Obsidian Security Inc. raises $85M in Series D

Obsidian Security Inc. has secured $85 million in a Series D funding round, elevating its valuation to $1.1 billion. This financing effort, led by Crescent Cove Advisor with participation from Greylock Partners and Menlo Ventures, underscores the growing demand for advanced cybersecurity solutions as enterprises increasingly utilize autonomous AI agents to interact with cloud applications. The capital will facilitate Obsidian's expansion in research, development, and its go-to-market strategy amid a rising security focus on non-human identities.

CEO Hasan Imam disclosed that the raised funds would accelerate the company's initiatives to address the challenges posed by AI agents accessing corporate data and software through third-party applications. Imam emphasized the burgeoning growth among Obsidian's client base, with significant revenue coming from its largest users—over 14 customers pay more than $1 million annually, while more than 100 exceed $100,000 per year. With more than 65% of its enterprise customers allowing AI agents access to crucial data, Obsidian aims to pioneer solutions beyond traditional identity management frameworks, which are inadequate for the rapid, non-human interactions that define these agents.

Imam highlighted the necessity for enhanced governance capabilities to monitor and control non-human identities. While current solutions focus on provisioned access, Obsidian aims to enforce runtime security measures that prevent undesirable actions within third-party applications, addressing the unique operational dynamics introduced by AI agents. Such challenges signify a seismic shift in the cybersecurity landscape, where detective measures are insufficient given the speed at which AI agents operate.

This movement reflects a broader shift in enterprise IT architectures as AI takes on roles traditionally managed by human employees. The sector is bracing for increased complexity as AI agents assume distinct identities and begin working across multifaceted platforms. With these autonomous systems touching critical resources and engaging with data at unprecedented speeds, Obsidian positions itself at the forefront of an emerging segment within enterprise cybersecurity.

Looking ahead, the company anticipates that securing interactions among applications, AI agents, and cloud services will become vital as automation deepens. Regulatory environments may need updating to account for these evolving security challenges. Obsidian's strategy suggests a pivot from reactive to proactive cybersecurity management, integrating governance and prevention as foundational elements in the AI-driven corporate ecosystem.