Series C Cybersecurity companies in San Francisco

Finding exposures was never the hard part. Proving which ones an attacker could actually exploit is.Picus Security helps enterprise security teams reduce cyber risk with the Picus Autonomous Exposure Validation Platform. Instead of ranking vulnerabilities by severity score, Picus proves what attackers can exploit in your environment and what your security controls stop, so every exposure becomes a defensible decision: patch, mitigate, monitor, or accept.Adversaries now weaponize new CVEs in hours, and manual validation cannot keep pace. Picus closes that gap by validating attack surfaces, exposures, and security controls as one continuous loop: validate, decide, fix, re-validate.Attack surfaces: which vulnerabilities are actually exploitable, and what an attacker could reach by chaining them.Exposures: whether a CVE is exploitable in your environment, including on business-critical, restricted, or air-gapped systems a live exploit cannot safely touch.Security controls: what your EDR, SIEM, and firewall block, detect, and miss against current attacker techniques.The platform brings together Breach and Attack Simulation, Picus Autonomous Penetration Testing, and Exposure Validation, with techniques mapped to MITRE ATT&CK. Picus Swarm, a team of AI agents, runs the whole loop autonomously and at machine speed, keeping every finding current as controls and assets change. Security teams use Picus to prioritize remediation by real exploitation risk, prove their controls work, get more from the tools they already own, and report measurable risk reduction to leadership.Picus pioneered Breach and Attack Simulation in 2013 and is a Leader on G2 and Gartner Peer Insights, Frost & Sullivan's Company of the Year for Automated Security Validation, and holds a 95% recommendation rate, trusted by Fortune 1000 security teams across financial services, healthcare, energy, and technology.Learn more at picussecurity.com.

• Series C
• 316 employees
• Founded 2013

AppOmni pioneered the SSPM category in 2018 and now leads the next frontier: securing AI in SaaS. Our SaaS and AI security platform gives security teams unified visibility into posture, access, third-party connections, and AI-related activity — applying the same SSPM principles to AI security. With continuous monitoring, real-time threat detection, and autonomous correlation of security signals, AppOmni helps enterprises identify, respond to, and block threats across their entire SaaS environment.Recognized as a Frost RadarTM 2025 Leader and Great Place To Work®, AppOmni continues to set the standard for innovation and customer value in SaaS security. The largest and fastest-growing global enterprises across industries trust AppOmni to secure their SaaS applications.

• Series C
• 141 employees
• Founded 2018

Socket is a cybersecurity platform that protects companies from software supply chain attacks. Companies use Socket to protect their software applications and critical services from malware and security threats originating in open source code.

• Series C
• 139 employees
• Founded 2020

Material Security is an automated detection and response toolkit for Google Workspace and Microsoft 365, combining email security, data security, identity protection, and configuration management in a single platform.

• Series C
• 84 employees
• Founded 2017