Enterprise cybersecurity protections are failing to keep pace with the evolving threat landscape, which now includes everything from the weaponization of AI to state-sponsored hacking groups to the metastasizing of run-of-the-mill vulnerabilities (misconfigurations, unpatched devices) that are getting exponentially harder to keep up with as system complexity increases.
Many of today’s security holes also align with high-growth tech markets, such as AI and cloud computing. For instance, in its State of Phishing 2024 report, email security firm SlashNet found that generative AI, such as ChatGPT, is driving a spike in phishing. SlashNet found that since Q4 2022, phishing emails have spiked by more than a thousand percent, with credential phishing in particular driving the bulk of that increase.
Meanwhile, security teams still struggle to detect breaches. In its Cost of a Data Breach Report 2024, IBM found that just 42% of known breaches are currently being identified by internal security teams and tools. Similarly, the International Information System Security Certification Consortium’s (ISC2) 2024 Cloud Security Report notes that 96% of organizations are worried about public cloud security, especially securing multi-cloud environments. ISC2 also found that organizations desire to modernize and simplify security tools and workflows, but they are struggling to do so, slowed down by a variety of barriers, including a lack of skilled staff, data privacy issues, and tight budgets.
In a market with so much turmoil and churn, the door is wide open for startups to shake up the status quo. The seven startups listed below offer a range of solutions to counter emerging security challenges, and each has raised enough capital to make a splash if they can continue to deliver on their promises:
- Aembit brings identity management to non-human workloads
- Astrix Security manages non-human entities across networks and clouds
- Corelight boosts AI-driven network detection and response
- Dazz aims to unify security remediation with AI-driven platform
- dope.security puts a new spin on secure web gateways
- Mitiga zeros in on cloud and SaaS security
- Qevlar AI tackles alert fatigue with autonomous investigation
Jeff Vance is the founder of Startup50.com, a site that discovers, analyzes, and ranks tech startups. Follow him on Twitter, @JWVance, or connect with him on LinkedIn.
Source:: Network World