Northstar Security raises $7m seed to give security AI agents context

Northstar Security raises $7m seed to give security AI agents context

28 October 2026: Northstar Security, a San Francisco startup, has come out of stealth with $7 million in seed funding led by Wing Venture Capital. MVP and Outliers took part, along with three security veterans as individual investors: Gerhard Eschelbeck, a former chief information security officer at Google, Renaud Deraison and Justin Somaini. The company says the money goes to product development, hiring and sales.

Not yet independently verified. Not yet independently verified. The round rests on Northstar's own release, whose header is dated 26 October while its dateline says 28 October; we found no post from Wing Venture Capital. We will update this when it can be confirmed, and remove this note.

Finding the risky combinations

Northstar's product is built around what it calls a Security Context Graph: a live map of the relationships between assets, identities, vulnerabilities, applications and business systems, built from the tools a company already runs. The point is to catch "toxic combinations", risks that look minor alone but serious together.

The company's own example is a laptop with no endpoint protection. Finding out who owns it, what it can reach and whether it matters can take an analyst six tools and several hours. In Northstar, the analyst asks in plain language and sees, for instance, that the laptop belongs to a privileged user with access to the payroll system. AI agents can then start remediation, deploying endpoint protection, notifying the owner or restricting access, with a human approving where needed.

"Security teams are drowning in data but starving for context," said Amer Deeba, the chief executive and co-founder. Northstar says it supports more than 70 integrations, naming AWS, Google Cloud, Microsoft Defender, Microsoft Entra, Okta, GitHub, Slack, Workday and Zendesk. It also exposes the graph to outside AI agents through the Model Context Protocol, so customers can build their own workflows on it.

A team that has sold security data before

Deeba previously co-founded Normalyze, a data security company bought by Proofpoint, and held senior roles at Qualys. His co-founder and chief technology officer, Ed Rowe, was CTO of Farmers Business Network and senior vice president of engineering at AppDynamics; the two first worked together at Adobe in the late 1990s. Jake Flomenberg, a partner at Wing, said the company is "challenging decades of conventional thinking" by giving agents both the context and the ability to act. Randy Barr, chief information security officer of Cequence Security, is quoted as a user of its agentic workflows.

The product is available now. Northstar has not published prices or a customer count.

A crowded field to stand out in

Mapping assets and identities into a graph to rank exposure is also what cloud security posture and exposure management vendors sell, so Northstar's case rests on the remediation agents and the open MCP access rather than the graph alone. Our vulnerability management software category lists 16 products and cybersecurity software nine. A buyer comparing them would want to know which of the 70 integrations write changes back, as the remediation claims require, and which only read.

Company profile on TrustList: Northstar Security

Sources

• Northstar Security: Northstar Security emerges from stealth with $7M, 28 October 2026
• The SaaS News: Northstar Security raises $7M seed, 29 October 2026