Tech Souls, Connected.

The Security Stack Problem: Fig Security Comes Out of Stealth With $38M

Startup founded by Israeli cyber veterans launches from stealth with technology that monitors how changes break detection systems


Enterprise security teams face a growing problem: their own tools are becoming too complex to trust.

Startup Fig Security is stepping into that gap. The company has emerged from stealth with $38 million in seed and Series A funding, aiming to help organizations monitor whether their security detection and response systems are actually working.

The startup was founded by veterans of Israel’s elite cyber and intelligence units 8200 and Mamram, a talent pipeline behind many of today’s cybersecurity startups.


The Problem: Security Systems Break Quietly

Modern enterprises run dozens of security tools connected through pipelines, data lakes, and automation platforms.

That complexity creates a subtle risk.

A small configuration change in one tool can quietly disrupt detection systems elsewhere in the stack—without anyone realizing it.

Think of it like a fire alarm that hasn’t rung in months. Is everything safe—or is the alarm simply broken?

Security teams often don’t know.


Fig’s Approach: Trace Security From Detection Backwards

Fig Security’s platform analyzes how data flows across the entire security infrastructure.

Instead of tracking events forward through systems, the company takes a different approach: it starts with the detection rule itself.

According to CEO and co-founder Gal Shafir, detection is the most important signal.

“Detection or response is the single source of truth,” Shafir explained. “Then we back-trace what needs to happen in the data for that detection to trigger.”

The platform monitors the path from data sources to pipelines, data lakes, and security orchestration platforms, identifying inconsistencies that could weaken security coverage.

When the system detects issues, it alerts security teams in real time.


Simulating Security Before Changes Go Live

Another feature: security simulations.

Fig allows companies to test how new updates—such as patches, rule changes, or infrastructure modifications—might affect detection systems before deployment.

The platform achieves this by sampling data as it flows through infrastructure and building what the company calls “data lineage.”

That lineage maps how data transforms across tools.

The result: security teams can see how upstream changes might silently break downstream detection tools.


Why the Problem Is Getting Worse

Enterprise security stacks are growing more complicated, not less.

The rise of AI-powered tools, automation platforms, and cloud infrastructure has dramatically expanded the number of systems security teams must manage.

At the same time, attackers are also using AI-driven techniques to launch more sophisticated attacks.

That leaves security leaders asking difficult questions:

  • Which defenses actually work?
  • Are detection systems functioning correctly?
  • Can AI-driven security tools be trusted?

Shafir says these concerns surfaced repeatedly while he previously led Google Cloud Security’s global architecture team.

Many CISOs shared the same worry.

“If I don’t trust my detections right now, how can I trust AI telling me everything is fine tomorrow?” they asked.


Early Traction and Growth Plans

Fig launched roughly eight months ago and already reports large enterprise customers in the low double digits.

The company expects to grow that number to 50–100 customers by the end of the year.

The new funding will help the startup:

  • Expand operations in North America
  • Triple its headcount
  • Scale engineering and go-to-market teams

Investors Bet on the Security Data Layer

The funding round attracted a mix of cybersecurity-focused investors and industry veterans.

Key backers include:

  • Team8
  • Ten Eleven Ventures

The round also drew notable security executives, including:

  • Doug Merritt, former CEO of Splunk
  • Rene Bonvanie, former CMO of Palo Alto Networks
  • Founders of Demisto and Siemplify

Their involvement reflects a growing belief that the next cybersecurity battleground isn’t just tools—but visibility into how those tools actually function together.


TL;DR:
Cybersecurity startup Fig Security emerged from stealth with $38M in funding to help enterprises monitor whether their detection and response systems are functioning correctly. The platform traces data flows across complex security stacks, alerting teams when infrastructure changes break detection capabilities.

AI summary

  • Fig Security raises $38M seed + Series A
  • Platform tracks data lineage across security stacks
  • Detects when infrastructure changes break security detections
  • Allows simulation of updates before deployment
  • Startup plans expansion in North America and hiring growth
Share this article
Shareable URL
Prev Post

Tech Money vs. Wealth Tax: The Silicon Valley Race to Watch in 2026

Next Post

Apple Pushes MacBook Pro Performance With New M5 Pro and M5 Max

Read next