Exaforce, a Bay Area company building an AI-native platform for security operations, has raised $125 million in a Series B funding round. CEO Ankur Singla founded the company on a straightforward premise: most security tools respond to attacks after the fact, and that is no longer fast enough.
The threat environment has changed considerably. AI-assisted attacks increased by 72% compared to 2024, and phishing attempts surged 1,265% as attackers adopted generative AI tools to scale their campaigns. Enterprises now face threats that adapt in real time, which means security teams need tools that can keep up, not just catch up. The round comes just one year after a $75 million Series A, bringing Exaforce's total raised to $200 million. Investors in the Series B include HarbourVest, Peak XV, Mayfield, Khosla Ventures, Seligman Ventures, and AICONIC.
To understand what Exaforce does, it helps to understand how most security operations centers work. A SOC, short for security operations center, is the team and set of tools an organization uses to monitor its systems, spot threats, and respond to incidents. Most AI-powered SOC tools today are reactive: an alert fires, and then the system begins trying to piece together what happened. On a typical investigation, that process can require hundreds of queries and many minutes before analysts reach any conclusion.
Exaforce builds the picture before the alert, not after. As data flows in, the platform constructs and continuously updates what the company calls a real-time security knowledge graph, linking security events to user identities, access permissions, cloud activity, file changes, and more. When a security team starts an investigation, the relevant context is already there. The company says this reduces investigation time by a factor of ten compared to conventional AI SOC tools.
The approach also affects accuracy. When agents can follow verified connections between events, identities, and resources rather than inferring relationships from scattered log files, they produce fewer false alarms and more reliable recommendations for how to respond.
"The biggest opportunity in enterprise security is flipping the economics, so that defenders, not attackers, hold the leverage. When the cost of defense drops by an order of magnitude, the entire calculus of security changes. Exaforce is the architecture that makes that possible." — Vinod Khosla, founder of Khosla Ventures
The new capital will go toward several areas. On the product side, Exaforce plans to expand its multi-model AI capabilities, a design where separate AI models handle specific security tasks instead of routing everything through one system. The company will also invest in its knowledge graph infrastructure, which underpins how quickly agents can retrieve context during an investigation.
Geographically, Exaforce is targeting Japan and Europe as its next major markets. The company will also expand its MDR service, which stands for managed detection and response. MDR is essentially a managed option where Exaforce's own analysts and AI agents run the platform on behalf of a client around the clock, rather than the client operating it themselves. Hiring, customer support, and research investment are also included in the plan.
"We built Exaforce to be the platform defenders actually work in, not just an AI layer on top of existing tools. It starts with a real-time knowledge graph that gives agents complete context from the start, and extends into rich investigation and visualization experiences that put security engineers and AI agents on the same page. This funding lets us deepen that platform and bring it to security teams on a global scale." — Ankur Singla, CEO of Exaforce
Exaforce is headquartered in the Bay Area and has grown to more than 130 employees over the past year. The leadership team includes Ankur Singla as CEO, alongside executives covering engineering, product, and customer engineering.
The product is built around four AI agents called Exabots. Each one covers a distinct stage of the security workflow: detection, triage, investigation, and response. These correspond roughly to four roles a large security team would typically hire separate specialists to fill. Organizations can run the platform with their own staff or hand operations over to Exaforce through its MDR service.
Clients come from healthcare, technology, financial services, and other sectors that are frequently targeted. Accton Technology reported a 94% reduction in mean time to investigate after adopting the platform. Invisible, an AI services company, saw the equivalent of more than six full-time employees' worth of work returned to its security team each month. Exaforce has appeared in reports from Gartner, GigaOm, and Latio, and was selected for the 2025 AWS Startups Generative AI Accelerator.
Exaforce has now raised $200 million in total. The Series A of $75 million was followed one year later by this Series B. Series B participants include Khosla Ventures, Mayfield, Peak XV Partners, HarbourVest, Seligman Ventures, and AICONIC. The Series A included HarbourVest, Peak XV, Mayfield, Khosla Ventures, and Seligman Ventures. Touring Capital, Thomvest, and EDB Singapore are among the earlier backers.
The round lands at an active moment for the sector. In 2025, 144 AI security deals closed, making it the most active investment category in cybersecurity for that year. Exaforce is among the better-funded companies in the space, backed by investors who believe the cost structure of enterprise security is about to change in defenders' favor.
