Abstract Security raised $25 million in a Series A extension co-led by Cheyenne Ventures and AVP, lifting total funding near $50 million at a tripled valuation, after posting 380% ARR growth and 264% net revenue retention on its streaming-first, AI native composable security operations platform.
Abstract Security (also referred to as Abstract), a 2023-founded cybersecurity company pioneering “composable security operations” and an AI native, streaming-first alternative to traditional SIEM platforms, closed a $25 million funding round. The round is described as a Series A extension. It brings the company’s total capital raised to nearly $50 million (approximately $48.5 million across prior seed of $8.5 million in March 2024 and Series A of $15 million in October 2024 led by Munich Re Ventures). Valuation roughly tripled relative to the prior round (exact post money figures undisclosed).
Investors and Leadership of the Round
Cheyenne Ventures and AVP (Atlantic Vantage Point) co-led the investment. Olive Hill Ventures participated as a new investor, while existing backers Crosslink Capital and Rally Ventures provided follow-on capital. Prior investors also include Munich Re Ventures (Series A lead).
Investor commentary emphasized the architectural shift underway: enterprises seeking to escape monolithic SIEM lock-in, regain control over data routing and costs, and embed AI throughout operations rather than as an add-on. J.R. Becko (Cheyenne Ventures) highlighted the streaming-first, AI native, and composable design. Manish Agarwal (AVP) stressed data ownership, real time detection, and AI quality depending on underlying data architecture.
How will Abstract Security use the funds?
Proceeds target three priorities:
- Expanding in-stream detection coverage (running detections while data is still in motion, before storage).
- Extending Astro AI across the full SOC workflow (triage, investigation, response, and related processes).
- Scaling the go to market organization to support accelerating enterprise demand.
Growth Metrics Supporting the Raise
In the year leading into the round, Abstract reported:
- 380% year over year growth in annual recurring revenue (ARR).
- 264% net revenue retention (strong expansion within the existing customer base).
- Customer base tripled (or ~280% increase in new customers per company materials).
- Approximately 40 strategic hires focused on enterprise expansion.
- Employee count reaching the mid to high 60s range.
These figures indicate rapid product market fit among larger organizations moving away from legacy SIEM cost and flexibility constraints.
What is Abstract Security?
Founded in 2023 by cybersecurity veterans including Colby DeRodeff (CEO & co-founder; prior roles at ArcSight, Mandiant, Verodin/Anomali, and others), Chris Camacho (COO & co-founder), and Aaron Shelmire (CTO & co-founder), with additional early leadership from backgrounds at Bank of America, Palo Alto Networks, and related firms. Headquarters references center on the San Francisco Bay Area / Palo Alto, California. The platform is available via AWS, Microsoft Azure, and Google Cloud marketplaces.
Recommended: SambaNova Completes First Close Of $1 Billion Financing Led By General Atlantic
Abstract positions itself as the pioneer of “composable SIEM” / “AI Gen Security Operations.” Core architectural principles include:
- Separating data sources from destinations (composable model that avoids forcing all logs into a single vendor’s storage and schema).
- Streaming-first detection performed in-motion rather than after full indexing/storage.
- Intelligent data shaping, filtering, enrichment, normalization (supporting schemas such as OCSF, ECS, CIM), and tiered routing (real time / hot / warm storage) to control costs and retention.
- Astro AI embedded across detection, triage, investigation, hunting, and response rather than bolted on as an afterthought.
- Support for multi cloud and hybrid environments without requiring a full rip and replace of existing tools.
The company contrasts this with traditional SIEM economics and architecture: volume based pricing that rises with data growth (often 25–30% annually), treatment of all data as equal for indexing and retention, tight coupling of detection to storage, and resulting vendor lock-in plus high false positive/alert fatigue.
The raise occurs amid broader enterprise frustration with legacy SIEM platforms that centralize all telemetry into one system, drive escalating storage and licensing costs, delay detection until after data lands, and limit architectural flexibility. Abstract’s model aims to restore control over data strategy, lower the cost of visibility, enable earlier threat detection, and make AI more effective by improving the underlying data pipeline and context.
Strong commercial traction (high NRR, rapid ARR growth, customer expansion into larger enterprises) and the valuation step-up signal investor confidence that composable, streaming, AI native security operations can capture meaningful share as organizations modernize SOC stacks. The funding positions Abstract to deepen product capabilities and accelerate sales coverage while the category transition is still early. Availability on major cloud marketplaces further lowers adoption friction for multi cloud customers.
The $25 million extension validates both the technical thesis (streaming + composability + native AI) and the early commercial results of a team with deep SIEM and security operations experience, providing runway to pursue larger enterprise deployments and broader platform coverage.
Please email us your feedback and news tips at hello(at)superbcrew.com
