Key Takeaways
- • Corma, a Tel Aviv and San Francisco-based cybersecurity AI startup, raised $60 million in seed funding led by Sequoia Capital, with participation from Khosla Ventures and Coatue, emerging from stealth on August 10, 2026.
- • The company has deployed its first defensive cybersecurity AI model to Fortune 100 and Fortune 500 organizations across healthcare, financial services, energy, critical infrastructure, and retail sectors within six weeks of launch.
- • Corma addresses a critical market gap by training AI models specifically for defensive cybersecurity rather than offensive capabilities, focusing on log analysis, audit review, and threat pattern detection rather than coding and vulnerability exploitation.
- • CEO Alon Pluda positioned the company's approach as a counterweight to widely available AI models from OpenAI, Anthropic, and Google that excel at offensive security tasks, arguing that enterprises now face an asymmetric threat landscape requiring purpose-built defensive AI.
- • The funding round reflects investor confidence in specialized AI applications for enterprise security, with Sequoia's lead position signaling significant market demand for AI-native cybersecurity defense solutions.
Summary
Corma, a newly launched cybersecurity startup based in Tel Aviv and San Francisco, has secured $60 million in seed funding to develop AI models specifically designed for defensive cybersecurity. The round was led by Sequoia Capital, with Khosla Ventures and Coatue also participating. The company emerged from stealth on August 10, 2026, following its founding in 2025.
The startup addresses an emerging asymmetry in the cybersecurity landscape. While powerful AI models from OpenAI, Anthropic, and Google have been widely trained on capabilities that directly enable offensive security operations—including code writing, bug identification, and multi-step reasoning—no equivalent specialized foundation model existed for defenders. According to CEO Alon Pluda, Corma's core differentiation lies in training AI models on defensive capabilities that "doesn't have anything to do with coding" but instead focuses on analyzing logs, audits, and identifying anomalies across thousands of concurrent actions with consistency.
The company has already achieved significant traction since deploying its first model six weeks prior to announcement. Corma's AI model has been adopted by a diverse set of Fortune 100 and Fortune 500 organizations spanning healthcare, financial services, energy, critical infrastructure, and retail sectors. This early deployment demonstrates both market urgency and customer confidence in the company's approach.
Corma's name derives from J.R.R. Tolkien's "The Lord of the Rings," referencing "corma," the Elvish word for ring. Pluda explained the metaphor: the company's product serves as a powerful defensive tool, positioning Corma as "the ring, but this time for the defenders" rather than attackers. This thematic framing underscores the company's positioning in response to what market participants increasingly view as an AI-accelerated threat environment requiring purpose-built defensive infrastructure.
The funding announcement does not include Corma's post-money valuation. However, the lead participation by Sequoia Capital, a prominent venture investor in AI and enterprise infrastructure, suggests institutional confidence that the defensive cybersecurity AI market represents a significant commercial opportunity as enterprises grapple with rising attack sophistication enabled by accessible AI models.
The startup addresses an emerging asymmetry in the cybersecurity landscape. While powerful AI models from OpenAI, Anthropic, and Google have been widely trained on capabilities that directly enable offensive security operations—including code writing, bug identification, and multi-step reasoning—no equivalent specialized foundation model existed for defenders. According to CEO Alon Pluda, Corma's core differentiation lies in training AI models on defensive capabilities that "doesn't have anything to do with coding" but instead focuses on analyzing logs, audits, and identifying anomalies across thousands of concurrent actions with consistency.
The company has already achieved significant traction since deploying its first model six weeks prior to announcement. Corma's AI model has been adopted by a diverse set of Fortune 100 and Fortune 500 organizations spanning healthcare, financial services, energy, critical infrastructure, and retail sectors. This early deployment demonstrates both market urgency and customer confidence in the company's approach.
Corma's name derives from J.R.R. Tolkien's "The Lord of the Rings," referencing "corma," the Elvish word for ring. Pluda explained the metaphor: the company's product serves as a powerful defensive tool, positioning Corma as "the ring, but this time for the defenders" rather than attackers. This thematic framing underscores the company's positioning in response to what market participants increasingly view as an AI-accelerated threat environment requiring purpose-built defensive infrastructure.
The funding announcement does not include Corma's post-money valuation. However, the lead participation by Sequoia Capital, a prominent venture investor in AI and enterprise infrastructure, suggests institutional confidence that the defensive cybersecurity AI market represents a significant commercial opportunity as enterprises grapple with rising attack sophistication enabled by accessible AI models.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.