SolCyber, which offers endpoint detection and response services, comes out of stealth with $20M Series A led by ForgePoint Capital
All the sessions from Transform 2021 are available on-demand now. Watch now. — SolCyber, a managed security service provider, today emerged from stealth …
Context & Ripple Effects
ForgePoint Capital has made early-stage security services a repeatable thesis: the firm previously led Huntress' $18M Series A in February 2020 as the SaaS cybersecurity provider expanded into new market segments and geographies, and weeks later backed Cysiv's $26M round for its Trend Micro-spun Security Operations Center-as-a-Service. SolCyber is the third data point in that sequence — a managed security service provider bringing endpoint detection and response out of stealth on ForgePoint's checkbook.
The positioning matters because the EDR category itself was defined by platform vendors raising at scale — Cybereason's $200M Series E at a $900M valuation in 2019 set the benchmark for what pure-play endpoint detection companies command. SolCyber's entry as an MSSP wrapping EDR into a service, rather than selling the technology directly, targets buyers who want outcomes rather than another console to operate.
First-order effects
- SolCyber gains $20M and ForgePoint's portfolio network to staff and scale a managed detection service aimed at companies without in-house security operations teams.
- ForgePoint adds a third consecutive Series A bet in managed/SaaS security delivery — after Huntress and Cysiv — deepening its concentration in outsourced-security operators over point-tool vendors.
Second-order effects
- Huntress and Cysiv now share an investor with a direct competitor for the same mid-market buyer, setting up portfolio-level pressure to differentiate on pricing tiers or coverage breadth.
- Platform vendors in the EDR category face a distribution question: as service providers package endpoint detection for under-resourced buyers, the channel through which their technology reaches customers shifts toward MSPs.
Third-order effects
- If the ForgePoint pattern holds, capital continues consolidating behind the managed-delivery layer of cybersecurity — firms that operate the stack for customers — while standalone tool vendors compete increasingly as upstream components inside someone else's service.
- A maturing MSSP funding track also points toward eventual consolidation, where well-capitalized service providers acquire tooling to own more of the stack they resell.
The trend: Security venture capital is shifting from funding endpoint tools to funding the service providers that operate those tools for under-staffed customers, with specialist investors like ForgePoint building portfolios around the model.