Cydelphi emerged from stealth with a $3 million seed round and the launch of a patent-pending, AI-native Digital Forensics & Incident Response platform designed to compress catastrophic breach recovery timelines from months to days. The funding round was led by Glasswing Ventures, with participation from Blu Ventures, Hyde Park Angels, and Merlin Group.
The funding will be used to advance product development, expand go-to-market partnerships with managed security service providers and incident response firms, and drive adoption in industries where downtime can cost millions per day. And the company is positioning its platform as a response to a faster, more automated threat landscape. Cydelphi cited recent industry reporting that ransomware incidents reached 4,701 in 2025, up 46% year over year, while AI-enabled tactics have shortened median dwell time from nine days to five. It also pointed to rising average ransomware payments, which it said have climbed to $1.13 million, and noted that most organizations report they cannot keep pace with AI-powered attacks.
Cydelphi said its platform uses agentic AI to automate core incident response and recovery work that has historically required elite, scarce human expertise. The company described capabilities including automated generation and execution of forensic playbooks, continuous preparation activities, and air-gapped resilience infrastructure intended to help enterprises restore foundational systems and return to operations more quickly after a major incident such as ransomware.
The startup said early adopters are embedding the software into incident response offerings, framing it as both an operational efficiency tool and a differentiator in competitive DFIR services. Cydelphi also cited Forrester commentary that security providers are investing in automation and accelerating the incident response lifecycle, aligning this direction with the platform’s focus.
Cydelphi was founded by cybersecurity executives Ron Newman, Lee Patenaude, and Doron Kolton. The company said its R&D team is based in Israel and brings more than 20 years of collaborative experience in digital forensics and incident response. The firm plans to work through MSSPs, MSPs, and DFIR providers to reach organizations in healthcare, manufacturing, and financial services.
KEY QUOTES
“For two decades, the DFIR process has been an intense manual effort, requiring elite teams weeks or even months to forensically investigate, eradicate, and recover from catastrophic breaches. Our platform empowers service providers and enterprises to automate the DFIR process while focusing on rapid restoration of foundational systems, getting organizations operational at machine speed.”
Ron Newman, Co-Founder And CEO, Cydelphi
“Cydelphi gives our DFIR team faster triage, unified containment playbooks, and automation at scale. Our client retainers now include Cydelphi’s AI-native DFIR platform, giving us a competitive advantage and increasing my team’s efficiencies.”
Darrell Switzer, President, Olympus Cyber
“The DFIR market is at an inflection point. Mandiant’s $5.4 billion exit to Google proved the value of specialized incident response, but that model relied on scarce human expertise that couldn’t scale. Cydelphi is democratizing enterprise-grade DFIR capabilities through AI, making rapid catastrophic breach recovery accessible to organizations that could never afford elite response teams. We’re thrilled to back this exceptional founding team.”
Rick Grinnell, Founder And Managing Partner, Glasswing Ventures
