Mandia's Armadin raises $255.5 million to point AI attack agents at customers' networks
Kevin Mandia's Armadin raised $255.5 million at a valuation above $2.5 billion, bringing its total to $445 million seven months after launch. Its case against periodic pen tests rests on performance data from an exercise Armadin ran with a partner.
The Watch · Security desk
What happened
- Andreessen Horowitz and existing investor Accel co-led the Series B, with Bain Capital Ventures and Redpoint joining as new investors.
- Armadin's agents probe a customer's attack surface, attempt exploits, and chain minor flaws into paths running from an internet-facing weakness through lateral movement to cloud compromise.
- In a three-day August exercise with TENEX.ai, Armadin says it ran 1,300 attacks using 26,000 agents and about 17 million offensive actions against more than 25,000 services.
- The company says it already runs these agentic attack campaigns in production for Fortune 500 companies and government customers.
Why it matters
- Who has to decide decision Customers running these agents against production systems depend on a vendor-trained safety model to block a harmful action, so its failure modes belong in any procurement review.
- Who's exposed exposure Periodic pen-test engagements and vulnerability scanners are the products Armadin says cannot keep pace, so those vendors are the first to face its competition.
- What it limits constraint All of the performance figures come from Armadin's own exercise, so a security team has no independent baseline for comparing its 38 paths with what a periodic pen test finds.
Next story · Invest · Oct 1
Investors price Kevin Mandia's seven-month-old Armadin above $2.5 billionConfirmed6 publishers
"Offense is uniquely advantaged right now," Mandia said [12]. "AI lets an attacker find and chain weaknesses faster than any human team can respond," he said in the funding announcement [11]. The company's argument targets two product categories. It says that as frontier models cut the time and expertise needed to find and exploit vulnerabilities, periodic penetration tests and vulnerability scanners cannot give an accurate, continuously updated picture of exploitable risk [8]. According to Help Net Security, scanners fall short because they score each finding in isolation [10].
Security operations tooling is outside that argument. TENEX.ai, the exercise partner, sells agentic security operations [17].
The August actions yielded 238 findings, 98 of them rated significant, chained into 38 validated attack paths [7]. That works out to about one finding per 71,000 actions [24], with 41 percent of findings rated significant [25]. "Significant" is Armadin's label. The 38 paths come closer to measuring exploitability, because the company says each was validated as a working chain [7]. Armadin says it shows customers those paths and their blast radius so defenders can fix exploitable risk instead of working through thousands of disconnected findings [9].
The agents ran without privileged credentials, source code access or whitelisting of security controls, the company says [19]. Each action passed through a control layer overseen by a safety model trained on feedback from human security experts [20]. For customers running campaigns in production, that model decides whether an agent's next exploit attempt reaches a live system [20].
The money came in three steps. Armadin surfaced with a $24 million seed in late 2025 [14] and launched publicly in March 2026 with $189.9 million [13]. Add the Series B to the March figure and the sum is $445.4 million [22], matching the reported $445 million total [5]. Counting the seed on top would give $469.4 million [23], so the March figure appears to include it. The new round goes to the agentic platform, research, model training and go-to-market [15].
Investors are paying for the founder as well as the thesis [21]. Mandia founded Mandiant in 2004 and sold it to FireEye for $1 billion in 2014; Google later acquired the firm for $5.4 billion [16]. "Kevin has been on the front lines of the most consequential breaches in history, and he has built a team that pairs elite red teamers with world-class AI engineers," said David George, a general partner at Andreessen Horowitz [21]. Neither release includes revenue, a customer count, the environment the exercise targeted, or evidence that buyers are moving budget off pen tests and scanners.
What to watch
- Independent or customer-published results from Armadin's production campaigns, or any report of an agent causing an outage on a live system.
- Pen-test firms and scanner vendors shipping continuous, agent-driven attack-path testing of their own.
- Revenue or customer numbers from Armadin that would show whether buyers are actually shifting pen-test and scanner budgets.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence55
- Adoption30
- Hype gap+40
- Incentives75
- Confidence60
Perspective Coverage
6 publishers- Builder
- Builder 24%
- Operator
- Operator 38%
- Investor
- Investor 38%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Armadin, the AI-native cybersecurity startup founded by Kevin Mandia, raised $255.5 million in Series B funding at a valuation topping $2.5 billion.
- [2]
Andreessen Horowitz and existing investor Accel co-led the round, with participation from new investors Bain Capital Ventures and Redpoint.
- [3]
Existing backers 8VC, Ballistic Ventures, GV, In-Q-Tel, Kleiner Perkins and Menlo Ventures also participated.
- [4]
Armadin deploys swarms of specialized AI agents that probe an organization's attack surface, attempt to exploit weaknesses, and combine minor issues into validated attack paths extending from an internet-facing vulnerability through lateral movement to compromise of cloud resources or sensitive systems.
- [5]
Armadin has raised a total of $445 million seven months after its public launch.
- [6]
In August, Armadin and TENEX.ai conducted a live AI cyberattack during a three-day exercise in which Armadin launched 1,300 attacks involving 26,000 agents and approximately 17 million offensive actions against more than 25,000 services.
- [7]
The exercise produced 238 security findings, including 98 described as significant, and chained them into 38 validated attack paths.
- [8]
The company argues that as frontier models reduce the time and expertise required to discover and exploit vulnerabilities, periodic penetration tests and vulnerability scanners cannot provide an accurate, continuously updated picture of an organization's exploitable risk.
- [9]
The company says its platform shows customers the paths attackers could use, along with the potential blast radius, allowing defenders to address exploitable risks instead of responding to thousands of disconnected security findings.
- [10]
Scanner output fails because it scores each finding in isolation.
- [11]
"AI lets an attacker find and chain weaknesses faster than any human team can respond," Mandia said in the company's funding announcement.
- [12]
"Offense is uniquely advantaged right now," said Kevin Mandia, CEO of Armadin.
- [13]
Armadin formally launched with $189.9 million in funding in March 2026.
- [14]
Armadin surfaced quietly in late 2025 with an initial $24 million seed investment.
- [15]
The company will use the funding to expand its agentic security platform and scale its research, model training, and go-to-market operations.
- [16]
Mandia founded Mandiant in 2004 and sold it to FireEye in a $1 billion deal in 2014, before its later $5.4 billion acquisition by Google.
- [17]
TENEX.ai, Armadin's partner in the August exercise, is an agentic security operations provider.
- [18]
The company says it is already running agentic attack campaigns in production for Fortune 500 companies and government customers.
- [19]
The agents operated without privileged credentials, source code access, or whitelisting of security controls, according to the company.
- [20]
Armadin says each action passed through a control layer overseen by a safety model trained using feedback from human security experts.
- [21]
"Kevin has been on the front lines of the most consequential breaches in history, and he has built a team that pairs elite red teamers with world-class AI engineers," said David George, General Partner at Andreessen Horowitz.
- [22]
The March 2026 round plus the Series B sums to $445.4 million, matching the reported $445 million total, which implies the $24 million seed is counted within the March figure.
- [23]
Adding the seed, the March round and the Series B separately would give $469.4 million.
- [24]
The August exercise produced roughly one security finding per 71,000 offensive actions.
- [25]
About 41 percent of the exercise's findings were described as significant.
Sources
6 independent publishers whose own reporting we read for this story.
- a16z.comInvesting in Armadin | Andreessen Horowitz
1 article · October 1, 2026
- helpnetsecurity.comArmadin raises $255.5 million to expand AI offensive security platform - Help Net Security
2 articles · October 1, 2026
- scworld.comArmadin raises $255.5 million for AI-powered cybersecurity platform
1 article · October 2, 2026
- securityweek.comKevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation - SecurityWeek
2 articles · October 1, 2026
- siliconangle.comArmadin nabs $255.5M to detect vulnerabilities with AI agent swarms
2 articles · October 1, 2026
- techcrunch.comKevin Mandia's new 'agent swarm' security startup Armadin raises $255.5M at $2.5B valuation | TechCrunch
2 articles · October 1, 2026