Above Security, an Israeli-founded cybersecurity startup, has emerged from stealth with $50 million in funding as it seeks to address growing insider threats driven by the rise of AI systems inside organizations.
The funding round was led by Ballistic Ventures, Merlin Ventures and Norwest, with participation from Jump Capital and QPV Ventures, the company said Monday.
Founded in 2025 by Aviv Nahum and Amir Boldo, both veterans of elite Unit 8200 intelligence branches, the company focuses on detecting risks originating from within organizations, including employees and, increasingly, autonomous AI systems.
“AI agents are becoming insiders in everything but name,” Nahum said. “They have access, they take action, and they operate at machine speed, yet they’re largely invisible to existing insider risk programs.”
The company said its platform is already generating revenue, with enterprise customers deploying the system within minutes and without requiring predefined rules or policies.
Expanding definition of insider risk
Insider threats have long posed a challenge for organizations, with existing tools such as data loss prevention and behavior analytics often struggling to detect or interpret internal activity accurately.
According to IBM data cited by the company, about 45% of breaches are linked to non-malicious human or system errors, highlighting the extent to which insider risk is driven by negligence rather than intent.
Above Security argues that the problem is becoming more complex as AI tools gain access to internal systems and begin acting autonomously on behalf of employees.
“You can’t secure tomorrow’s organization if your definition of ‘insider’ stops at employees,” said Amir Boldo, the company’s co-founder and chief product and technology officer.
The platform focuses on behavior and intent
The company’s platform uses AI-driven analysis to track behavior across identity systems, endpoints, software platforms and AI environments. Instead of relying on static rules or anomaly alerts, the system attempts to reconstruct activity patterns and determine intent, producing timelines that security, legal and human resources teams can act on.
Matt Wilmot, chief information security officer at Merlin Entertainments, said the system helped identify incidents that might otherwise have gone unnoticed.
“Our biggest challenge was piecing together user activity across scattered systems,” he said. “Above delivered complete behavioral timelines and surfaced critical incidents within days that we would have otherwise missed.”
The company said its approach is designed to reduce false positives and limit the need for manual investigations, a longstanding challenge in cybersecurity operations.
Investors cite growing risk
Investors said the rise of AI has introduced new risks that existing security models are not designed to handle.
“The rapid adoption of AI has introduced new risks that require dedicated solutions,” Boldo said.
Shay Michel, managing partner at Merlin Ventures, said insider risk is likely to increase as organizations rely more heavily on automation.
“In a future where AI operates complex systems, humans will still supervise them, but that also increases the impact of human error and insider threats,” he said.
Dror Nahumi, general partner at Norwest, said insider threats remain one of the least addressed areas in cybersecurity, accounting for a significant share of incidents.
Early traction and integrations
Above Security said it has been selected as one of 35 companies in the 2026 Cybersecurity Startup Accelerator run by CrowdStrike, Amazon Web Services and NVIDIA, and has already built integrations across identity, endpoint and SaaS systems.
The platform targets organizations with more than 1,000 employees, particularly those operating heavily in cloud-based environments.
The company said it is now offering demonstrations and sample reports to potential customers.