Armadin, founded by Mandiant creator Kevin Mandia, raised a $255.5M Series B led by a16z and Accel at a $2.5B-plus valuation for autonomous AI security.
Key Takeaways
- Armadin raised $255.5M in a Series B co-led by a16z and Accel on October 1, 2026.
- The round values the Palo Alto company at more than $2.5B, about seven months after it left stealth.
- Total funding now stands at roughly $445M across seed, Series A and Series B.
Lead
Armadin, the Palo Alto cybersecurity startup founded by Mandiant creator Kevin Mandia, announced a $255.5M Series B on October 1, 2026. Andreessen Horowitz (a16z) and Accel co-led the round, which values the company at more than $2.5B. New investors include Bain Capital Ventures and Redpoint. Returning and other backers include 8VC, Ballistic Ventures, GV, In-Q-Tel, Kleiner Perkins and Menlo Ventures.
The financing arrives roughly seven months after Armadin emerged from stealth in March 2026 with $189.9M in combined seed and Series A funding. Total capital raised now comes to about $445M. The company did not disclose its earlier valuation.
What Does Armadin Actually Build?
Armadin builds an AI-native offensive security platform that sends swarms of specialized software agents against a customer's own systems. The agents behave like an attacker. They find low-severity weaknesses and chain them into validated attack paths, so a customer sees which combinations of flaws can be exploited rather than a flat list of findings.
The agents run in sandboxed environments with filtered actions and real-time monitoring, according to the company. Armadin says the product is in production with Fortune 500 companies and government agencies. It has not named any of them.
The pitch sits against two groups of incumbents. One is traditional penetration-testing firms, which sell periodic human-led engagements. The other is vulnerability scanners and breach-simulation tools, which tend to report issues in isolation. Armadin argues that continuous, autonomous testing is the only way to keep pace with attackers who now use AI to find and chain flaws faster than human teams can respond.
Who Is Behind the Company?
Mandia is CEO. He founded Mandiant, which Google bought in 2022 for $5.4B, and that history gives Armadin unusual credibility with enterprise and government buyers. He is joined by co-founders Travis Lanham (CTO), Evan Peña (Chief Offensive Security Officer) and David Slater (Chief Architect). The company counted more than 60 employees as of March.
The investor list leans toward buyers as well as financiers. In-Q-Tel, the intelligence community's venture arm, signals interest from the public sector. GV adds an investor tied to the Alphabet orbit where Mandiant now sits.
Why Did the Valuation Climb So Fast?
The valuation climbed because investors are pricing Armadin on founder pedigree and category timing rather than on disclosed revenue. The company has published no revenue, customer count or growth figures. A $255.5M round on top of a $189.9M debut, inside seven months, implies that early demand or early investor competition exceeded the March plan.
That pace carries risk. A $2.5B valuation assumes Armadin converts pilot deployments at large organizations into recurring contracts before better-funded security vendors ship comparable agent-based testing. Large platform companies and several well-capitalized startups are already pursuing autonomous offense and automated penetration testing. Armadin's differentiation rests on model quality and on safe operation inside production networks, and neither is easy for an outsider to verify.
How Will the Money Be Used?
Armadin plans to put the proceeds into its agentic security platform, research, model training and go-to-market operations. Model training is the notable line item. Training agents against live offensive techniques, which the company says it does daily, is compute-heavy and depends on proprietary attack data. Both favor a company with deep reserves.
Go-to-market spending matters just as much. Enterprise security sales cycles typically run months, and government procurement can run longer. The new capital gives Armadin room to absorb that lag without a further raise.
What Comes Next for Autonomous Security?
Autonomous offensive testing is likely to move from a premium service to a baseline control if the technology performs as described. Buyers would then compare vendors on how many validated attack chains they surface, how safely agents operate in production, and how quickly findings feed into remediation. A single high-profile incident involving an agent acting outside its limits would hurt the whole category.
Competition is the other variable. Rivals can copy the agent-swarm approach, but they cannot easily copy a decade of incident-response data and the hiring network that comes with the Mandiant name. Whether that edge holds as models become cheaper and more widely available is the central question for Armadin's next two years.
Outlook
Armadin has moved from stealth to a $2.5B-plus valuation in under a year on the strength of its founders, a crowded investor syndicate and a thesis that attackers using AI require defenders to train against AI-driven offense. The next proof points are named customers, revenue disclosure and evidence that autonomous agents can operate safely at scale. Until those arrive, the valuation rests on expectation rather than reported results.



