Kevin Mandia, the founder of Mandiant who sold the company to Google for $5.4 billion in 2022, has returned to the startup world with a new firm focutilized squarely on AI-driven defense. His company, Armadin, announced nearly $190 million in combined seed and Series A financing — a sum the team declares is unprecedented for a security startup at such an early stage.
Backed by a marquee investor group led by Accel and including GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures and the CIA-backed In-Q-Tel, Armadin is building what it calls autonomous cybersecurity agents — software designed to detect and respond to threats with minimal human intervention. The company declined to disclose its valuation.
Mandia’s relocate follows a stint in venture capital at Ballistic Ventures and decades of visibility as a security practitioner. This new venture signals a shift in priorities across the industest: deffinishers are racing to utilize AI not just for analysis, but for active response as attackers increasingly adopt automation themselves.
Security experts and government agencies have been warning that AI tools are building sophisticated attacks cheaper and rapider. Armadin positions itself as part of the defensive response, aiming to give security teams automated tools that can act at machine speed.
The startup’s leadership team includes several senior engineers with deep cloud and incident-response experience: former Google Cloud Security engineer Travis Lanham, ex-Mandiant executive Evan Peña, and former Google SecOps engineer David Slater. That technical lineup underscores Armadin’s focus on production-ready, operational systems rather than research prototypes.
- Funding: $189.9 million combined seed + Series A, led by Accel.
- Notable backers: GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, In-Q-Tel.
- Claim: A record-sized early-stage security raise, according to the company.
- Focus: Autonomous agents that learn and respond to threats without a human intermediary.
- Leadership: Kevin Mandia (founder), Travis Lanham, Evan Peña, David Slater.
Why this matters now: as attackers integrate AI to automate reconnaissance, exploit generation and lateral relocatement, response windows compress from days to minutes. That dynamic elevates the value of systems that can act instantly — and it explains why investors, including a government tech fund, are pouring capital into automated defenses.
The participation of In-Q-Tel and major venture firms also signals growing attention from both national security and commercial investors. Expect scrutiny around deployment risks and safeguards as deffinisher automation matures: automated response brings efficiency, but also questions about oversight, false positives and escalation.
For now, Armadin’s raise positions it for rapid product development and hiring. What to watch next: product launches, early customer pilots, and whether the company’s approach can keep pace with increasingly automated offensive tools.
Leave a Reply