Brava Security Secures $15M for AI Attack Simulation Platform

Brava Security, a Tel Aviv-based cybersecurity startup, has announced its emergence from stealth mode with $15 million in seed funding. The company’s multi-agent artificial intelligence (AI) platform is designed to simulate cyberattacks and generate the telemetry an actual attack would produce, helping organisations identify and fix gaps in their enterprise defences.

The funding round was led by F2 Venture Capital and Pitango VC, with additional support from several angel investors. The capital will be used to accelerate product development and expand market reach, supporting its research and development (R&D) team in Israel and its commercial team in the US.

Founded in 2024 by Israeli intelligence alumni Idan Basre, who serves as CEO, and Itay Gabbay, the company’s CTO, Brava Security aims to address a critical challenge in modern security operations. Its AI-powered platform focuses on modelling attacker behaviour to provide a clear understanding of how an attack would manifest within a customer’s specific environment.

“The hard part of security was never writing detections. It’s knowing exactly what an attack will look like in a specific environment, across all of its log sources, before it ever happens. That’s the problem our models were built to solve,” stated Gabbay. The platform reveals what existing defences might miss and can even rewrite Security Information and Event Management (SIEM) detections to improve visibility.

Brava Security highlights that typical AI agents often cannot investigate attacks their systems have not already detected. The company’s approach is to ensure the underlying security infrastructure can accurately see and detect threats.

“You can’t automate a decision based on evidence no one ever proved. We’re solving the problem that comes before AI can make the right decision: making sure the security infrastructure actually sees the threats it’s supposed to detect,” Basre explained.

The Brava Security platform is designed for rapid deployment, providing initial insights within 10 to 15 minutes of onboarding. It integrates with more than 70 sources and destinations and operates without requiring changes to a customer’s existing security infrastructure.