Companies are handing software agents the same access to data and systems that human employees hold, and security teams increasingly cannot see what those agents can reach. Cymphony, a startup based in New York and Tel Aviv, sells a map of that machine workforce, and Sequoia Capital has deepened its bet on the approach.
The new money totals $30M. Sequoia and the SMBC Fin Atlas Beyond Fund co-led the $25M Series A portion, lifting Cymphony’s valuation past $100M, on top of a seed investment from Sequoia that had not been disclosed before.
Cymphony’s core tool is a workforce graph that merges identity, data and activity signals so employees, agents and other non-human identities appear in a single view alongside the systems they can touch. The founders, all graduates of Israel’s Talpiot program, argue that access rules built for people break down when agents operate at machine speed, take new capabilities and can even spin up other agents.
Real engagements illustrate the gap. At one US public company, Cymphony says it found roughly 85,000 files that AI tools had become able to read, then helped shut the exposure down. Elsewhere, an external collaborator’s unsanctioned Claude installation used existing credentials to scan thousands of sensitive documents. The platform’s own agents investigate incidents and repair permissions largely on their own, with a managed option for complex cases, and customers include KKR, Syngenta, Cass Information Systems and Athennian.
