Armadin, the security company founded by Mandiant’s Kevin Mandia, has raised $255.5m in a Series B that values it at more than $2.5bn, seven months after it came out of stealth. Andreessen Horowitz and Accel co-led the round, which takes total funding to $445m.
Bain Capital Ventures and Redpoint joined as new investors. Existing backers 8VC, Ballistic Ventures, Google Ventures, In-Q-Tel, Kleiner Perkins and Menlo Ventures also took part.
What the product does
Armadin runs autonomous agents that look for weaknesses in a customer’s systems and chain them together into validated attack paths — not a list of findings but a demonstrated route from the outside to something that matters. Its customers are Fortune 500 companies and government agencies.
The reasoning behind it is a claim about speed. “AI lets an attacker find and chain weaknesses faster than any human team can respond,” Mandia said. “The only way to build a defense that keeps pace is to train it against the best offense available, every day.”
Why this round, this week
The argument is being made in a market that has spent the past month watching it play out. A Dutch security nonprofit was broken into by an AI agent. An attacker deleted an Azure tenant’s storage in seven minutes using credentials left in a public GitHub issue. Anthropic published research showing that stripping the safeguards off an open Chinese model cost $4,400. OpenAI’s own agents reached 55 organisations’ websites.
Google launched Gemini 4 Argon this week to cyber defenders first, with the cyber guardrails off, on the same reasoning: the capability is already available to attackers, so withholding it from defenders is not a neutral choice. Armadin is the venture-funded version of that position.
The part that is unproven
An offensive platform aimed at the largest enterprises is also a capability concentration. In-Q-Tel, the CIA’s investment arm, is on the cap table, which tells you who else finds the capability interesting. Nothing in the announcement says what happens if the platform itself is compromised, which is the question every customer’s risk committee will ask.
What to watch
Whether Armadin publishes results — attack paths found, time to discovery, what customers fixed. A $2.5bn valuation seven months out of stealth is priced on the thesis, not on the evidence.
