Brava 獲 $15M 融資，助安全團隊找出系統漏掉的威脅

Artificial intelligence is changing how enterprises approach cybersecurity, particularly within security operations centers. The promise is straightforward. AI agents can analyze alerts, investigate suspicious activity, and help security teams respond with greater efficiency.

But the technology depends on something that people often take for granted: reliable security telemetry.

An organization’s security infrastructure may fail to collect the relevant logs, or its detection rules may overlook an attack. Then there may be no alert for an AI agent to investigate. The problem is not necessarily the intelligence of the agent. It is the absence of evidence.

Brava Security wants to address that underlying weakness. The company has emerged from stealth with $15 million in funding led by F2 Venture Capital and Pitango VC. Its platform uses multi-agent AI technology to generate the exact telemetry an attack would produce. It does so without executing the attack itself. Axios first reported the news.

Brava designed the system to show enterprises which attacks their defenses would miss. It helps remediate the underlying detection gaps. It works with the security infrastructure they already operate.

Moving Beyond Assumptions About Detection

Security teams depend on multiple systems to collect and interpret activity across their environments. Enterprises are adopting additional cloud services, AI applications, and AI-assisted development tools. As they do, the volume and complexity of security telemetry continue to increase.

Yet the presence of security tools does not guarantee that the right information reaches them.

Systems may not collect critical logs. Telemetry pipelines may break without anyone noticing. Detection rules may fail to identify the activity teams created them to catch. These issues can leave security teams with an incomplete picture of what is happening inside their environments.

Brava co-founder and CEO Idan Basre says this creates a fundamental limitation for organizations seeking to automate security operations.

“Everyone is racing to put AI in charge of the SOC. You can’t automate a decision based on evidence no one ever proved,” said Basre. “We’re solving the problem that comes before AI can make the right decision: making sure the security infrastructure actually sees the threats it’s supposed to detect.”

Basre encountered the problem firsthand while leading product management for Microsoft Defender.

The distinction is important to Brava’s approach. The company is not positioning its technology simply as another tool for processing security alerts. It focuses on determining whether the underlying infrastructure would generate the evidence needed to identify an attack.

Simulating the Evidence, Not Executing the Attack

Brava’s technology models attacker behavior and identifies how different attack techniques would manifest across a customer’s environment.

Its Security Operations platform understands what an attack should look like across available log sources. It then evaluates whether existing defenses would recognize that activity and identifies blind spots. It also rewrites SIEM detections and data feeds that fail to capture it.

The platform also investigates alongside security teams. It brings together evidence that can support security decisions.

This approach is based on a specific challenge in enterprise security. Detection engineering requires more than creating rules. Organizations need to know whether those rules actually work in the environments where teams deploy them.

“The hard part of security was never writing detections. It’s knowing exactly what an attack will look like in a specific environment, across all of its log sources, before it ever happens. That’s the problem our models were built to solve,” said Itay Gabbay, co-founder and CTO of Brava Security.

Brava generates telemetry without executing attacks. In doing so, it aims to provide organizations with a way to assess detection coverage. They can do this while maintaining their existing security infrastructure.

Customers and Deployment Across Existing Environments

The company is already working with Fortune 100 organizations across retail, energy, and hospitality. Its named customers include Cushman & Wakefield and WELL Health. WELL Health is one of Canada’s largest healthcare companies.

Brava is also emphasizing the time required to begin using its platform. According to the company, its first insights are available within 10 to 15 minutes of onboarding.

That onboarding timeline could make it easier for security teams to start evaluating their detection capabilities. They would not have to commit to an extended deployment process.

The platform integrates with Splunk, Google SecOps, CrowdStrike, and more than 70 additional sources and destinations. The company says this allows it to work across the security environments enterprises already depend on. It does not require an infrastructure replacement.

At Cushman & Wakefield, CISO Erik Hart described the platform’s role in the organization’s broader SecOps strategy.

“Our SecOps journey is about applying AI where it makes our people more effective, and Brava sits at the center of that. It investigates alongside our team, bringing evidence together so decisions rest on facts rather than on searching,” said Hart.

A Founding Team With Security and AI Experience

Basre and Gabbay founded Brava. Their backgrounds combine military research, enterprise security, and AI development.

Basre is a Talpiot alumnus who spent ten years in Unit 8200 as a threat researcher. He then moved into product management at Microsoft Defender. His experience there exposed the limitations that restricted access to security data could create when teams were investigating incidents.

Gabbay spent seven years in the IDF building core AI systems. This included work on a joint DARPA-Israeli research program.

The company now has approximately 20 employees, bringing together AI researchers and security researchers. Research and development are based in Israel. Its commercial team is expanding across the United States.

Expanding the Business With $15 Million

Pitango and F2 Venture Capital led Brava’s $15 million seed round. Angel investors also participated, including executives from Anthropic, Microsoft, and Check Point.

The company plans to use the capital to accelerate product development. It plans to expand commercially across North America. It is also preparing to pursue opportunities in financial services and government.

More enterprises are looking to AI agents to take on security operations responsibilities. Brava is focusing on a prerequisite for that transition: proving that the systems feeding those agents can actually see the threats they are expected to investigate.