Brava Raises $15M to Close the Visibility Gap in Enterprise Cyber Defense

New York, United States, November 4th, 2026, FinanceWire

Cybersecurity automation is advancing quickly, but the systems responsible for protecting enterprise environments still face a basic operational challenge: they cannot detect activity they never see.

That limitation is becoming increasingly relevant as companies introduce more AI applications, cloud services, and AI-assisted development tools. The resulting environments generate growing volumes of security telemetry, but organizations cannot always guarantee that the right information is being collected or that their detection rules are working as intended.

For companies looking to put AI agents in charge of more security operations, this creates an uncomfortable dependency. Automated investigations require alerts and evidence, yet those inputs may already be incomplete.

Brava Security is tackling this problem with a platform designed to establish what an organization's security infrastructure can actually detect. The company has emerged from stealth with $15 million in funding led by F2 Venture Capital and Pitango VC. Axios was the first to report the news.

Its technology uses multiple AI agents to generate the exact telemetry an attack would produce without actually executing it. This gives security teams a way to identify attacks their existing defenses would miss and address the weaknesses without replacing their current infrastructure.

Why Detection Rules Are Not Enough

Security teams have traditionally invested significant effort in developing detection rules and collecting logs from different parts of their environments. However, the existence of these systems does not necessarily mean that an organization has complete visibility into its security posture.

Critical logs may never be collected. Telemetry pipelines can silently break. Detection rules may fail to recognize the activity they were designed to identify.

These problems can create blind spots that remain difficult to identify until an investigation exposes them. They also undermine the effectiveness of AI agents, which depend on the available security evidence to investigate suspicious activity.

Brava co-founder and CEO Idan Basre believes the industry needs to address this weakness before expecting AI to take on more responsibility within the SOC.

“Everyone is racing to put AI in charge of the SOC. You can't automate a decision based on evidence no one ever proved,” said Basre. “We're solving the problem that comes before AI can make the right decision: making sure the security infrastructure actually sees the threats it's supposed to detect.”

Basre encountered the issue firsthand while leading product management for Microsoft Defender, where he observed how limitations in security data could affect the ability to investigate incidents.

Understanding What an Attack Should Look Like

Brava's approach begins with modeling attacker behavior and identifying the telemetry associated with specific attack techniques.

Its Security Operations platform determines what an attack should look like in a particular enterprise environment, including across its different log sources. It then evaluates whether existing security defenses would detect that activity and identifies where the necessary evidence is missing.

The platform can rewrite SIEM detections and data feeds that fail to capture the modeled activity. It also investigates alongside security teams, helping bring together information needed to assess detection weaknesses.

This shifts the focus from simply creating more detection rules to establishing whether those rules work in the environments where they are deployed.

“The hard part of security was never writing detections. It’s knowing exactly what an attack will look like in a specific environment, across all of its log sources, before it ever happens. That’s the problem our models were built to solve,” said co-founder and CTO Itay Gabbay.

Brava's technology generates the telemetry associated with modeled attacks without executing them, allowing enterprises to evaluate their defenses through the evidence those attacks would produce.

Building Around Existing Security Infrastructure

Brava is not asking enterprises to abandon the security products they already depend on. Instead, its platform is designed to integrate with existing systems and help identify where those systems are falling short.

The company supports Splunk, Google SecOps, CrowdStrike, and more than 70 additional sources and destinations. It also says its first insights become available within 10–15 minutes of onboarding, giving organizations a relatively quick path to evaluating its findings.

Its customer base already includes Fortune 100 companies across retail, energy, and hospitality, alongside Cushman & Wakefield and WELL Health, one of Canada's largest healthcare companies.

Cushman & Wakefield CISO Erik Hart described the platform's contribution to the organization's broader SecOps strategy.

“Our SecOps journey is about applying AI where it makes our people more effective, and Brava sits at the center of that. It investigates alongside our team, bringing evidence together so decisions rest on facts rather than on searching,” said Hart.

An Experienced Team Behind the Platform

Brava's founders bring complementary experience in security research and AI development. Basre spent ten years in Unit 8200 as a threat researcher after graduating from the Talpiot program, followed by product management leadership at Microsoft Defender.

Gabbay spent seven years in the IDF building core AI systems, including work on a joint DARPA-Israeli research program.

The company now has approximately 20 employees, including AI researchers and security researchers. Its research and development team is based in Israel, while its commercial operations are expanding across the United States.

$15 Million for the Next Stage of Growth

The company's $15 million seed round was led by Pitango and F2 Venture Capital, with participation from angel investors, including executives from Anthropic, Microsoft, and Check Point.

Brava plans to direct the funding toward accelerating technology development and expanding its commercial presence across North America. It is also preparing to pursue additional opportunities in financial services and government.

The company's emergence comes as enterprises reconsider how security operations should function in an increasingly automated environment. Brava's proposition is that the next generation of AI-driven defense will need more than sophisticated agents. It will need security infrastructure capable of producing reliable evidence about the threats those agents are expected to find.

Contact