StrongDM, which grants and mediates user access to enterprise backend infrastructure and logs user actions in video replay, raises $17M Series A led by Sequoia
Igor Bosilkovski / Forbes : Tweets: @forbestech Tweets: @forbestech : Sequoia just led A $17 million Series A in this woman-led software firm https://on.forbes.com/... By @IgorBosilkovski https://twitter.com/...
Context & Ripple Effects
StrongDM's $17M Series A lands in the middle of a busy Sequoia autumn: weeks earlier the firm had backed Robust Intelligence's stealth exit with $14M for secure AI deployment, making infrastructure-layer security a repeated early-stage thesis rather than a one-off bet. The pitch is unusual for its category — StrongDM does not just grant access to servers and databases, it mediates every session and records them as video replay, turning access control into an audit product.
The bet aged quickly: within a year StrongDM returned with a $54M Series B led by Tiger Global, lifting total funding to $77M and validating the human-access mediation model. Five years on, the same structure — a broker that sits between actors and internal systems — is being rebuilt for machines, with Keycard raising $30M for AI agent access and Defakto raising $30.75M for securing automated system-to-agent interactions.
First-order effects
- StrongDM gains the capital to scale its access-mediation and session-replay platform beyond early enterprise deployments, while Sequoia's Alfred Lin and Pat Grady take board-level stewardship of the company as part of their new roles.
Second-order effects
- Sequoia's endorsement de-risks the category for later-stage funds — Tiger Global's $54M follow-on a year later shows the Series A pulled bigger checks into infrastructure access tooling than the seed market alone would have.
Third-order effects
- If the pattern holds, access mediation migrates from human engineers to non-human actors: the replay-and-broker architecture StrongDM built for people is the template Keycard and Defakto are now selling for AI agents, suggesting identity and audit layers consolidate around whoever mediates machine sessions first.
The trend: Enterprise security is shifting from perimeter tools toward mediation layers that grant, record, and audit every session — first for human operators, now extending to AI agents accessing internal systems.