Brava Security Raises $15 Million to Test What AI Cyber Defenses Can Actually Detect

PUBLISHER ARTICLE PREVIEW

From the original article

Brava Security has emerged from stealth with $15 million in seed funding to address a basic weakness in AI-assisted cyber defense: an automated analyst cannot investigate an attack if the underlying security systems never detect it.

The round was led by F2 Venture Capital and Pitango, with angel participation from executives at Anthropic, Microsoft, and Check Point. Brava plans to use the funding for product development and commercial expansion across North America, including opportunities in financial services and government.

The company’s approach is to generate the telemetry an attack would produce in a particular environment without carrying out the attack itself. It then checks whether existing defenses recognize that evidence and helps repair the gaps. That makes detection validation, rather than simply faster alert investigation, the center of its pitch.

Security operations centers rely on telemetry: records of activity across endpoints, cloud environments, identities, and applications. A security information and event management system, or SIEM, collects and analyzes those records, using detection rules to identify suspicious behavior.

That process has several dependencies. The relevant system must produce a useful record, the pipeline must deliver it, and the detection must interpret the fields correctly. More logs do not automatically mean better coverage if the evidence needed for a particular attack is missing or unusable.

Brava says its multi-agent technology models attacker behavior and identifies how specific techniques should appear across a customer’s log sources. Its platform then tests whether those traces would trigger the intended defenses, rewrites missing SIEM detections and addresses data-feed gaps.

“You can’t automate a decision based on evidence no one ever proved,” said Idan Basre, Brava’s co-founder and CEO, who previously led product management for Microsoft Defender.