Nightfall, which offers an AI-based platform to detect and prevent data leakage from cloud-based apps and services, comes out of stealth with $20.3M
Sensitive data leakage is one of the biggest negative side-effects of cloud-based apps and services. Today, a startup that has built …
Context & Ripple Effects
Nightfall's 2019 stealth exit put AI-based detection on the cloud data-loss-prevention map early: its pitch is that SaaS adoption created leakage paths that legacy perimeter tools never watched. The bet paid out on paper — by 2022 the company had raised a $40M Series B led by WestBridge Capital, tripling its total funding to $60M.
It also kicked off a crowded lane. Tel Aviv's Laminar emerged from stealth with $37M for public-cloud data security in 2021, Adaptive Shield raised $30M for SaaS breach prevention the same year, and by 2023 Savvy launched from stealth with $30M targeting SaaS supply-chain risk and leaks via AI tools — a steady drip of well-funded entrants attacking the same exposure.
First-order effects
- Cloud-native security buyers get a dedicated DLP option built for API-accessible SaaS and cloud services, competing directly with legacy endpoint-DLP suites rather than replacing them.
- Nightfall enters the market with $20.3M in hand, enough to fund engineering and go-to-market without immediate pressure to prove enterprise-scale revenue.
Second-order effects
- Incumbent DLP and CASB vendors face pressure to retrofit AI detection into their consoles, while startups like Laminar and Adaptive Shield force category consolidation around 'cloud data security' as buyers consolidate vendors.
- Venture capital reprices the segment upward — the string of $20M-$40M raises across Nightfall, Laminar, Adaptive Shield, RevealSecurity, Savvy, and Act Security makes cloud/SaaS data protection a default funding thesis.
Third-order effects
- If the pattern holds, data-loss prevention fragments into specialized point products (cloud infrastructure access, SaaS posture, insider threat) before consolidating into platforms — the same build-then-roll-up cycle other security categories have followed.
- Regulators' growing focus on where sensitive data lives pushes boards to treat cloud data-leakage controls as compliance infrastructure, expanding the addressable buyer base beyond security teams.
The trend: Data-loss prevention is being rebuilt cloud-first by a wave of venture-backed startups, with each new stealth exit widening the category before any consolidation begins.