Backed by Wing Venture Capital, Northstar exposes toxic combinations lurking across disconnected security systems and gives AI agents the context to act
SAN FRANCISCO, Oct. 28, 2026 — Northstar Security today emerged from stealth with $7 million in seed funding led by Wing Venture Capital to address one of cybersecurity’s biggest challenges: security teams have more data and tools than ever, but still lack the connected context needed to understand risk and take action. Northstar’s agentic AI platform connects security and IT data through a real-time Security Context Graph, uncovering hidden risks and toxic combinations while enabling AI agents to investigate and help resolve them. The funding will accelerate product development, team expansion and go-to-market efforts.
Security Has a Context Problem
Enterprises have spent billions on tools to detect threats, vulnerabilities and misconfigurations, yet critical security information remains fragmented across disconnected systems. A vulnerability, unmanaged device or overprivileged identity may appear manageable in isolation. When combined, they can create dangerous exposures that put critical business systems at risk.
Uncovering these toxic combinations requires analysts to piece together information across multiple tools, investigate relationships, assess business impact and coordinate fixes. The process can take hours, leaving security teams buried in manual work.
Northstar changes that equation by creating the context foundation that makes agentic security possible. Its real-time Security Context Graph maps relationships among assets, identities, vulnerabilities, applications and business systems to give both humans and AI agents a shared understanding of the environment. With that foundation, Northstar can answer complex security questions, identify previously hidden exposures, and orchestrate autonomous remediation workflows, with human oversight where appropriate.
“Security teams are drowning in data but starving for context,” said Amer Deeba, CEO and co-founder of Northstar Security. “We’ve spent decades building better tools to find security problems, but connecting the dots and fixing them remains painfully manual. We believe the next generation of security won’t be defined by more dashboards or alerts. It will be powered by AI agents that understand the full context of an organization’s environment and can take proactive action. That’s why we built Northstar: to provide the context foundation for agentic security and move the industry from finding problems to continuously fixing them.”
Led by Wing Venture Capital, the round also included participation from MVP, Outliers and cybersecurity industry veterans Gerhard Eschelbeck, Renaud Deraison and Justin Somaini.
“The cybersecurity industry has spent billions building better ways to find problems, yet security teams are still struggling to keep up with the risks they’ve uncovered,” said Jake Flomenberg, Partner at Wing Venture Capital. “Northstar is challenging decades of conventional thinking by giving AI agents the context to understand what’s happening and the ability to do something about it. We believe it has the potential to fundamentally rewrite the security playbook.”
From Disconnected Signals to Autonomous Action
Consider a common security problem: a company laptop without endpoint protection. Identifying the device may require navigating six different tools to determine who owns it, what systems it can access and whether it poses a meaningful risk. Hours later, the analyst may have the answers, but the device remains unprotected.
With Northstar, an analyst can ask those questions in natural language and quickly see the relationships that matter. The platform can reveal, for example, that an unprotected laptop belongs to a privileged user with access to a business-critical payroll system. Northstar’s AI agents can then initiate remediation workflows to deploy endpoint protection, notify the owner or restrict risky access, with human oversight where appropriate.
Northstar also makes its Security Context Graph available to external AI agents through Model Context Protocol (MCP), enabling organizations to build their own security workflows using Claude and other AI tools. The result is a fundamental shift from investigating isolated security findings to understanding interconnected risks and taking action to resolve them.
“Security teams don’t need another dashboard generating more findings. We need to connect the data we already have, understand what matters, and turn that context into action,” said Randy Barr, CISO, Cequence Security. “Northstar lets us do exactly that, using agentic workflows to continuously identify and remediate security issues. This is where security is heading: from finding problems to continuously fixing them.”
Northstar’s platform brings together three capabilities:
- Connected Security Context: A real-time Security Context Graph that unifies assets, identities, vulnerabilities, configurations, and business relationships across existing enterprise systems.
- Context-Driven Risk Intelligence: AI-powered analysis that answers complex questions, exposes hidden risks and toxic combinations, and prioritizes issues based on their potential business impact.
- Agentic Remediation: Intelligent agents and workflows that turn findings into actionable outcomes, coordinating fixes across systems and teams with appropriate human oversight.
Today, Northstar supports more than 70 integrations across enterprise security and IT systems, including AWS, Google Cloud, Microsoft Defender, Microsoft Entra, Okta, GitHub, Slack, Workday, and Zendesk.
“The next generation of security operations won’t be measured by how many alerts teams can process, but by how quickly they can proactively resolve risks,” said Gerhard Eschelbeck, former CISO of Google and an investor in Northstar Security. “Northstar is enabling that shift by giving AI agents the context to move from investigation to autonomous action.”
Northstar was founded by Amer Deeba and Ed Rowe, who first worked together at Adobe in the late 1990s. Deeba previously co-founded Normalyze, acquired by Proofpoint, and held senior leadership roles at Qualys. Rowe, Northstar’s CTO and co-founder, previously served as CTO of Farmers Business Network and Senior Vice President of Engineering at AppDynamics. The founding team combines decades of experience building enterprise software, security platforms, and large-scale data infrastructure.
Northstar is available today and organizations can request a demonstration at northstar.security/request-a-demo.
About Northstar Security
Northstar Security is building the context foundation for agentic security. Its AI-powered platform transforms fragmented security and IT data into a real-time Security Context Graph, enabling organizations to understand their security environment, uncover hidden risks and toxic combinations, and orchestrate autonomous remediation workflows. By connecting security intelligence directly to action, Northstar helps enterprises move beyond finding problems to continuously fixing them. For more information, visit northstar.security.
Media contact:
Cathy Summers
Summers PR
[email protected]
415-483-0480
SOURCE Northstar Security, Inc.
