NEW YORK — Zafran Security, a cybersecurity startup founded by a former Iranian-born spy whose experiences helped inspire the Apple TV series "Tehran," announced on Tuesday that it has raised $60 million in a new funding round. The investment, led by Menlo Ventures with participation from Sequoia Capital and Cyberstarts, brings the company's total funding to $130 million since its inception in 2022.
Sanaz Yashar, the CEO of Zafran and a veteran of Israel's elite cybersecurity intelligence unit, attributed the funding to the escalating pace of cyberattacks fueled by advancements in artificial intelligence. In an exclusive interview with CNBC, Yashar described the current threat landscape as "becoming much more severe that it was even a year ago." Zafran specializes in using AI and automation to manage threat exposure, helping organizations detect and mitigate risks more effectively.
The startup, based in Israel, did not disclose the valuation of this latest round, but it reported having more than tripled its annual recurring revenue since its previous $70 million raise in September 2024. Annual recurring revenue, a key metric in the software industry, represents the predictable income from subscriptions over a 12-month period. Yashar said the company plans to use the fresh capital primarily to expand its team, hiring more engineers and specialists to keep pace with the evolving cyber threats.
Zafran's origins trace back to a real-world crisis: an investigation into a ransomware attack on a hospital in Israel. Yashar, along with co-founders Ben Seri and Snir Havdala, identified gaps in how security tools communicated during the incident. "The data was there," Yashar told CNBC, emphasizing that better integration could have prevented the breach. "If the security tools were talking to each other, they could block it." This experience underscored the need for cohesive, AI-driven platforms that unify disparate security systems.
Yashar's own background adds a layer of intrigue to Zafran's story. Born in Tehran, she immigrated to Israel at age 17 and went on to serve 15 years in Unit 8200, the Israel Defense Forces' premier signals intelligence unit, renowned for its cybersecurity expertise. After leaving the military, she led high-profile investigations at FireEye and Mandiant, the latter of which was acquired by Google in 2022 for $5.4 billion. Her career has positioned her at the forefront of countering sophisticated state-sponsored and criminal cyber operations.
Unit 8200 has long been a breeding ground for cybersecurity innovation in Israel, often dubbed the "Startup Nation" for its tech ecosystem. Alumni from the unit have founded or led major players in the industry, including Palo Alto Networks, Check Point Software Technologies, and CyberArk. This latest funding for Zafran continues a trend of robust investment in Israeli cybersecurity firms, even amid geopolitical tensions in the region.
The timing of Zafran's raise aligns with broader industry shifts driven by AI. As artificial intelligence tools become more accessible, cybercriminals are leveraging them to automate attacks, craft more convincing phishing schemes, and exploit vulnerabilities at scale. Companies worldwide are racing to bolster their defenses, with AI-powered solutions like Zafran's gaining traction for their ability to process vast amounts of data in real time.
Recent high-profile acquisitions highlight the sector's frothiness. In March, Cyberstarts-backed startup Wiz, another Israeli cybersecurity darling, agreed to be acquired by Google for $32 billion, though the deal later fell through amid regulatory scrutiny. More recently, in July, Palo Alto Networks announced its $25 billion acquisition of CyberArk, an identity security provider, signaling a consolidation wave as enterprises seek comprehensive protection against AI-enhanced threats.
Zafran's customer base spans critical sectors vulnerable to cyber disruptions. According to Yashar, clients include healthcare providers, financial services firms, insurance companies, technology giants, and several Fortune 500 corporations. These industries have seen a surge in attacks, from ransomware locking hospital systems to data breaches exposing sensitive financial information. Zafran's platform aims to provide a unified view of threats, allowing organizations to respond faster and reduce exposure.
The funding round's lead investor, Menlo Ventures, has a track record in backing AI and security startups, while Sequoia Capital's involvement underscores the venture capital firm's confidence in Zafran's growth potential. Cyberstarts, which participated in Wiz's early rounds, brings expertise in the cybersecurity space. Together, these backers provide not just capital but also strategic guidance as Zafran scales globally.
Experts in the field note that AI's dual role—as both a weapon for attackers and a shield for defenders—is reshaping cybersecurity priorities. While Zafran's approach focuses on automation to manage threat exposure, other firms are developing AI for predictive analytics or behavioral detection. Yashar's emphasis on integrated tools reflects a consensus that siloed systems leave organizations vulnerable, a lesson drawn from incidents like the hospital ransomware attack that inspired Zafran's founding.
Beyond the technical innovations, Yashar's personal story resonates in an industry often marked by anonymity. Her journey from Tehran to the upper echelons of Israeli intelligence mirrors the dramatic espionage themes of "Tehran," the Apple TV+ series loosely based on her experiences. Though she downplays the connection, it has helped put a human face on the shadowy world of cyber defense.
Looking ahead, Zafran faces stiff competition in a crowded market, but its roots in real-world investigations and military-grade expertise give it an edge. With the $60 million infusion, the company is poised to accelerate product development and market expansion, potentially targeting more international clients amid rising global cyber tensions. As AI continues to permeate every aspect of digital life, startups like Zafran are betting that proactive, intelligent security will be the key to staying one step ahead of adversaries.
The broader implications of this funding extend to the global economy, where cyber incidents cost trillions annually. Governments and regulators are pushing for stronger standards, but private sector innovation remains the frontline. Zafran's success could inspire more cross-border collaborations, drawing on diverse talents like Yashar's to tackle threats that know no borders.
In the end, as Yashar put it, the stakes have never been higher. With cyberattacks evolving faster than ever, investments like this one signal a collective resolve to fortify digital defenses against the AI-driven storm on the horizon.
By Emily Chen
The Appleton Times