Cantina launches with $8M to take security work from triage to verified fix

UPDATED 09:00 EDT / JULY 30 2026 SECURITY Cantina launches with $8M to take security work from triage to verified fix by Duncan Riley Agentic security startup Cantina formally launched today and said it has raised $8 million in funding to automate the security work that happens after a vulnerability is found. The company was started by security researchers and engineers who spent years finding flaws in widely used software and defending against attacks on it. Its platform runs a set of artificial intelligence agents across a customer’s environment, covering discovery, triage, remediation and the check that a fix actually held. The bottleneck it targets is not detection. Most security teams already surface more issues than they can close. Vulnerability exploitation overtook stolen credentials last year as the leading route into a breach, according to the 2026 Verizon Data Breach Investigations Report. It had not led in the report’s previous 18 editions. Fixing those holes is getting harder. Verizon put the share of critical known-exploited vulnerabilities that were fully remediated at 26%, down from 38% the year before. Finding the bug is the cheap part. Someone still has to work out who owns the affected system, whether the risk is real, which engineering team has to change what, and whether the change landed. Cantina argues most of that work is still done by hand and that thousands of security teams investigate the same vulnerabilities in isolation and write the same playbooks from scratch. At the center of the platform is what Cantina calls a security memory layer, a running model of a customer’s environment. Everything gets mapped, from identity records and servers through to code repositories, cloud permissions and databases holding customer data, along with how those pieces relate. Business context sits on top of the map, including who owns each system, what depends on it, what changed recently and what earlier investigations turned up. Cantina uses that shared context to decide which issues need action now. Customers can run Cantina’s stock agents, build their own or pull in agents written by other Cantina customers. Every investigation feeds back into the model, so the platform gets more specific about a given environment over time rather than restarting at each alert. Alongside prioritization, it runs the investigation and coordination workflows that normally consume analyst hours, then confirms fixes were implemented and keeps auditable evidence that the risk is closed. Cantina co-founder and Chief Executive Hari Mulackal said AI has “dramatically accelerated the pace of attack.” Attackers can now find a flaw and build a working exploit against it faster than defenders can respond, he said. The workflows most security teams run were designed before that was true. Cantina said it works with companies in healthcare, financial technology and other regulated industries, from mid-market businesses up to Fortune 500 enterprises. Cantina said it holds trusted access with OpenAI Group PBC and takes part in Anthropic PBC’s Cyber Verification Program, which it said gives it early sight of the model capabilities reshaping both attack and defense. Matt Mock, chief information security officer at Trend Health Partners, said in the announcement that the backlog is where the risk sits, and that Cantina is the first platform his team has used that carries the work through from finding an issue to driving the fix. Framework Ventures led the funding. Including the new round, Cantina has raised $16.5 million. Image: Cantina A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by enga