Zafran Raises $30M To Launch First-of-its-Kind Cybersecurity Risk Mitigation Platform

Zafran, a pioneering firm in the domain of risk and mitigation, has successfully secured over $30 million in a recent funding round. This financial boost was spearheaded by Sequoia Capital and Cyberstarts, with additional support from Cerca Partners and Penny Jar. The company, which was established in 2022 by CEO Sanaz Yashar, CTO Ben Seri, and CPO Snir Havdala, has distinguished itself as the first platform globally to identify and mitigate 'exploitable' threats within organizations by leveraging existing security measures.

In today's digital age, where cyber threats are escalating at an alarming rate, security teams find themselves in a relentless battle against time. A report from Rapid7 highlights a concerning trend: over half of the vulnerabilities are exploited within a week of being publicly disclosed. Yet, the process of remediation and patching is cumbersome, often taking months and requiring the collaboration of multiple teams. This delay leaves companies vulnerable to attacks during the critical exploitation window—the period between the discovery of a vulnerability and its remediation. Echoing this sentiment, a Verizon report revealed that 60% of data breaches are due to unaddressed known vulnerabilities, emphasizing the need for effective risk mitigation strategies.

Sanaz Yashar commented on the industry's challenges, noting that despite the proliferation of security tools, many organizations fail to account for existing compensative security controls in their risk assessments. Zafran aims to revolutionize risk mitigation by utilizing these controls to combat evolving threats, thereby closing security gaps and reducing risks on a large scale.

Zafran's innovative approach involves connecting vulnerability data with an organization's security controls to analyze risks while considering controls' effectiveness and exploitability factors. The company has developed an industry-first Mitigation Knowledge-base that integrates with EDR, firewalls, cloud tools, and more. This enables a comprehensive evaluation of an organization's risk profile. Zafran Applicable Risk™ identifies whether vulnerabilities are exploitable or have been mitigated by existing controls and then automates mitigations to close the exploitation window.

Doug Leone from Sequoia Capital expressed his enthusiasm for Zafran's vision, highlighting its potential to redefine industry standards by proactively reducing risk exposure at scale. Similarly, Lior Simon from Cyberstarts praised the founding team's talent and ambition to innovate in cybersecurity by optimizing existing security controls instead of relying on traditional patching methods.

Zafran stands out as a market leader in risk and mitigation by enabling organizations to protect themselves during critical exploitation windows effectively. Its platform assesses vulnerability exploitability through a unique correlation of control configuration, runtime, internet exposure, and threat intelligence exploit analysis. Zafran's hybrid, agentless solution automates mitigations, empowering organizations to proactively minimize threat exposure across the board. For more details on Zafran's innovative solutions and their impact on cybersecurity practices, visit Zafran.io.