The average enterprise security team has a dashboard problem. They have one for vulnerabilities, another for identity, a third for cloud posture, and a dozen more for every other silo. The data is abundant, but the context connecting a misconfigured server to the developer who owns it, and the sensitive data stored on it, is often missing. Northstar Security, emerging from stealth this week, is betting that the next layer of defense isn't another dashboard, but a map. Specifically, a real-time Security Context Graph that connects data from over 70 systems so that AI agents can finally understand what to fix, and why it matters [SiliconANGLE, October 2026].
It is a classic infrastructure play. Instead of selling a new security widget, Northstar is selling the semantic plumbing that makes all the existing widgets smarter. The company's platform ingests data from tools like Okta, GitHub, and Workday, building a live graph of relationships between assets, identities, code, and vulnerabilities [SiliconANGLE, October 2026]. This graph then serves as the reasoning layer for AI agents, which can prioritize risks and coordinate remediation workflows, ostensibly with human oversight. The initial $7 million seed round, led by Wing Venture Capital, suggests investors see a market for this connective tissue [SiliconANGLE, October 2026].
The wedge is context, not control
Northstar's positioning is a direct response to tool sprawl. Security teams are drowning in alerts but starved for insight. The company's wedge is the argument that you cannot automate intelligent response without a unified understanding of your environment. Their graph aims to surface what they call 'toxic combinations',dangerous intersections of a vulnerability, an over-permissioned identity, and exposed critical data that would be missed when looking at any one system in isolation [northstar.io, retrieved 2026].
Early use cases focus on giving AI agents the grounding they lack. "Our team uses Northstar's agentic workflows to continuously remediate security issues," said Randy Barr, CISO of Cequence Security, an early customer cited in the launch [SiliconANGLE, October 2026]. In practice, this could mean an agent detecting a critical vulnerability in a cloud container, checking the graph to find the owning team and repository in GitHub, and automatically generating a fix pull request or assigning a ticket, all within a governed workflow.
A founder pair with depth and baggage
The bet is being placed by a duo with substantial, if complicated, Silicon Valley pedigrees. Co-founder and CEO Amer Deeba is a veteran of the security and enterprise software world, having held senior leadership roles at Qualys and served as COO of Moogsoft [SiliconANGLE, October 2026][TechCrunch, November 2018]. He also co-founded data-security-posture-management company Normalyze, which was acquired by Proofpoint in 2024 [SiliconANGLE, October 2026][Tracxn, October 2024].
His partner, co-founder and CTO Ed Rowe, brings deep engineering leadership from his time as CTO at Farmers Business Network and SVP of Engineering at AppDynamics [SiliconANGLE, October 2026]. The two first worked together at Adobe in the late 1990s, giving their partnership a long runway [SiliconANGLE, October 2026].
The team's experience is a clear asset, but it comes with a significant reputational footnote. In 2018, Amer Deeba settled SEC charges of insider trading related to his time at Qualys, paying a penalty of $581,170 after allegedly tipping off his brothers about a missed sales forecast [Reuters, August 2018][ZDNET, retrieved 2026]. For investors and future enterprise customers, this is a known quantity that was presumably vetted during the funding process. It remains a part of the founder's public record that cannot be ignored.
| Role | Name | Key Prior Experience |
|---|---|---|
| Co-founder & CEO | Amer Deeba | Qualys (Chief Commercial Officer), Normalyze (co-founder, acquired by Proofpoint), Moogsoft (COO) |
| Co-founder & CTO | Ed Rowe | Farmers Business Network (CTO), AppDynamics (SVP of Engineering), Adobe |
The crowded field of AI for security
Northstar is entering a market where 'AI-powered' has become a mandatory checkbox. The differentiation claim rests on the graph being the enabling substrate, not the AI agent itself. They are not building another chatbot for security operations centers; they are building the knowledge base that any agent, internal or third-party, would need to be useful. This is a defensible position if they can achieve deep, reliable integrations faster than incumbents can build similar context layers internally.
The competitive landscape includes several axes:
- Legacy SIEM and SOAR platforms like Splunk and Palo Alto Networks Cortex XSOAR, which have context but are often monolithic and complex to configure for automated remediation.
- Cloud-native security posture management (CSPM) tools from Wiz, Orca Security, and Lacework, which have rich cloud context but less depth into on-premise identity and developer toolchains.
- Pure-play AI security assistants like Contrast Security's offerings, which focus on application security. Northstar's broader integration scope is its point of contrast.
The risk for Northstar is that its value depends on being the most connected player. If large platform vendors decide to build or buy their own universal security graph, a seed-stage startup could be squeezed. Their answer will be speed and focus,building the best graph without the distraction of also selling endpoint protection or firewalls.
What the seed round will fuel
The $7 million seed, with participation from MVP Ventures, Outliers Venture Capital, and angels like former Qualys CTO Gerhard Eschelbeck, is earmarked for product development and go-to-market efforts [SiliconANGLE, October 2026]. The company says its platform is already available to customers, indicating a live product at launch. A single open role for a Software Engineer in the San Francisco Bay Area suggests hiring is beginning cautiously [PERPLEXITY SONAR PRO BRIEF, October 2026].
The next twelve months will be about proving that the graph creates tangible operational use. Key milestones will be landing a handful of additional named enterprise customers beyond Cequence Security, expanding the integration count credibly beyond the reported 70, and demonstrating that AI agents using their context can measurably reduce mean time to remediation. A Series A round will likely depend on showing that security teams are willing to pay for context as a service.
Pulling a number from the air, if a typical enterprise security engineer spends a third of their week manually correlating data across tools to prioritize alerts, that's about 13 hours of labor weekly. A platform that automates that correlation and prioritization could, in theory, give that time back. Whether that saved time converts into a seven-figure software contract is the multi-million dollar question Northstar must answer. To succeed, they will need to become the indispensable connective layer that legacy giants like Splunk have struggled to be, not by replacing the dashboard, but by making every dashboard behind it smarter.
Sources
- [SiliconANGLE, October 2026] Northstar launches with $7M to give AI agents the context to act on security risks | https://siliconangle.com/2026/10/28/northstar-launches-with-7m-to-give-ai-agents-the-context-to-act-on-security-risks/
- [northstar.io, retrieved 2026] Northstar Security website | https://www.northstar.io/
- [TechCrunch, November 2018] Growing pains at venture-backed Moogsoft lead to layoffs | https://techcrunch.com/2018/11/09/growing-pains-at-venture-backed-moogsoft-lead-to-layoffs/
- [Tracxn, October 2024] Normalyze acquisition by Proofpoint | https://tracxn.com/d/companies/normalyze/__nsiMZ6I0e2S5RgLJSTlzAqjqTgWr9ePZqgqgqgqgqgqg
- [Reuters, August 2018] Silicon Valley exec pays SEC insider trading fine for tip-off to brothers | https://www.reuters.com/article/business/silicon-valley-exec-pays-sec-insider-trading-fine-for-tip-off-to-brothers-idUSL2N1VL1KP/
- [ZDNET, retrieved 2026] Report on SEC penalty | https://www.zdnet.com/article/qualys-executive-amer-deeba-pays-581170-to-settle-sec-insider-trading-charges/
- [PERPLEXITY SONAR PRO BRIEF, October 2026] Research brief on Northstar Security
- [RuntimeWire, October 2026] Northstar raises $7M to give security agents a map of enterprise risk | https://runtimewire.com/article/northstar-security-7m-amer-deeba