The cloud security market has a dirty secret: most tools only tell you about problems after they've already gone live. By then, someone in engineering has pushed a misconfigured database to production, alarms are ringing, and the scramble to patch begins.
Aryon Security thinks it has a better idea—stop the mistake before it ships. On June 10, the Tel Aviv-based startup closed a Series A to prove it, bringing total funding to $38 million. Brightmind Partners led the round, joined by Datadog Ventures, Skinos Ventures (backed by Israeli cybersecurity veteran Shlomo Kramer), and seed investors Blumberg Capital and Viola Ventures.
It's a compelling pitch in an industry that's grown exhausted chasing alerts. Whether it's one that works in practice is another question entirely.
The Prevention Play
Aryon's founders—CEO Ron Arbel, CTO Ariel Litmanovich, and CPO Yair Ladizhensky, all alumni of an IDF intelligence unit known as "Matzov"—have built what they're calling a Cloud Security Enforcement Platform. The concept is straightforward, if ambitious: intercept risky configurations at the moment someone tries to deploy them, not days or weeks later when a scanning tool finally flags the issue.
The platform sits across infrastructure-as-code pipelines, manual console changes, CLI commands, and third-party automations. An AI-driven policy engine evaluates each change against organizational rules and external compliance frameworks—CIS, NIST, PCI-DSS, HIPAA, New York's cybersecurity regulation for financial services. If something doesn't pass muster, it gets blocked before going live.
Aryon claims the approach can reduce traditional cloud security posture management alerts by as much as 95 percent. There's also a simulation feature, Policy Impact Assessment, that lets teams preview what would be stopped before flipping enforcement on—a nod to the political reality that security teams can't just start blocking engineers' work without buy-in.
Most cloud security platforms today, tools like Wiz or Upwind, operate in detect-and-remediate mode. They're good at finding problems. Less good at preventing them in the first place. Aryon is betting there's room for something that does.
A Round With Footnotes
Brightmind Partners, an operator-led cybersecurity VC co-founded by Stephen Ward—former CISO at The Home Depot and TIAA—led the round. Datadog Ventures participated as a strategic investor. In the announcement, Bharat Sajnani, who runs Datadog's venture arm, said Aryon's prevention-first model complements Datadog's existing monitoring and remediation capabilities. Translation: it fills a gap in what Datadog itself can do.
The deal also pulled in an impressive roster of angels. CrowdStrike CEO George Kurtz, Shark Tank's Robert Herjavec, Armis CEO Yevgeny Dibrov, and Armis CTO Nadir Izrael all wrote checks—the kind of names that suggest people who've dealt with cloud security headaches firsthand see something here.
One wrinkle: Israeli business outlets CTech and Globes pegged the round at $25 million on the same day the company announced $29 million. No clarifying statement from Aryon has surfaced as of mid-June. The valuation, predictably, wasn't disclosed.
Aryon came out of stealth in March 2025 with a $9 million seed led by Viola Ventures and Blumberg Capital. This Series A marks a significant step up, though not an unusual one for an Israeli cybersecurity company with traction.
Early Customers, U.S. Ambitions
According to CTech, Aryon has landed a handful of named customers: IBI Investment House in Israel, plus U.S. firms including Valley Bank, OceanFirst Bank, International Seaways, and New American Funding. The company recently went live on AWS Marketplace, around June 11 or 12, a signal it's serious about scaling distribution.
The startup had 44 employees as of early June and is actively hiring in the United States. A recent LinkedIn posting sought an Account Executive, and the company has been visible at U.S. events—co-marketing with GuidePoint Security at regional gatherings, attending the Millennium Alliance Transformational CISO Assembly, with a Black Hat USA appearance scheduled for early August.
The trio of founders cite experience securing Project Nimbus, Israel's national cloud program. Arbel, the CEO, is a Forbes 30 Under 30 honoree, the sort of credential that plays well in pitch decks. Whether it translates to enterprise sales remains to be seen.
The Harder Question
The Series A will fund product development and the U.S. expansion Aryon clearly has underway. But the company faces a structural challenge that money alone won't solve: convincing CISOs to rethink how they buy cloud security.
Most organizations have already invested heavily in post-deployment tools. They've trained teams on them, integrated them into workflows, built dashboards around them. Asking those same CISOs to adopt a prevention-first model means asking them to rewire processes, retrain people, and potentially admit that the tools they've been using aren't solving the problem they thought they were.
Aryon's bet—and that of the investors who backed it—is that the pain of managing thousands of misconfigurations after the fact will eventually outweigh the inertia of the status quo. It's a reasonable theory. The cloud security market is littered with reasonable theories that didn't pan out.
Still, if you're going to try to change how an industry thinks about prevention versus detection, having CrowdStrike's CEO and a stable of former CISOs in your corner isn't the worst place to start. Whether that's enough, we'll know soon enough.
