Back Pulse2 Brava Raises $15 Million In Seed Funding Led By F2 Venture Capital And Pitango To ...
Brava, an AI-powered cybersecurity company, has emerged from stealth with $15 million in seed funding led by F2 Venture Capital and Pitango. The financing will support expansion of its security operations platform, which uses multiple AI agents to validate threat detection capabilities, investigate security incidents, and optimize security data management. The round also included participation from angel investors, including executives associated with Anthropic, Microsoft, and Check Point.
Brava has already established customer relationships with Fortune 100 companies operating in retail, energy, and hospitality.
The company developed its technology to address a major challenge facing enterprise security operations centers: organizations often cannot determine whether their threat detection systems will successfully recognize specific attacks.
Security tools may appear to be operating normally even when logging failures, missing telemetry, outdated detection rules, or changes in data formats prevent them from identifying threats.
Brava’s platform uses AI models to simulate the evidence that cyberattacks would generate in a customer’s environment without executing the attacks themselves.
The resulting data provides a basis for testing whether existing security systems can identify malicious activity.
The company’s technology supports three primary functions: detection engineering, security investigations, and data pipeline optimization.
Its detection engineering capabilities evaluate individual security rules against the types of attacks they are intended to detect.
When a rule does not identify the simulated attack, Brava can identify the underlying problem, modify the detection logic using the customer’s security information and event management platform, and validate whether the revised detection performs as expected.
This approach is intended to identify broken detection rules, missing log sources, and other weaknesses before they affect a real-world security incident.
Brava also offers Aquarium, an AI investigation agent that allows security analysts to ask questions in natural language.
Aquarium can coordinate queries across security information and event management systems, archived logs, endpoint detection tools, and cloud audit records.
The system generates investigation reports supported by references to underlying security events, enabling analysts to examine the evidence associated with its findings.
Brava’s third capability focuses on managing the costs of processing and retaining security data.
The platform identifies which events are required for effective threat detection and directs other data to lower-cost storage while maintaining capabilities.
According to the company, this approach has reduced security information and event management costs by approximately 65% to 85% across its customers.
Brava reports processing 2.4 trillion events daily across customer environments and validating thousands of detections each day.
The company was co-founded by Idan Basre and Itay, who bring experience in cybersecurity research, artificial intelligence, and defense technology.
Basre previously spent 10 years in Israel’s Unit 8200 as a threat researcher and later led product management at Microsoft Defender.
His co-founder spent seven years developing AI systems for the Israel Defense Forces, including leadership of a joint DARPA-Israeli AI research program.
The new capital will support further product development and expansion across North America, with an emphasis on financial services, government, energy, and other sectors managing complex cybersecurity environments.
Brava aims to provide the evidence and validation infrastructure that security teams and autonomous AI agents need to make dependable decisions enterprise threats.
“Today, most security teams take their detection on faith. We built Brava to replace that hope with proof.”
Idan Basre, Co-Founder Of Brava
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
