TrueFort, which protects enterprise apps by defining normal app behavior and then tracking usage through partners like CrowdStrike, raises $30M Series B
Context & Ripple Effects
TrueFort's raise lands on a funding arc that has been moving inward from the perimeter: Fortanix's earlier Series B for runtime encryption attacked application security from the cryptography side, and Silverfort's later $116M identity-threat round showed late-stage investors paying up for tools that watch activity rather than block packets. TrueFort's angle is behavioral — define what normal looks like for an enterprise app, then flag deviation.
First-order effects
- The $30M gives TrueFort runway to scale its baseline-and-monitor model at exactly the moment its primary telemetry channel, CrowdStrike, is operating at serious scale — the endpoint vendor that raised $200M at a $3B+ valuation in 2018 now reports quarterly revenue around $1.39B.
Second-order effects
- Distribution through CrowdStrike makes the endpoint platform the tollbooth for app-behavior data, which pressures adjacent runtime-security players like Fortanix and RapidFort to secure equivalent integrations or get filtered out of the stack.
Third-order effects
- If platform-mediated telemetry keeps winning deals, independent security vendors increasingly compete on algorithm quality while ceding customer relationships and data flow to a handful of endpoint incumbents — an ecosystem structure rather than a best-of-breed market.
The trend: Enterprise security investment is shifting from perimeter defense toward runtime behavioral monitoring, with endpoint platforms like CrowdStrike acting as the distribution layer that decides which specialist tools reach customers.