what it values itself at.

Exaforce, founded two years ago, focuses on a growing area within cybersecurity: using artificial intelligence to manage, organize, and respond to the flood of security alerts that modern companies face. At the core of its technology are what it calls "Exabots" — AI agents that can sort through alerts, figure out which ones matter, and respond automatically, without needing humans to get involved in every decision.

The Real Problem: Too Many False Alarms

Every company with digital systems gets bombarded with security alerts. A suspicious login attempt here, an unusual file access there, a network connection that looks odd — the list goes on. The problem is that most of these alerts are false alarms.

Think of it like a fire alarm that goes off whenever the kitchen gets slightly warm. If it went off constantly, no one would trust it. Companies face the same issue: their security tools generate thousands of alerts a day, most of them harmless. Human security teams have to manually review each one to figure out which are actual threats and which are harmless. This takes enormous time and mental energy.

Exaforce's AI agents are designed to do much of this review work automatically. They look at an alert, gather extra information from the company's network and systems, and decide whether it's a real threat or a false alarm. If it's real, they escalate it to humans. If it's not, they dismiss it.

Early Signs of Success

Exaforce has earned recognition from industry analysts and award bodies. It was named a Leader in the 2025 GigaOm Radar for security operations platforms, won the Intellyx 2025 Digital Innovator Award, and appeared in The Software Report's Top 50 Software Companies list. The company also participated in Amazon Web Services' program for AI startups, suggesting it fits well with how modern companies run their technology.

How the Technology Works

The Exaforce platform sits on top of a company's existing security tools rather than replacing them. It takes in all the alerts and data from those tools, uses AI to read and understand what each alert means, and figures out what's actually important by looking at patterns and threat information.

What makes this different from older security automation is flexibility. Older systems followed rigid, pre-written rules: if A happens, do B. Exaforce's AI agents can adapt their approach depending on what they learn. If one investigation path doesn't work, they can try another. They adjust to the specific environment they're working in, learning from past incidents.

This matters because security teams are stretched thin. There simply aren't enough human security experts to review every alert. By automating the routine work, the platform frees up skilled analysts to focus on harder problems — like hunting for threats that haven't been detected yet.

What This Funding Means

The $75 million round is substantial for a two-year-old startup. It signals that investors believe both in the technology itself and in the market opportunity. Khosla Ventures and Mayfield Fund bring serious credentials in AI and enterprise software. Thomvest Ventures brings experience scaling companies for rapid growth.

With this money, Exaforce plans to hire more sales people to reach new customers, improve its platform, and build partnerships with major security companies.

Why This Matters Now

The market for AI-powered security automation is growing fast. As companies move to cloud services and let employees work from anywhere, they generate more data and more potential threats. The tools that detect those threats are getting better, which sounds good — but it also means more alerts, which goes right back to the original problem.

I have watched this pattern unfold for decades in the enterprise security world. In the 2000s, companies were drowning in log files, so systems called SIEMs emerged to collect and organize all that data. In the 2010s, those systems generated so many alerts that companies added behavioral analytics to filter the noise. Now, with AI, we are at the next stage: letting machines do the thinking work that has historically belonged to humans. Each shift addressed the bottleneck that the previous solution created.

The broader context is that companies are trying to build security systems where tools work together seamlessly, rather than requiring people to patch everything together. Exaforce's approach — plugging into existing tools rather than replacing them — fits this trend. Organizations want their security technology to talk to itself, and to hand off work intelligently rather than forcing humans to be the go-between.

What Comes Next

Exaforce faces competition from older, established security companies that have also launched AI-powered products, as well as newer startups working in the same space. But the fact that experienced investors are betting serious money on the company suggests the technology is working and customers want it.

The bigger question, which is worth watching, concerns how much decision-making we want to hand over to AI in security. When an AI agent decides to automatically shut down a network connection it thinks is a threat, who is responsible if it gets that decision wrong. These are not simple questions, and they will shape how companies adopt and trust these tools as the technology matures.