Mave raises $28M to automate security investigations across existing tools
The AMW Read
The round adds an incremental enterprise operations AI update, with reported customer traction but no disclosed evidence of segment-wide impact.
Mave raises $28M to automate security investigations across existing tools
Mave announced a $28 million Series A on October 22, led by Red Dot Capital Partners. Lumir Growth Partners joined existing investors Dell Technologies Capital and Emerge Ventures. Total funding reached $34 million; valuation was not disclosed. The company will fund AI research, enterprise product improvements, and global expansion. Its generally available platform connects existing security tools to automate detection, investigation, and response without requiring a new central database.
The deal places Mave within enterprise operations AI, where integration and execution controls shape the value of autonomous systems. When an alert arrives, its agents query connected tools in their native query languages and combine results into an incident account. This approach addresses the manual work of reconstructing events across separate systems. Security teams define which responses run automatically and which require approval. Integrations begin with read-only access, and queries, decisions, and actions are logged. These controls make operational oversight central to the product's enterprise proposition.
For builders and investors, the concrete diligence question is how reliably cross-tool investigations support containment under customer-defined permissions. Mave says it operates in more than 200 security operations centers, including Fortune 50 companies and global managed security service providers. It reports seven-figure contracts and ARR growth above 400% over the past year, without disclosing absolute ARR. Those claims suggest commercial traction, but they do not establish investigation accuracy or deployment economics. Buyers should test false-positive handling, approval rules, and audit records against their own incident workflows.