Northstar Security has launched publicly with $7m in seed capital, wagering that cyber defence will shift from detecting problems to fixing them automatically.
Wing Venture Capital led the round, with MVP and Outliers also taking part. Several cybersecurity veterans invested as individuals: Gerhard Eschelbeck, Renaud Deraison and Justin Somaini. Northstar plans to spend the money on product development, hiring and its go-to-market push.
The company is targeting a persistent weakness in enterprise security. Organisations have invested billions in tools that flag threats, vulnerabilities and misconfigurations, yet the resulting data sits in separate systems.
On its own, a vulnerability, an unmanaged device or an identity with excessive privileges may look minor. Together, these issues can form so-called toxic combinations that expose critical business systems. Spotting them currently means analysts must gather evidence from several tools, trace connections, judge business impact and organise remediation, work that can consume hours.
Northstar illustrates the problem with a laptop running without endpoint protection. Establishing who owns the machine, which systems it reaches and how serious the exposure is can involve six separate tools, and the device stays vulnerable while the analyst investigates. Using Northstar, analysts pose those questions in plain language and see the relevant links immediately.
The platform might show, for instance, that the unprotected laptop belongs to a privileged user with access to a critical payroll system. Its AI agents can then launch workflows to install endpoint protection, alert the owner or limit risky access, keeping humans involved where needed.
The platform rests on a real-time Security Context Graph that maps how assets, identities, vulnerabilities, applications and business systems relate to one another, giving people and AI agents a common view of the environment. Northstar combines three functions: connected security context that unifies data across existing enterprise systems, risk intelligence that answers complex queries and ranks issues by likely business impact, and agentic remediation that coordinates fixes across systems and teams.
The firm also exposes its graph to outside AI agents via Model Context Protocol (MCP), letting customers build their own security workflows with Claude and other AI tools. It currently offers more than 70 integrations, covering AWS, Google Cloud, Microsoft Defender, Microsoft Entra, Okta, GitHub, Slack, Workday and Zendesk.
Amer Deeba and Ed Rowe, who first worked together at Adobe in the late 1990s, founded the business. Deeba previously co-founded Normalyze, which Proofpoint acquired, and held senior posts at Qualys. Rowe, now CTO, was formerly CTO of Farmers Business Network and senior vice president of engineering at AppDynamics.
Northstar Security CEO and co-founder Amer Deeba said, “Security teams are drowning in data but starving for context. We’ve spent decades building better tools to find security problems, but connecting the dots and fixing them remains painfully manual. We believe the next generation of security won’t be defined by more dashboards or alerts. It will be powered by AI agents that understand the full context of an organization’s environment and can take proactive action.
“That’s why we built Northstar: to provide the context foundation for agentic security and move the industry from finding problems to continuously fixing them.”
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
