San Francisco-based Northstar Security has emerged from stealth with $7 million in seed funding to develop an AI-powered platform that identifies cybersecurity risks hidden across disconnected enterprise systems.
The investment was led by Wing Venture Capital, with participation from MVP, Outliers and cybersecurity industry veterans including Gerhard Eschelbeck, Renaud Deraison and Justin Somaini.
Founded by Amer Deeba and Ed Rowe, Northstar is developing a platform that connects security and IT data to help organizations identify dangerous combinations of vulnerabilities, permissions and infrastructure weaknesses.
The financing will support product development, hiring and commercial expansion.
The Problem With Disconnected Security Tools
Large enterprises typically rely on numerous cybersecurity products.
One system monitors devices, another manages employee identities, while others identify software vulnerabilities, cloud infrastructure risks and sensitive data.
Each tool can identify potential problems within its own environment.
However, security incidents frequently involve connections between several systems.
For example, an employee laptop may have an unpatched vulnerability.
That problem becomes considerably more serious if the employee has administrative privileges and access to sensitive financial information.
Individually, each system may report a separate finding.
But the combination represents a much more significant security risk.
Northstar is building software designed to identify these relationships automatically.
How the Security Context Graph Works
Northstar's central technology is a real-time Security Context Graph.
The platform connects information from enterprise security and IT tools, creating a model of relationships between users, devices, applications, permissions, vulnerabilities and sensitive resources.
Rather than simply displaying individual alerts, it attempts to identify how multiple security weaknesses interact.
These dangerous combinations are sometimes described as toxic combinations.
For example, the platform could connect an exposed application, an overly privileged identity and access to a sensitive database.
Understanding these relationships allows security teams to prioritize risks based on their potential consequences.
Northstar also makes this information available to AI agents, allowing them to investigate security findings using a broader understanding of the enterprise environment.
AI Agents That Investigate and Resolve Risks
Northstar wants to move beyond identifying cybersecurity problems toward helping organizations resolve them.
Its AI agents use the Security Context Graph to understand the relationships between different findings.
An agent could investigate a vulnerability, determine which systems are exposed, identify the relevant permissions and recommend remediation.
The platform is also designed to support integrations with external AI agents through the Model Context Protocol, or MCP.
This would allow organizations to build their own security agents while using Northstar as a shared source of contextual information.
However, automated security actions require careful controls.
Changing permissions, disabling accounts or modifying infrastructure can interrupt legitimate operations when performed incorrectly.
Northstar must demonstrate that its agents can investigate and act reliably while maintaining appropriate human oversight.
Who Founded Northstar Security?
Northstar was founded by CEO Amer Deeba and CTO Ed Rowe.
Deeba previously held leadership positions at Qualys and co-founded Normalyze, a data security posture management company acquired by Proofpoint.
Rowe brings experience developing enterprise software and security infrastructure.
The company also includes Alex MacDonald and Chris Brichford, who have worked with the founding team on its technology.
Their backgrounds informed Northstar's focus on a common problem in enterprise cybersecurity: organizations often possess extensive security information but lack an integrated understanding of the risks it represents.
Competition in Agentic Cybersecurity
Northstar is entering an increasingly competitive segment of cybersecurity.
Established vendors already offer vulnerability management, identity security, attack surface management and automated response platforms.
New AI-focused companies are also developing agents capable of investigating threats and recommending remediation.
Northstar's positioning depends on its contextual data infrastructure.
The company argues that AI agents cannot make reliable security decisions without an accurate understanding of how enterprise systems are connected.
Its competitive advantage will therefore depend on building a sufficiently comprehensive and continuously updated model of the customer's environment.
What Comes Next?
Northstar will use its $7 million investment to expand product development and bring its technology to more enterprise customers.
The company has not disclosed revenue, customer numbers or a valuation alongside the financing.
Its next challenge is proving that connecting security data produces measurable operational improvements.
This includes reducing investigation time, identifying important risks that existing tools miss and enabling safe automated remediation.
Northstar's longer-term opportunity is to become the contextual infrastructure underlying enterprise cybersecurity agents, rather than another product generating additional alerts.