Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Reported by
- 1 outlet
Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding.
Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.
The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.
Northstar aims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.
For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.
Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.
Advertisement. Scroll to continue reading.
Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.
“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.
Deeba co-founded Normalyze, which Proofpoint later acquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.
The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.
Related: Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
Related: Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Related: Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Originally published by SecurityWeek. © SecurityWeek. Written by SecurityWeek News.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-11-01 11:15 UTC
Related stories
- Alpine Linux rebuilds GitLab after attempted RCE attack
BleepingComputer · 2026-11-01
- CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
The Hacker News · 2026-11-01
- New Android SMS of Death exploit can remotely crash unpatched phones
BleepingComputer · 2026-10-31
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News · 2026-10-31 · exploited
- A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
The Hacker News · 2026-10-31