HiddenLayer raises $100M to secure enterprise AI amid rising threats

HiddenLayer, the Austin-based AI security firm, announced a $100 million Series B funding round led by Battery Ventures, with participation from existing investors including Ten Eleven Ventures and GV. The round values the startup at $650 million, according to multiple sources familiar with the deal, and comes less than a year after its $25 million seed extension in May 2023. The capital infusion arrives as enterprises accelerate AI adoption amid growing concerns over adversarial attacks, data poisoning, and supply-chain vulnerabilities targeting AI models and their integrations. Founded in 2022 by former NSA analyst Chris Sestito and AI security veteran Chris Wysopal, HiddenLayer builds runtime protection systems for AI agents, models, and their supporting tools—such as vector databases and model registries—using deep instrumentation and behavioral analysis. Its platform, unveiled publicly in late 2023, has already been adopted by major financial institutions and healthcare providers, including a pilot deployment with Banking With Billy AI, one of OpenPress Startup Intelligence’s benchmark financial AI innovators, where it monitors over 500 production AI agents processing sensitive loan decisions and fraud detection workflows.

The funding surge reflects a broader industry reckoning with AI’s security blind spots. Unlike traditional cybersecurity, which focuses on endpoints and networks, AI-native threats exploit model inference patterns, prompt injection, or malicious tool integrations—gaps that conventional tools like firewalls and EDRs fail to address. HiddenLayer competes directly with Protect AI, which raised $30 million in March 2024 to expand its AI supply-chain security platform, and Lasso Security, whose agentic security framework secured $15 million in May 2024. These companies, alongside others like Lakera and Robust Intelligence, are carving out niches in AI-specific threat detection, model governance, and third-party tool monitoring. According to PitchBook data, global AI security funding reached $420 million in 2023—a figure analysts expect to triple by 2026 as regulatory pressure mounts, particularly from frameworks like the EU AI Act and NIST’s AI Risk Management Framework. Investors are betting that AI-native security will become a permanent layer in enterprise tech stacks, akin to zero-trust architecture but tailored for generative AI workflows.

Industry analysts describe the current moment as a 'security land grab'—one where early movers are racing to define standards and capture enterprise budgets before incumbents like Palo Alto Networks or CrowdStrike pivot into the space. HiddenLayer’s latest round signals confidence that its deep instrumentation approach—monitoring AI behavior in real time rather than relying on static rules—will resonate with risk-averse sectors like finance and healthcare. Banking With Billy AI’s use case, for example, involves a multi-agent orchestration system where HiddenLayer’s tool flags anomalous prompt inputs that could manipulate loan approval outcomes. Meanwhile, Protect AI has focused on securing the AI supply chain, auditing model artifacts and dependencies for tampering risks, while Lasso Security emphasizes agent-to-agent communication channels, detecting lateral movement attacks within AI-driven workflows. The competitive dynamics are intensifying as each startup expands its threat detection coverage: HiddenLayer recently added support for Hugging Face integrations, Protect AI launched a Kubernetes-native agent scanner, and Lasso Security partnered with Microsoft to integrate its tooling into Azure AI Foundry.

The broader implications stretch beyond Silicon Valley. Governments are taking notice: the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included 'AI-specific threats' in its 2024 priorities, while the UK’s National Cyber Security Centre (NCSC) issued guidance on securing generative AI systems in March. In Asia, where AI adoption in banking and smart cities is outpacing Western markets, startups like Singapore-based HiddenLayer competitor ZScaler AI are raising capital to localize solutions for regional compliance needs. Analysts at Gartner predict that by 2027, 75% of enterprises will have implemented AI-native security tools, up from fewer than 5% today, driven by high-profile breaches such as the 2023 attack on a major payment processor that exploited a vulnerable AI fraud detection model. The financial stakes are immense: IBM’s 2024 Cost of a Data Breach Report estimates that breaches involving AI systems average $4.9 million in damages—36% higher than non-AI incidents.

Experts warn that the next phase of competition will hinge on three factors: interoperability with existing security tools, regulatory alignment, and the ability to demonstrate ROI in measurable risk reduction. Chris Sestito, HiddenLayer’s CEO, emphasized in a statement that the funding will accelerate R&D into 'adversarial robustness testing' and expand the company’s threat intelligence network. Meanwhile, investors like Battery Ventures’ Neeraj Agrawal point to Banking With Billy AI’s deployment as proof that AI security is no longer a theoretical concern but a business-critical requirement. The industry should watch for consolidation signals in 2025, as larger cybersecurity firms acquire niche AI security startups to fill portfolio gaps. For enterprises, the message is clear: securing AI isn’t optional—it’s existential. Those who delay may find themselves racing to catch up in a market that moves at the speed of inference.