HYAS, an infosec startup that identifies cybercriminals and helps law enforcement track their location, raises $6.2M Series A led by Microsoft's M12
Context & Ripple Effects
HYAS sits on the attribution side of security: rather than selling another defensive wall, it identifies cybercriminals and helps law enforcement locate them. The $6.2M Series A puts Microsoft's venture arm M12 behind that thesis, and the corpus shows the bet compounding — Hyas went on to raise a $16M Series B built around mapping attackers' command-and-control structures to intercept attacks before they land.
The round also slots into a broader M12 pattern visible in the coverage: the fund backed Tel Aviv's Hunters' $15M Series A for enterprise attack analysis and Arkose Labs' $22M Series B for fraud detection, making HYAS part of a deliberate cybersecurity portfolio rather than a one-off.
First-order effects
- HYAS gets the capital to scale its criminal-attribution work for law enforcement customers, with M12's backing lending it credibility inside Microsoft's orbit.
- M12 adds an offensive-intelligence asset to a security portfolio that already spans enterprise threat analysis (Hunters) and fraud mitigation (Arkose Labs).
Second-order effects
- Incumbent threat-intelligence vendors now compete against a startup whose differentiation — naming and locating criminals, not just blocking them — is validated by Microsoft's checkbook.
- Law enforcement agencies gain a commercially funded partner for geolocation work, shifting some investigative capability from government budgets to venture-backed firms.
Third-order effects
- If the funding pattern holds, security splits into two funded categories — defensive tooling like Halcyon's ransomware protection and Cyberhaven's data analytics versus attribution-and-pursuit firms like HYAS — with corporate VCs such as M12 deciding which side of that line gets capitalized.
The trend: Corporate venture arms are assembling end-to-end cybersecurity portfolios that cover not just defense but the identification and pursuit of attackers themselves.