AttackIQ, which provides an automated continuous security monitoring platform for enterprises, raises $17.6M Series B led by Khosla Ventures
There's a reason the enterprise security market is expected to be worth $71 billion by 2021, according to Statista: Unguarded systems and networks pose a constant threat.
Context & Ripple Effects
AttackIQ's $17.6M Series B, led by Khosla Ventures, funds an automated continuous security monitoring platform aimed at enterprises that can't manually verify their own defenses. The round slots into a busy 2019 funding lane for security operations tooling, alongside Axonius's device-security Series A earlier that year and ZecOps's endpoint-focused seed later in November.
The bet pays off on the record shown in the coverage: two years later AttackIQ raised a $44M Series C to expand internationally, confirming investor appetite for automated defense validation rather than point-in-time audits.
First-order effects
- AttackIQ gains the capital and a top-tier lead (Khosla Ventures) to scale its breach-and-attack simulation platform across enterprise customers, competing directly for the same security operations budgets that ThreatQuotient's $22.5M raise targeted.
- Khosla Ventures adds an enterprise security asset to its portfolio at the Series B stage, alongside its later, much larger bets elsewhere.
Second-order effects
- Adjacent categories crowd in fast: ZecOps (endpoint attack analysis), Axonius (device tracking), and later BlueVoyant — whose managed security services scaled to a $250M Series D — all chase buyers consolidating security spend around automated validation and response.
- Enterprises gain a way to test defenses continuously, pressuring vendors of traditional one-off penetration testing and audit services to justify their pricing against always-on alternatives.
Third-order effects
- If the pattern holds, security shifts structurally from periodic assessment to continuously verified posture — the trajectory AttackIQ itself follows from Series B to international expansion on Series C money, and which newer entrants like Way Security now push further by automating deployment workflows themselves.
- Security operations consolidates into platforms that both detect and prove resilience, raising the bar for any vendor whose product cannot demonstrate validated outcomes to enterprise buyers.
The trend: Enterprise security is moving from manual, periodic defense testing toward continuously automated validation, with venture funding scaling each stage of that shift.