Chicago-based Empirical Security, which uses AI to help companies predict threats by monitoring exploited vulnerabilities, raised a $25M Series A
Context & Ripple Effects
Empirical Security's Series A follows a cluster of AI-security financings aimed at different points in the defensive workflow: automated exposure remediation, security design, and social-engineering simulation. Its focus on exploited vulnerabilities places it upstream of remediation, at the stage of prioritizing which exposures may become active threats.
The funding also arrives after an AI-driven offensive-security company emerged from stealth, underscoring that AI is being applied to both finding and defending against weaknesses rather than to a single security function.
First-order effects
- Empirical Security gains $25 million in Series A capital to develop and sell its AI-based vulnerability-monitoring product to security teams.
- Customers evaluating vulnerability-management tools gain another vendor focused on forecasting threat relevance from exploited vulnerabilities.
Second-order effects
- Security vendors positioned around remediation and proactive testing will face pressure to connect their products to clearer prioritization signals, rather than treating every discovered exposure alike.
- Budgets for AI security tooling may increasingly be allocated across linked workflows—prediction, testing, and remediation—benefiting vendors that can fit into existing security operations.
Third-order effects
- If these financings translate into adoption, cybersecurity buying could shift from point tools that identify exposures toward AI-assisted systems that continuously rank and act on likely threats.
- The pattern suggests a more segmented AI-security market, with specialized vendors competing to own distinct stages of the defensive cycle; whether customers consolidate those stages remains uncertain.
The trend: AI-security startups are attracting funding across the full vulnerability lifecycle, from anticipating exploitation to testing defenses and automating remediation.