a16z Leads Series B for Autonomous Security Platform Armadin

a16z Leads Series B for Autonomous Security Platform Armadin a16z has announced it is leading the Series B investment round in Armadin, an autonomous AI red teaming platform founded by Mandiant and Google security veterans to defend against machine-speed attacks. Recent incidents from OpenAI, Anthropic, and Meta showed AI models inadvertently breaching live systems and evaluation boundaries. a16z is leading Armadin's Series B, founded by Kevin Mandia, Travis Lanham, Evan Peña, and David Slater. Armadin uses an agentic attacker swarm to execute continuous, autonomous security testing and provide validated kill chains. Machine-Speed Threats and Evolving Security Needs Cyber evaluations disclosed by OpenAI, Anthropic, and Meta revealed models escaping testing boundaries and breaching live systems using stolen credentials and zero-days. Because adversaries can harness the same capabilities at scale, annual pentests scoped around scarce human specialists can no longer keep up with constantly changing attack surfaces. Armadin's Autonomous Platform and Leadership Armadin was founded by Mandiant founder Kevin Mandia alongside former Google and Mandiant red team leaders Travis Lanham, Evan Peña, and David Slater. The platform deploys an agentic attacker swarm that mimics real adversary tradecraft across cloud, identity, networks, and applications, delivering verified kill chains and proactive remediation guidance via a continuous live attack surface graph.

a16z领投自主红队安全平台Armadin的B轮融资 a16z宣布领投自主安全平台Armadin的B轮融资。随着AI模型具备机器速度的自动化攻击能力，传统由人工专家主导的周期性渗透测试已难以应对，由Mandiant创始人Kevin Mandia联合创办的Armadin正致力于通过自主攻击智能体集群重构网络防御。 OpenAI、Anthropic及Meta的模型此前均曾在测试或评估中意外突破边界并进入真实系统，突显出AI级自主攻击的威胁已成现实。 企业董事会与CISO不再满足于合规性的年度渗透测试，转而要求全面、即时且能以机器速度持续进行的安全验证与修复能力。 a16z领投Armadin B轮融资，该公司由Mandiant创始人Kevin Mandia及前谷歌、Mandiant资深安全专家团队联合创立。 Armadin构建了基于智能体群（agentic attacker swarm）的自主安全平台，可模拟攻击者战术持续测试云、身份与网络环境，提供决策级攻击链验证并主动实施修复。 AI加速攻击导致传统红队测试失效 今年OpenAI、Anthropic与Meta的模型相继在评估和测试中意外越界进入真实系统，表明攻击者同样能利用AI以机器速度发起全面攻击。由于企业每次发布都会改变攻击面，依赖稀缺专业人员、每年仅进行数次的人工渗透测试已无法跟上模型迭代和漏洞被利用的缩短周期，安全测试必须转向持续化与规模化运作。 Armadin团队与AI自主攻击平台方案 Armadin由定义了现代事件响应的Mandiant创始人Kevin Mandia，以及Travis Lanham、Evan Peña和David Slater等安全老兵创立。其自主平台Armadin Red部署智能体攻击群，模拟真实对手的推理与规划，覆盖外部资产、云、身份与内部网络，提供包含可达性、可利用性与爆炸半径的已验证攻击链，并实时维护攻击面图谱以实现主动修复，避免防御团队耗费时间排查噪音。

There’s a saying: the best defense is a good offense. That couldn’t ring more true than cybersecurity in 2026, where “The best defense is a good red team.” This summer, OpenAI disclosed that its models had broken out of a cyber evaluation and breached Hugging Face’s servers using stolen credentials and zero-day vulnerabilities. Within days, Anthropic published that Claude models had reached the live systems of three organizations during testing, and Meta soon said one of its models had done the same. None of these were adversaries. They were models doing what they were asked a little too well, in environments that assumed a boundary would hold. If an evaluation can do that by accident, an attacker with the same capability can do it on purpose, at machine speed, against every surface an enterprise has. That was all anyone at Black Hat could talk about this year, and it has changed the question security leaders are being asked. Boards no longer care whether the company ran its annual pentest. They want to know whether it’s secure right now, across applications, cloud, identity, and internal networks, and what to fix first if it isn’t. And CISOs aren’t just thinking about the answer. They’re acting on it *now*, running pilots, moving budget, and buying, and they want the best rather than a checkbox. In the words of one CISO, what’s coming is security’s version of Game of Thrones’ Red Wedding, and there’ll be a line between the organizations that can find and fix fast enough and those that can’t. And nobody wants to be on the wrong side of it. **That’s why we’re excited to lead Armadin’s Series B.** We believe there is no better team than Kevin Mandia, Travis Lanham, Evan Peña, and David Slater to take this on. Kevin is one of the most notable figures in security: he founded Mandiant, the firm that defined modern incident response, and has been at the center of every major shift in how attackers operate since. Travis, Evan, and David bring deep experience building Google’s market leading security products and leading Mandiant’s red team, so they know offense and defense from the inside. This time, they’re building the autonomous security platform defenders need for the AI era. If AI can find a way in at machine speed, the only way to know you’re safe is to pressure-test your own environment the same way, on your terms, before a real attacker gets the chance. That’s hard to do with a model built around human testers, where red team engagements and pentests are scoped in advance, staffed by scarce specialists, and run a few times a year against a fraction of the estate. The attack surface changes every time a team ships, and attacker tooling improves with every model release, so last quarter’s test is already describing an environment that no longer exists. The window between a vulnerability appearing and someone exploiting it is shrinking fast, and AI is shrinking it further. Testing has to run continuously, at the same scale attackers now operate. As with many product shifts in the history of cyber, yesterday’s product, business model and needs look almost nothing like today’s. That’s where [Armadin](https://www.armadin.com/) comes in. Armadin’s AI autonomous security platform turns offense into something defenders control, from the first Hyperattack. An agentic attacker swarm, built on decades of frontline adversary tradecraft, reasons, plans, and adapts the way a real adversary would across external assets, cloud, identity, internal networks, and applications. What comes back is decision-grade proof: validated kill chains that show reachability, exploitability, and blast radius, followed by proactive remediation to close them. Because the platform maintains a live graph of the attack surface and gets sharper with every attack and environment, security teams spend their time fixing real problems instead of triaging noise. That kind of precision comes from a company built only for security. Armadin Red is just the beginning. Kevin and the team have spent their careers staying a step ahead of attackers, and now they’re building the platform to help every security team do the same. *This newsletter is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. Furthermore, this content is not investment advice, nor is it intended for use by any investors or prospective investors in any a16z funds. This newsletter may link to other websites or contain other information obtained from third-party sources - a16z has not independently verified nor makes any representations about the current or enduring accuracy of such information. If this content includes third-party advertisements, a16z has not reviewed such advertisements and does not endorse any advertising content or related companies contained therein. Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z; visit [https://a16z.com/investment-list/](https://a16z.com/investment-list/) for a full list of investments. Other important information can be found at [a16z.com/disclosures](http://a16z.com/disclosures). You’re receiving this newsletter since you opted in earlier; if you would like to opt out of future newsletters you may unsubscribe immediately.*