Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

MediumSecurityWeek · SecurityWeek News·

At a glance

Severity
Medium
Used in attacks
No flaws named
Reported by
1 outlet

Northstar Security, a startup developing AI agents for security teams, has emerged from stealth mode with $7 million in seed funding.

Wing Venture Capital led the round. MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini also invested.

The company ingests data from existing security and IT tools to build what it calls a Security Context Graph. Updated in real time, the graph shows how identities, assets, applications, vulnerabilities, and business systems connect to one another.

Northstar aims to catch so-called toxic combinations. Issues such as a vulnerability, an unmanaged device, or an account with excessive privileges may seem under control on their own, but together they can expose critical business systems.

For instance, the platform could flag a laptop lacking endpoint protection whose owner is a privileged user able to reach a critical payroll system.

Analysts can investigate findings like this by asking questions in plain language. Northstar’s agents can then kick off fixes, such as installing endpoint protection, notifying the user, or limiting their access, and people can supervise those actions where appropriate.

Advertisement. Scroll to continue reading.

Customers can also give external AI agents access to the graph through Model Context Protocol (MCP) and build their own security workflows. Northstar says it connects to more than 70 enterprise security and IT products, among them Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud.

“Security teams are drowning in data but starving for context,” said Amer Deeba, Northstar’s CEO and co-founder.

Deeba co-founded Normalyze, which Proofpoint later acquired, and was previously a senior executive at Qualys. His co-founder, CTO Ed Rowe, held the same role at Farmers Business Network and led engineering as an SVP at AppDynamics.

The startup will use the money to develop its platform, hire staff, and expand its go-to-market push.

Related: Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

Related: Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

Related: Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

Originally published by SecurityWeek. © SecurityWeek. Written by SecurityWeek News.

Fastnexa security experts

Dealing with this in your own company?

If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. SecurityWeek ↗Established SourceFirst reported

    2026-11-01 11:15 UTC

Related stories