Beacon Security Raises $13M for Agentic Security Platform

Beacon Security, a New York-based cybersecurity startup founded by Israeli Defense Forces veterans, closed a $13 million seed round led by Notable Capital on Tuesday, with participation from AlphaDrive Ventures, Holly Ventures, Jefferies Family Office, and SVCI. The company is building an agentic security data platform designed to give enterprise defenders real-time threat visibility, compliance mapping, and AI-driven investigation workflows.

What Beacon Security’s Platform Does

Beacon’s platform ingests telemetry from multiple sources, normalizes and enriches it, then surfaces that context for both AI agents and human analysts. The system continuously maps data against known threats and compliance requirements to identify weaknesses before they can be exploited — addressing a gap that traditional security information and event management tools have struggled to close.

According to SecurityWeek’s coverage, the platform includes a library of specialized cybersecurity agents connected to what the company calls a “context layer.” Those agents handle detection engineering, incident investigations, and shadow AI analysis — tasks that typically require significant analyst time. Defenders can run pre-built agentic workflows or construct new ones tailored to their environment.

Gal Tal-Hochberg, Beacon’s CEO, said in the announcement: “The acceleration of AI agents in the enterprise is creating a distinct need for a legible context layer for cyber defenders, which is fueling a fundamentally new security architecture. We built Beacon to solve these challenges by providing the trusted data layer that allows organizations to deploy security agents compliantly and effectively.”

Beacon was founded in 2024 by Tal-Hochberg alongside CPO Or Mattatia and CTO Iddo Israely. The company says it already counts Fortune 500 companies among its enterprise customers, though it has not disclosed specific client names.

The Broader Agentic AI Security Context

Beacon’s launch arrives as enterprise adoption of AI agents is accelerating — but also revealing serious gaps between ambition and execution. VentureBeat Pulse Research surveying 101 enterprises found that 71% of organizations report that a quarter or fewer of their deployed “agents” are true multi-step orchestrated workflows — the rest are single-prompt chatbot wrappers relabeled as agents.

That deployment gap creates a direct security problem. When organizations deploy AI systems without reliable orchestration, auditability, and context management, the attack surface expands in ways that conventional security tooling was not built to monitor. Beacon’s pitch is that its context layer provides the missing connective tissue — a trusted data foundation that makes agentic security workflows both effective and auditable.

The same VentureBeat research found that vendor lock-in is the top concern for 35% of enterprises managing AI infrastructure, which partly explains why security buyers are looking at purpose-built platforms rather than bundled offerings from model providers.

Fortinet, Ivanti, and ServiceNow Patch 15 Vulnerabilities

Separately on Tuesday, Fortinet, Ivanti, and ServiceNow released patches covering 15 vulnerabilities across their respective product lines — a reminder that the attack surface enterprises must defend continues to expand alongside their AI investments.

The most urgent fix came from ServiceNow, which patched a critical unauthenticated remote code execution flaw in its AI platform, tracked as CVE-2026-6875 with a CVSS score of 9.5. According to SecurityWeek, ServiceNow deployed the fix to hosted instances and provided updates to self-hosted customers and partners. The company said it is not aware of the vulnerability being exploited in the wild.

Ivanti fixed two flaws in Xtraction, its data aggregation and visualization tool:

• CVE-2026-14902 — a medium-severity open redirect that could send users to arbitrary external URLs
• CVE-2026-14903 — a high-severity path traversal allowing attackers to read files outside the web root

Fortinet published 11 advisories covering 12 vulnerabilities across FortiOS, FortiProxy, FortiSASE, FortiSIEM, FortiClient EMS, FortiAuthenticator, FortiPAM, FortiSwitch Manager, and FortiSandbox. The highest-severity bugs affect FortiAuthenticator and FortiSandbox, where remote unauthenticated attackers could retrieve sensitive information or access the VNC server of virtual machines running scans. Fortinet also reported no known in-the-wild exploitation.

Patch Priority Summary

Vendor	CVE(s)	Severity	Product
ServiceNow	CVE-2026-6875	Critical (9.5)	AI Platform
Ivanti	CVE-2026-14903	High	Xtraction
Ivanti	CVE-2026-14902	Medium	Xtraction
Fortinet	Multiple	High–Low	FortiOS, FortiSandbox, others

Funding Activity in Cybersecurity

Beacon’s $13 million seed is part of a broader wave of early-stage security investment. Recent rounds in the sector include Risk Ledger’s $32 million Series B, QIZ Security’s $17 million raise for a cryptographic governance platform, and 8Layers’ $2.9 million round for identity security — all reported by SecurityWeek in the same period.

The pattern reflects sustained investor appetite for security tooling that addresses AI-specific risks, including shadow AI monitoring, agentic workflow governance, and compliance automation — all areas Beacon targets directly.

What This Means

Beacon’s seed round is notable less for its size than for its timing and thesis. The company is betting that the proliferation of AI agents inside enterprises creates a fundamentally new data problem for security teams — one that existing SIEM and SOAR platforms were not designed to handle. That bet appears well-timed: the VentureBeat Pulse data showing 71% of enterprise “agents” are still chatbot wrappers suggests the real orchestration wave is still incoming, and the security tooling to govern it is not yet mature.

The Tuesday patch releases from Fortinet, Ivanti, and ServiceNow — including a 9.5-CVSS unauthenticated RCE in an AI platform — underscore that AI infrastructure itself is becoming a high-value target. Security teams that can instrument and monitor agentic workflows before attackers learn to exploit them will have a meaningful defensive advantage. Beacon is positioning itself as that instrumentation layer, though it will face competition from established SIEM vendors and from the model-provider platforms that enterprises are already consolidating onto.

FAQ

What does Beacon Security’s platform actually do?

Beacon ingests and normalizes telemetry from multiple security data sources, then makes that enriched context available to both AI agents and human analysts. It maps data continuously against threats and compliance requirements, and provides pre-built agentic workflows for detection engineering, investigations, and shadow AI monitoring.

How severe is the ServiceNow CVE-2026-6875 vulnerability?

CVE-2026-6875 is a critical remote code execution flaw in the ServiceNow AI platform with a CVSS score of 9.5, exploitable without authentication. ServiceNow has already deployed a patch to hosted instances and released updates for self-hosted customers, and says it has no evidence of active exploitation.

Who led Beacon Security’s $13 million seed round?

Notable Capital led the round, with AlphaDrive Ventures, Holly Ventures, Jefferies Family Office, SVCI, and dozens of angel investors also participating. Beacon was founded in 2024 and is headquartered in New York.