Corma closes $60M Sequoia-led seed to build defensive cyber foundation models
The AMW Read
Large Sequoia-led seed for a new defensive-cyber foundation-model entrant updates the enterprise-ops player map; impact stays sub-segment, and $60M is below the capital-cycle threshold.
Corma closes $60M Sequoia-led seed to build defensive cyber foundation models
Corma, a cybersecurity AI model developer based in Tel Aviv and San Francisco, announced a $60 million seed round led by Sequoia Capital, with Khosla Ventures and Coatue also participating. No valuation was disclosed. The company is building what it describes as a foundation model purpose-built for defensive cybersecurity—oriented to mining and correlating audit logs, security events, and network flows—rather than relying on general-purpose large models. It packages that model as Corma Workforce, an agent layer that sits on top of the security tools enterprises already run, and markets both high speed and low cost plus full on-premises deployment for sensitive environments.
The raise sits inside a widening asymmetry Sequoia and the company call a defense gap: attackers can already use widely available foundation models to automate vulnerability hunting and intrusion planning, while defenders still lean on human analysts to spot anomalies in relentless streams of auth logs, traffic records, and endpoint behavior. A dedicated defensive model plus agent workforce is a direct bet that vertical foundation models and orchestration—not another generic LLM wrapper—will close that productivity gap inside the security operations stack, adjacent to enterprise ops AI rather than general foundation-model competition.
For builders and buyers, the concrete signal is procurement-ready packaging: agents that reuse existing security product investments, plus on-prem deployment as a first-class path for regulated or high-sensitivity networks. Investors should read the Sequoia–Khosla–Coatue seed as early capital concentrating on domain-specific defensive models and agentic SOC workflows, not broad cybersecurity SaaS—watch whether Corma’s correlation depth and on-prem economics translate into CISO-level displacement of analyst load before the next financing.
#Corma #CybersecurityAI #Sequoia #FoundationModels #EnterpriseSecurity #AIAgents