Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

Hi, what are you looking for?

The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.

By

Flipboard

Reddit

Whatsapp

Whatsapp

Email

Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding.Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.Northstaraims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.Northstaraims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.Northstaraims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Northstaraims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.Advertisement. Scroll to continue reading.Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Deeba co-founded Normalyze, which Proofpoint lateracquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Related:Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseRelated:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Related:Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup MaveRelated:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Related:Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

General Paul M. Nakasone has joined Armadin’s Board of Directors.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Flipboard

Reddit

Whatsapp

Whatsapp

Email

Got a confidential news tip? We want to hear from you.

Reach a large audience of enterprise cybersecurity professionals

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.