Northstar Security Secures $7M to Automate Detection of Toxic Risk Combinations

Northstar Security has emerged from stealth mode with $7 million in seed funding to develop AI agents designed to identify and resolve complex security risks. The funding round was led by Wing Venture Capital, with participation from MVP, Outliers, and cybersecurity veterans Gerhard Eschelbeck, Renaud Deraison, and Justin Somaini.

The startup’s platform focuses on identifying what it terms “toxic combinations”—scenarios where seemingly minor security issues intersect to create significant exposure. For example, the system might flag a situation where a user with high-level privileges is accessing a critical payroll system from a laptop that lacks endpoint protection.

The Security Context Graph

To identify these intersections, Northstar Security builds a “Security Context Graph” by ingesting data from more than 70 enterprise security and IT products. This real-time graph maps the connections between identities, assets, applications, vulnerabilities, and business systems.

The platform integrates with widely used tools including Okta, GitHub, Workday, Microsoft Defender and Entra, AWS, and Google Cloud. By using the Model Context Protocol (MCP), customers can also grant external AI agents access to the graph to build custom security workflows.

Analysts can interact with the platform using plain language to investigate potential threats. Once identified, the company’s AI agents can be authorised to initiate remediation steps, such as limiting user access or notifying users to install necessary endpoint protection.

Leadership and Expansion

The company is led by CEO and co-founder Amer Deeba, who previously co-founded Normalyze and held senior roles at Qualys. CTO Ed Rowe, who previously led engineering at AppDynamics, also co-founded the startup.

Northstar Security intends to use the new capital to expand its engineering staff, advance its platform development, and accelerate its go-to-market strategy.