Key Takeaways
- • Brava emerged from stealth with $15 million in seed funding led by F2 Venture Capital and Pitango to expand its AI-powered security operations platform.
- • The platform uses multiple AI agents to simulate attack evidence in customer environments without executing real attacks, testing whether detection rules actually catch threats.
- • Brava reports customer deployments with Fortune 100 companies in retail, energy, and hospitality, and says it has reduced SIEM costs by approximately 65% to 85% across customers.
- • Angel investors include executives associated with Anthropic, Microsoft, and Check Point.
- • Brava reports processing 2.4 trillion events daily and validating thousands of detections each day.
Summary
Brava, an AI-powered cybersecurity company, has emerged from stealth with $15 million in seed funding led by F2 Venture Capital and Pitango, according to the company's announcement. The round also drew participation from angel investors including executives associated with Anthropic, Microsoft, and Check Point. The capital will support further product development and expansion across North America, with an emphasis on financial services, government, energy, and other sectors managing complex cybersecurity environments.
The company is addressing a gap in enterprise security operations centers, where organizations often cannot determine whether their threat detection systems will recognize specific attacks. Security tools can appear to operate normally even when logging failures, missing telemetry, outdated detection rules, or changed data formats prevent threat identification. Brava's platform uses AI models to simulate the evidence cyberattacks would generate in a customer's environment, without executing the attacks, and uses the resulting data to test whether existing systems detect malicious activity.
The technology supports three primary functions. Detection engineering evaluates individual security rules against the attacks they are meant to catch; when a rule fails, Brava identifies the underlying problem, modifies detection logic within the customer's SIEM platform, and validates the revised detection. Aquarium, its AI investigation agent, lets analysts query data in natural language, coordinating searches across SIEM systems, archived logs, endpoint detection tools, and cloud audit records, and generates reports referencing underlying security events. The third function manages the cost of processing and retaining security data by identifying required events and routing other data to lower-cost storage while preserving search capability. According to the company, this has reduced SIEM costs by approximately 65% to 85% across its customers.
Brava reports processing 2.4 trillion events daily across customer environments and has established relationships with Fortune 100 companies in retail, energy, and hospitality. Co-founder Idan Basre previously spent 10 years in Israel's Unit 8200 as a threat researcher and later led product management at Microsoft Defender. His co-founder, Itay, spent seven years developing AI systems for the Israel Defense Forces, including leadership of a joint DARPA-Israeli AI research program. Basre said, "Today, most security teams take their detection on faith. We built Brava to replace that hope with proof."
The company is addressing a gap in enterprise security operations centers, where organizations often cannot determine whether their threat detection systems will recognize specific attacks. Security tools can appear to operate normally even when logging failures, missing telemetry, outdated detection rules, or changed data formats prevent threat identification. Brava's platform uses AI models to simulate the evidence cyberattacks would generate in a customer's environment, without executing the attacks, and uses the resulting data to test whether existing systems detect malicious activity.
The technology supports three primary functions. Detection engineering evaluates individual security rules against the attacks they are meant to catch; when a rule fails, Brava identifies the underlying problem, modifies detection logic within the customer's SIEM platform, and validates the revised detection. Aquarium, its AI investigation agent, lets analysts query data in natural language, coordinating searches across SIEM systems, archived logs, endpoint detection tools, and cloud audit records, and generates reports referencing underlying security events. The third function manages the cost of processing and retaining security data by identifying required events and routing other data to lower-cost storage while preserving search capability. According to the company, this has reduced SIEM costs by approximately 65% to 85% across its customers.
Brava reports processing 2.4 trillion events daily across customer environments and has established relationships with Fortune 100 companies in retail, energy, and hospitality. Co-founder Idan Basre previously spent 10 years in Israel's Unit 8200 as a threat researcher and later led product management at Microsoft Defender. His co-founder, Itay, spent seven years developing AI systems for the Israel Defense Forces, including leadership of a joint DARPA-Israeli AI research program. Basre said, "Today, most security teams take their detection on faith. We built Brava to replace that hope with proof."
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.