Zafran Security has received a strategic investment from Cisco Investments to expand its AI-native Continuous Threat Exposure Management platform.
The amount of the investment was not disclosed. Zafran said the transaction extends its previously announced total funding of $130 million.
Cisco Investments joins existing backers including Sequoia Capital, Cyberstarts, Menlo Ventures, PSP Growth, Vintage Investment Partners and Amex Ventures.
Zafran helps enterprises understand which vulnerabilities could realistically be used in an attack rather than treating every technical weakness as equally urgent.
The company argues that AI allows attackers to connect multiple lower-severity weaknesses into sophisticated attack paths at greater speed. At the same time, many enterprises operate numerous separate products for endpoint protection, firewalls, cloud security, identity management and vulnerability scanning.
Zafran is designed to coordinate those existing controls so security teams can identify the attack paths posing the greatest risk and determine where to intervene first.
The platform is built around Zafran’s AI-native Exposure Graph, which maps the relationships among assets, security weaknesses, controls and potential attacker movements.
It identifies choke points where several attack paths converge. Security teams can then prioritize mitigations capable of disrupting multiple routes without unnecessarily interfering with business operations.
Rather than requiring customers to replace their existing security products, Zafran uses information and controls from tools already deployed across the organization.
The company said its platform can validate mitigations before deployment and coordinate discovery, prioritization, risk reduction, and remediation through a single system.
Zafran claims that 99% of vulnerabilities labeled critical in customer environments are not actually exploitable under existing conditions. Its platform focuses on the remaining 1% it believes are most likely to contribute to a security incident.
Cisco’s investment could support greater technical and commercial alignment between the companies as customers seek to coordinate vulnerability information and remediation across complex enterprise networks.
KEY QUOTES:
“AI has fundamentally changed how attackers operate, increasing the speed, scale, and sophistication of exploitation.”
“We built Zafran to be the nerve center that helps organizations understand exploitability, identify where to act first, and mobilize the security controls they already have to reduce risk before exploitation occurs.”
Sanaz Yashar, Co-Founder and CEO of Zafran Security
“As the threat landscape grows increasingly complex in the AI era, the challenge for security teams has extended from identifying vulnerabilities to effectively orchestrating their remediation.”
Janey Hoe, Vice President at Cisco Investments
