Texas-based Cysiv, an enterprise Security Operations Center-as-a-Service company that spun out of Trend Micro, raises $26M Series A led by ForgePoint Capital
Dallas Innovates :
Context & Ripple Effects
Cysiv is taking the Security Operations Center capability Trend Micro built internally and running it as a standalone subscription business, with a $26M Series A from ForgePoint Capital as the fuel. The timing matters: a week after this round closed, ForgePoint announced a $450M second fund dedicated to cybersecurity, so Cysiv is effectively an early proof point for that fund's thesis.
The round also slots into a pattern ForgePoint has repeated since: the firm later led SolCyber's $20M Series A for managed endpoint detection and response, another services-delivery security bet. And the exit path has precedent in the corpus — CyCognito went from an $18M Series A to a $100M Series C at an $800M valuation in roughly two years, showing how fast enterprise security buyers reward validated categories.
First-order effects
- Cysiv gets the capital to hire SOC analysts and build out its platform as an independent company, while Trend Micro converts an internal function into a separate venture it no longer has to fund from its own balance sheet.
- ForgePoint Capital puts its dedicated cybersecurity fund to work on a managed-services model rather than a pure tooling play, adding a Texas-based portfolio company alongside its coastal-heavy deal flow.
Second-order effects
- SolCyber, ForgePoint's other managed-detection bet, now shares a lead investor with Cysiv — the two compete for the same outsourced-SOC budget, and the firm has an incentive to differentiate them by segment rather than let them collide head-on.
- Incumbent MSSPs and antivirus vendors face a competitor whose parent lineage gives it enterprise credibility out of the gate, pressuring pricing in the SOC-as-a-service tier where labor costs dominate margins.
Third-order effects
- If the ForgePoint pattern holds — specialist funds leading Series As for service-delivery security companies, then scaling them toward CyCognito- and Cyera-sized later rounds — the SOC staffing shortage pushes enterprises toward outsourcing as the default operating model, not the fallback.
- Spinouts from large security vendors become a repeatable company-formation route: incumbents shed non-core service lines, specialist funds capitalize them, and the industry stratifies into platform vendors, managed-service specialists, and point tools.
The trend: Cybersecurity Series A capital is concentrating with specialist funds like ForgePoint, which are steering the market toward managed service delivery — SOC-as-a-Service and MDR — instead of standalone tooling.