The average security analyst spends about 11 minutes inside Mave's platform. They log in roughly seven times a day. This is not a sign of disengagement, but the company's core metric. The idea is that the AI does the heavy lifting of investigation, so the human only needs to step in for the final, critical decisions.
Founded in 2025, Mave is betting that the future of security operations is not another data lake or a monolithic platform, but an intelligent layer that sits on top of the tools a company already owns. It connects to existing security information and event management (SIEM) systems, endpoint detection tools, and firewalls, then uses AI agents to autonomously investigate alerts, hunt for threats, and coordinate responses [Mave, retrieved 2026]. The company emerged from stealth in October 2026 with a combined $34 million in seed and Series A funding [SiliconANGLE, October 2026].
The wedge: avoiding the data tax
The classic problem in security operations is fragmentation. Teams use a dozen different tools, each generating its own alerts and storing its own data. Moving that data to a central system for analysis incurs what Mave calls a "data tax",enormous costs in engineering time, cloud storage, and processing power [Mave, retrieved 2026]. Mave's approach is to leave the data where it is. Its agents operate across the connected tools, pulling context on-demand to investigate an incident without requiring a massive, centralized ingestion pipeline [SiliconANGLE, October 2026].
This architecture is particularly appealing to two types of customers. First, large enterprises in regulated industries like finance and healthcare, where data sovereignty and on-premise deployment are non-negotiable [Seekr, 2026]. Second, managed security service providers (MSSPs), who can use Mave's platform to manage security for hundreds of downstream clients from a single pane of glass [SiliconANGLE, October 2026].
The team behind the agents
The founders bring a specific pedigree to the challenge. CEO Raziel Oren and CTO Guy Eshel are both veterans of Israel's elite Unit 8200 intelligence unit, a common breeding ground for cybersecurity founders [Ventureburn, retrieved 2026]. Oren previously led go-to-market at Wing Security, while Eshel was the first employee and later VP of R&D at Alterya, a blockchain analytics company acquired by Chainalysis [The Top Voices, October 2026] [Ynet News, October 2026].
This background informs the product's focus. It is less about building flashy new detection algorithms and more about the gritty, operational work of automating workflows and making disparate systems work together under pressure,a classic intelligence-community problem.
| Founder | Role | Key Background |
|---|---|---|
| Raziel Oren | Co-founder & CEO | Unit 8200 veteran; former GTM lead, Wing Security |
| Guy Eshel | Co-founder & CTO | Unit 8200 veteran; first employee & former VP R&D, Alterya (acquired by Chainalysis) |
Early traction in a crowded field
Mave is not launching into a greenfield. The market for security orchestration, automation, and response (SOAR) and extended detection and response (XDR) is crowded with well-funded incumbents. Mave's early traction suggests it has found a wedge. The company reports its platform is already running in more than 200 security operations centers globally, including those of Fortune 50 companies [Ran Erez - RE.FOCUS | LinkedIn, retrieved 2026] [Calcalist Tech, October 2026].
Its $34 million war chest, raised in quick succession, will be used for frontier AI research, product development, and international expansion [SiliconANGLE, October 2026]. The company had approximately 20-30 employees at the time of its Series A and plans to more than double that headcount [Business Insider, October 2026] [SiliconANGLE, October 2026].
Where the wheels could come off
The bet is ambitious, and the risks are not trivial. Mave's success hinges on several factors that remain unproven at scale.
- Integration depth. The promise of smooth operation across any tool stack is immense, but the reality of maintaining robust, reliable integrations with hundreds of potential data sources is an engineering marathon. A single brittle connection could break an automated investigation chain.
- The AI black box. In regulated industries, explainability is paramount. If an AI agent recommends shutting down a critical server, the security team needs to know why. Proving the reliability and auditability of its AI's decision-making will be a key hurdle for enterprise adoption.
- Competitive response. Large platform vendors like Palo Alto Networks or CrowdStrike could decide to build or buy similar agentic capabilities, leveraging their existing market dominance and customer relationships. Mave's answer is that its agnostic, multi-vendor approach is its moat; it has no incentive to favor one tool over another.
The company's early focus on regulated sectors and MSSPs is a smart way to build credibility. If it can prove its system works under the strictest compliance regimes and for service providers managing hundreds of clients, it becomes a harder tool for an enterprise to dismiss.
The next twelve months
For a company that just announced its existence, the next year is about moving from early deployment to hardened, scaled production. Key milestones will be landing a publicly referenceable Fortune 50 customer and expanding its partnership channel with MSSPs. The funding provides a long runway, but the clock is ticking to demonstrate that its AI agents can reliably handle the complexity of real-world, multi-vendor security environments.
A back-of-the-envelope calculation based on their reported metrics is revealing. If an analyst spends 11 minutes per session, 7.3 times a day, that's about 80 minutes of platform engagement daily. The implication is that the platform is designed for frequent, decisive check-ins rather than all-day monitoring. The unit of value isn't seat time, it's closed investigations.
Ultimately, Mave isn't trying to beat the next next-generation SIEM. It's aiming at the expensive, human-driven managed detection and response (MDR) services that companies hire when their own teams are overwhelmed. Its real competition is the outsourced SOC analyst. If its agents can automate enough of that work to make an in-house team dramatically more efficient, that's a cost equation any CISO will want to run.
Sources
- [Mave, retrieved 2026] AI Security Operations Platform | https://www.mave.com/
- [SiliconANGLE, October 2026] Mave raises $34M to pull existing security tools into one agentic system | https://siliconangle.com/2026/10/22/mave-raises-34m-to-pull-existing-security-tools-into-one-agentic-system/
- [Calcalist Tech, October 2026] Cyber startup Mave raises $28 million Series A to automate threat investigations | https://www.calcalistech.com/ctechnews/article/h1sq8ip2mx
- [The Top Voices, October 2026] Mave Launches With $34M in Funding | https://thetopvoices.com/news/mave-launches-with-34m-agentic-ai-security-platform
- [Ynet News, October 2026] Israeli AI cybersecurity startup Mave raises $34 million to automate threat detection | https://www.ynetnews.com/business/article/symkvnpngg
- [Business Insider, October 2026] This startup raised $34 million to help security teams keep up with AI threats. Read the pitch deck. | https://www.businessinsider.com/mave-startup-cybersecurity-funding-ai-agents-pitch-deck-2026-10
- [Ventureburn, retrieved 2026] Unnamed article referencing Unit 8200 background | Source not captured
- [Seekr, 2026] Top 10 Enterprise AI Platforms for Regulated Industries (2026) | https://www.seekr.com/resource/top-enterprise-ai-platforms-regulated-industries/
- [Ran Erez - RE.FOCUS | LinkedIn, retrieved 2026] LinkedIn post referencing 200 SOCs | https://www.linkedin.com/in/ran-erez/
- [Amir Ezra - Tel Aviv Stock Exchange | LinkedIn, retrieved 2026] LinkedIn post referencing session metrics | https://www.linkedin.com/in/amir-ezra-cyber/