Native bags $42m to operationalise cloud security control

Native

Native, a cloud security control plane provider, has emerged from stealth with $42m in funding, marking its public debut with a platform designed to embed security directly into multi-cloud and AI infrastructure.

The raise comprises a $31m Series A led by Ballistic Ventures, with continued participation from seed investors General Catalyst, YL Ventures, and Merlin Ventures.

As part of the announcement, Phil Venables, former chief information security officer (CISO) of Google Cloud, has joined Native’s board, describing the company’s approach as “the next big evolution in cloud security.”

Native’s platform functions as what it describes as the first cloud security control plane, translating security intent into enforceable, secure-by-design architecture that continuously adapts across AWS, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure.

Rather than adding another detection or monitoring layer, Native works through provider-native enforcement mechanisms, allowing security teams to define policy intent and have it applied consistently across environments. The platform also includes pre-deployment impact simulation, intelligent rollout strategies, and built-in approval workflows to reduce disruption risk in production settings.

The company intends to use the new capital to accelerate the adoption of its secure-by-design approach, helping enterprises close the gap between cloud security strategy and what teams can reliably maintain at scale — particularly as AI-driven threats compress the window between vulnerability discovery and exploitation. Google’s Mandiant reported that the average time-to-exploit reached minus one day in 2024, meaning attackers were exploiting flaws before patches were publicly available.

Native co-founder and CEO Amit Megiddo said, “Cloud providers invest heavily in security controls. The irony is that most enterprises struggle to use them effectively, especially across multiple clouds. We built Native so that security teams can define security policy intent and have it enforced everywhere, staying aligned as environments change. When security is native to the infrastructure, it enables the business to move faster within a secure framework.”

Ballistic Ventures venture partner Phil Venables said, “Cloud security is entering a new era where the unit of work is not ‘finding’ problems, it’s safely enforcing the right architecture at speed. What will matter most is whether a platform can translate intent into real, provider-native enforcement across clouds and keep that enforcement aligned as environments evolve. That’s the step-change: security that can keep up with the business.”

Ballistic Ventures co-founder and general partner Jake Seid said, “The tradeoff between being more secure and business moving faster is a false choice. Native helps customers raise the security bar while staying nimble across multiple clouds, even as AI changes the speed and scale of attacks.”

YL Ventures senior partner Ofer Schreiber said, “Cloud security has reached an inflection point where reactive detection can’t keep up. Native’s unified enforcement layer is becoming an essential pillar of secure-by-design infrastructure.”

Read the daily RegTech news

Copyright © 2026 RegTech Analyst

Enjoyed the story? 

Subscribe to our weekly RegTech newsletter and get the latest industry news & research

Copyright © 2018 RegTech Analyst

Investors

The following investor(s) were tagged in this article.