Priam.ai

Cover Block

PUBLIC

Field	Value
Name	Priam.ai (Priam Cyber AI)
Tagline	AI and cybersecurity solutions for security operations centers
Headquarters	Cambridge, MA, United States
Founded	2020
Stage	Seed
Business Model	B2B
Industry	Cybersecurity
Technology Type	AI / Machine Learning
Geography	North America (with reported presence in The Woodlands, TX and London, UK)
Growth Profile	Venture Scale
Founding Team	CEO Erman Uzgur, CTO Paolo Di Prodi, James Ro
Funding Label	Seed
Total Disclosed	~$318,000 [Nordic9, September 2025]

Links

PUBLIC

• LinkedIn: https://uk.linkedin.com/company/priam-cyber

Executive Summary

PUBLIC

Priam.ai is an early-stage cybersecurity company building autonomous AI agents for security operations centers, with a flagship platform called AVA aimed at the alert-triage workload that consumes most analyst hours [LinkedIn]. The company was founded in 2020 by Paolo Di Prodi and James Ro and is headquartered in Cambridge, Massachusetts, with reported satellite presence in The Woodlands, Texas and London [Dealroom.co] [StartupSeeker]. Its product positioning centers on the AVA agent, which the company describes as proactively initiating threat hunts, ingesting SIEM alerts, and enriching them with cyber threat intelligence using emerging agent-to-agent (A2A) and Model Context Protocol (MCP) standards [EIN Presswire]. A recently disclosed seed round of approximately $318,000 led by Atlas Ventures was reported in September 2025, with Türk Telekom Ventures and 21x21 Ventures also listed as backers [Nordic9, September 2025] [PitchBook]. The differentiation thesis rests less on the underlying model layer and more on multi-agent interoperability for threat intelligence workflows, an area where standards (A2A, MCP) are still being defined. The next 12 to 18 months will likely turn on whether Priam can convert its joint launch with RST Cloud into reference customers among managed security service providers and enterprise CTI teams [EIN Presswire]. Investors should watch for a priced follow-on round, named design-partner SOCs, and any product telemetry that would substantiate the alert-fatigue ROI claim. The company has not publicly disclosed revenue, headcount, or customer logos, so diligence should treat current visibility as preliminary.

Data Accuracy: YELLOW -- Founders, HQ, and investor names corroborated across LinkedIn, PitchBook, and Dealroom; financial detail rests on a single Nordic9 entry citing PitchBook.

Taxonomy Snapshot

Axis	Value
Stage	Seed
Business Model	B2B
Industry / Vertical	Cybersecurity (SecOps / CTI)
Technology Type	AI agents, A2A and MCP protocols
Geography	North America, with reported UK presence
Growth Profile	Venture Scale
Founding Team	CEO Erman Uzgur, CTO Paolo Di Prodi, James Ro
Funding	Seed, ~$318,000 disclosed

Company Overview

PUBLIC

Priam Cyber AI was founded in 2020 by Paolo Di Prodi and James Ro and operates under the brand Priam.ai [Tracxn] [Crunchbase]. The company is registered with a Cambridge, Massachusetts headquarters address, and third-party databases additionally list operating presence in The Woodlands, Texas and London [Dealroom.co] [StartupSeeker]. Public records do not surface the underlying legal entity name, and the company has not published a detailed founding narrative, so the genesis story should be treated as not publicly available beyond the founders' identification.

The most concrete public milestones are product-led. The company's LinkedIn channel announced its first institutional round led by Atlas Ventures, framing the capital as funding for additional AI capabilities in the AVA platform [LinkedIn]. In 2025, Priam AI and RST Cloud jointly announced what they described as the first cyber threat intelligence AI agents built on the A2A and MCP protocols, a launch that anchors the company's current go-to-market message [EIN Presswire]. In September 2025, Nordic9 reported a seed round of approximately $318,000 led by Atlas Ventures, citing PitchBook as the underlying data source [Nordic9, September 2025] [PitchBook].

Beyond these data points, public reporting on Priam is thin. There is no confirmed press coverage of customer wins, contract values, or hiring milestones, and the company does not surface job listings on the major ATS hosts captured in research. Readers should treat the company as a genuinely early-stage entity whose external footprint is still forming.

Data Accuracy: YELLOW -- Founders and HQ confirmed by Tracxn, Crunchbase, and Dealroom; milestone detail rests on company LinkedIn and a single press wire release.

Product and Technology

MIXED

Priam's product is an AI agent platform for security operations called AVA, described on the company's LinkedIn page as a way to "supercharge your security operations with the power of assisted virtual agents" [LinkedIn] [PUBLIC]. The platform is positioned at the SOC analyst workflow, where alert volume and triage cost are the dominant operational pain points cited by the company in its public materials [StartupSeeker] [PUBLIC].

The more specific technical claim, and the one most useful for evaluating differentiation, comes from the joint announcement with RST Cloud. According to that release, the AVA agent "proactively initiates threat hunts, receives alerts from SIEM systems, and enriches them using detailed cyber threat intelligence," and uses the agent-to-agent (A2A) protocol together with the Model Context Protocol (MCP) to communicate with other specialized security platforms [EIN Presswire] [PUBLIC]. In practical terms, this places Priam in the emerging category of multi-agent CTI tooling, where the bet is that interoperability standards will let lightweight specialist agents compose into workflows that previously required a single monolithic SOAR platform. The company's framing as "world's first" CTI AI agents on A2A and MCP is a vendor claim and should be read as such [EIN Presswire] [PUBLIC].

Underlying model choice, hosting model (SaaS vs. on-prem vs. hybrid), data residency posture, and SIEM integration list are not detailed in public sources. There are no public job postings captured to support tech-stack inference, so the engineering footprint is currently opaque [PRIVATE-adjacent context]. Evaluators should request a live demo, an integration matrix (Splunk, Sentinel, Chronicle, Elastic), and a description of how AVA handles prompt-injection and data-exfiltration risks inherent to agentic systems touching threat intel feeds.

Data Accuracy: ORANGE -- Product framing confirmed via company LinkedIn and one press wire; no independent technical review or customer reference identified.

Market Research and Opportunity

PUBLIC

The market matters now because SOC analyst supply has not kept pace with alert volume, and AI agents are the first technology category in a decade that credibly addresses the triage bottleneck rather than just routing it. Priam sits at the intersection of three established budget lines: SIEM, SOAR, and threat intelligence platforms, all of which are being re-examined as enterprises evaluate agentic automation.

No TAM, SAM, or SOM figures are cited in the structured research for Priam specifically, so any sizing here is drawn from analogous public categories rather than company-supplied numbers. The broader security operations and analytics software category is well established, with named incumbents (Splunk, now Cisco; Microsoft Sentinel; CrowdStrike Falcon LogScale; Palo Alto XSIAM) operating at multi-billion-dollar revenue scale. The narrower CTI software segment, where Priam's first reference launch lives, is smaller and historically dominated by Recorded Future, Mandiant (Google), and Anomali. Because no third-party report in the captured sources puts a dollar figure on either segment, those comparisons are directional rather than quantitative.

The demand drivers most relevant to Priam are operational rather than regulatory: persistent SOC understaffing, growth in alert volume from cloud and identity telemetry, and the maturation of agent interoperability standards (A2A, MCP) that make multi-vendor automation more practical [EIN Presswire]. Adjacent and substitute markets include traditional SOAR platforms (Tines, Torq, Palo Alto XSOAR), AI-native SOC entrants (Prophet Security, Dropzone AI, Radiant Security), and the in-house "build with the SIEM vendor's copilot" path that Microsoft and CrowdStrike are actively pushing. Regulatory tailwinds (SEC cyber disclosure rules, NIS2 in Europe) increase pressure on documented incident response, which favors tooling that produces auditable agent traces, though Priam has not made specific compliance claims in the captured sources.

Sizing claim	Value	Source
Disclosed seed funding	~$318,000	[Nordic9, September 2025]

The analyst takeaway: Priam is operating in a category with clear enterprise budget and active incumbent attention, but the company itself has not published market sizing, so the upside case must be built from analogous comparables rather than from cited company research.

Data Accuracy: ORANGE -- No third-party market sizing specific to Priam captured; category framing inferred from public knowledge of named incumbents.

Competitive Landscape

MIXED

Priam is positioned as an AI-agent challenger in a SOC tooling market dominated by SIEM incumbents and a fast-growing cohort of AI-native SOC startups, with its specific wedge being multi-agent CTI workflows on open protocols [EIN Presswire] [PUBLIC].

The segment map breaks into three layers. The incumbent layer is the SIEM and XDR platforms (Splunk/Cisco, Microsoft Sentinel, CrowdStrike, Palo Alto Networks) that own the data plane and are increasingly bundling their own AI copilots, which compresses the room for standalone analyst-assist tools. The challenger layer is AI-native SOC startups (publicly reported names include Prophet Security, Dropzone AI, Radiant Security, and Tines on the automation side) that have raised substantially larger seed and Series A rounds than Priam's disclosed $318,000 [Nordic9, September 2025] and are competing for the same SOC-augmentation budget. The adjacent layer is dedicated CTI vendors (Recorded Future, Mandiant, Anomali) whose enrichment data is exactly the input Priam's AVA agent consumes, making them simultaneously partners and potential platform competitors if they ship their own agents.

Where Priam has a defensible edge today, based on cited evidence: its early commitment to A2A and MCP as the integration substrate, demonstrated through the joint launch with RST Cloud [EIN Presswire]. If those protocols become the de facto standard for security agent interoperability, an early ecosystem position is genuinely valuable, particularly for managed security service providers that want to avoid lock-in to any single SIEM vendor's agent runtime. That edge is perishable in two specific ways: the protocols are open, so a better-funded competitor can adopt them in weeks, and the major SIEM vendors can credibly extend their own copilots to consume the same standards.

Where Priam is most exposed: distribution. CrowdStrike and Microsoft sell to the same SOC buyer through existing seven-figure contracts, and Tines and Torq have multi-year head starts on workflow templates and channel relationships. Priam has not publicly disclosed customer logos, channel partners beyond RST Cloud, or a sales motion, so the go-to-market remains the largest open question. The most plausible 18-month scenario splits along a single axis: Priam wins if a top-tier MSSP standardizes on A2A-based agent orchestration and selects Priam as a reference implementation, giving it both revenue and a defensible distribution wedge; Priam loses if Microsoft Sentinel's Security Copilot ships first-class A2A support natively, in which case the protocol bet stops being a differentiator and becomes table stakes inside a competitor's bundle.

Opportunity

PUBLIC

The size of the prize, if Priam executes, is a defensible position as the reference agent runtime for cyber threat intelligence in a SOC market that public incumbents have valued in the tens of billions.

The headline opportunity

The single largest outcome Priam could plausibly become is the default open-protocol agent layer for CTI workflows, sitting between SIEM data planes and threat intelligence feeds. The cited evidence that makes this reachable rather than aspirational is narrow but specific: Priam has already shipped a joint product with RST Cloud framed around A2A and MCP, two protocols that are being actively adopted by the broader AI agent ecosystem [EIN Presswire]. If multi-agent interoperability becomes the standard architecture for SOC automation, the early ecosystem participants accrue disproportionate value, in the same way early SOAR vendors did before the category consolidated.

Growth scenarios

Scenario	What happens	Catalyst	Why it's plausible
MSSP standard	A top-25 managed security services provider adopts AVA as its CTI agent layer across customer tenants	A reference deployment extending the RST Cloud partnership into MSSP channels	Joint launch already exists [EIN Presswire]; MSSPs have structural incentive to avoid SIEM-vendor lock-in
Protocol ecosystem winner	Priam becomes one of three or four named A2A reference implementations cited by enterprise buyers	Inclusion in a major analyst category report or open-source consortium	Early public commitment to A2A and MCP predates most competitor announcements [EIN Presswire]
Strategic acquisition	A SIEM, XDR, or CTI incumbent acquires Priam to bolt on agentic CTI capability	A larger competitor ships an AI-SOC product and needs the agent layer	Atlas Ventures backing and Türk Telekom Ventures' strategic profile suggest acquirer-friendly cap table [PitchBook]

What compounding looks like

The flywheel for an agent platform in security is integration density: each new SIEM, EDR, or threat-feed connector AVA supports increases the value of every existing deployment, and each customer's workflow templates become reusable assets for the next. There is also a data dimension: alert-triage decisions made by AVA at one customer can, with appropriate privacy controls, improve enrichment quality for all customers, mirroring the network effect that built Recorded Future's data moat. The captured sources do not yet show this flywheel turning at scale, so it remains a thesis rather than a demonstrated effect.

The size of the win

Credible public comparables anchor the upside. Recorded Future was acquired by Mastercard in 2024 for $2.65 billion, establishing a clear strategic price for a CTI franchise. Splunk was acquired by Cisco for approximately $28 billion, and CrowdStrike trades at a public market cap measured in the tens of billions. If Priam achieves the MSSP-standard scenario above and reaches a Recorded Future-style category position over a multi-year horizon, a strategic exit in the high hundreds of millions to low single-digit billions would not be unprecedented for the category (scenario, not a forecast). At today's disclosed funding of approximately $318,000 [Nordic9, September 2025], the gap between current scale and that outcome is enormous, which is the standard seed-stage shape and is precisely why the next priced round and the first named enterprise references will be the determining diligence events.

Data Accuracy: ORANGE -- Comparable transaction values are public record; their applicability to Priam is a scenario analysis, not a cited forecast.

Sources

PUBLIC

1. [Dealroom.co] Priam company information, funding & investors | https://app.dealroom.co/companies/priam

2. [LinkedIn] PRIAM CYBER AI company page | https://uk.linkedin.com/company/priam-cyber

3. [StartupSeeker] Priam Cyber AI profile | https://startup-seeker.com/company/priam~ai

4. [Tracxn] Priam 2025 Company Profile, Team, Funding, Competitors & Financials | https://tracxn.com/d/companies/priam/__5WDNGBFJBBpF8t7C_5N1VXcGMzxZ7o0B7JHi_ongWVQ

5. [PitchBook] Priam Cyber AI 2025 Company Profile: Valuation, Funding & Investors | https://pitchbook.com/profiles/company/519304-24

6. [CB Insights] Priam Cyber AI - Products, Competitors, Financials, Employees, Headquarters Locations | https://www.cbinsights.com/company/priam-cyber-ai

7. [Crunchbase] Priam Cyber - Company Profile & Funding | https://www.crunchbase.com/organization/priam-cyber

8. [EIN Presswire] Priam AI and RST Cloud Launch World's First CTI AI Agents Powered by A2A and MCP Protocol | https://fox2now.com/business/press-releases/ein-presswire/825834633/priam-ai-and-rst-cloud-launch-worlds-first-cti-ai-agents-powered-by-a2a-and-mcp-protocol/

9. [Nordic9, September 2025] Priam Cyber AI was seeded by Atlas Ventures | https://nordic9.com/news/priam-cyber-ai-was-seeded-by-atlas-ventures/

Data Accuracy: GREEN -- All sources verified and publicly accessible.