Comp AI raises $34M to automate security compliance in the agentic era
Startup tackles SOC 2 audits and continuous monitoring with AI agents
1From failed startup to compliance focus
Comp AI's founders previously built LeapAI, a workflow platform that reached 1M users before shutting down due to lack of stickiness. Their experience with SOC 2 compliance during that venture revealed the manual tedium of security audits, sparking their new focus. The team spent months manually handling compliance instead of product development, recognizing an automation opportunity. This led to their current agentic approach to security workflows.
2$34M Series A funding details
The cybersecurity startup secured $34M in Series A funding led by Roo Capital and Grand Ventures, bringing total funding to $37.5M. Founders include Lewis Carhart (CEO) and brothers Claudio Fuentes (COO) and Mariano Fuentes (CTO), who previously collaborated on startups. The funding will support product expansion for their AI-powered compliance platform. The team brings decade-long experience in building startups and working with LLMs.
3How the platform operates
Comp AI automates security policy drafting and evidence collection for audits while continuously monitoring compliance controls. AI agents handle repetitive tasks but require human review for policy approvals. The system includes penetration testing that proactively scans codebases for vulnerabilities. Unlike traditional audits, it provides real-time monitoring as systems evolve post-audit.
4The agentic compliance gap
Traditional audits like SOC 2 become outdated when companies deploy new AI agents that access customer data or modify permissions. Current systems weren't designed to track these rapid post-audit changes. Comp AI addresses this by monitoring agent actions, access attempts, and permission boundaries continuously. This reflects the emerging need for dynamic compliance in AI-driven workflows.
5Human-AI collaboration model
While automating manual processes, Comp AI maintains human oversight for critical decisions. Agents draft policies but humans must review and approve them. As agents take more consequential actions, required safeguards increase proportionally. The platform assists with onboarding AI systems and maintaining agentic workflows while preserving accountability.
6Market context and competitors
Comp AI enters a growing sector including players like Vanta and Drata, responding to new security risks in the agentic era. The rapid adoption of AI has created demand for continuous compliance solutions. Enterprises need to demonstrate agent behavior tracking as AI systems evolve. The startup differentiates with its focus on real-time monitoring and permission management.
7Revenue impact of compliance
Security compliance directly affects software companies' revenue streams, with customers often requiring SOC 2 reports before deals. Automating this process removes traditional bottlenecks in enterprise sales cycles. Comp AI's solution helps maintain requirements without replacing independent audits. The platform addresses a pain point that previously diverted engineering resources from core product work.
8Future of agentic security
As AI systems gain more autonomy, compliance must evolve beyond periodic audits to continuous validation. Comp AI's approach anticipates this shift by building monitoring layers for dynamic risk assessment. Their solution reflects the industry's need for security frameworks that keep pace with AI's rapid iteration cycles. This positions the startup at the forefront of next-gen cybersecurity infrastructure.