Exaforce builds software that uses AI agents to automate security operations work inside the modern SOC. The Exaforce SOC platform just pulled in a $125 million Series B at a $725 million valuation, a big jump that shows investors think security teams will spend serious money on tools that cut through alert noise fast. The problem is simple: false positives and repetitive triage bury analysts, which is why Umesh Padval of Seligman Ventures compared the job to hunting for a needle in a haystack. Founded in 2023, Exaforce is led by CEO Ankur Singla and co-founders Ariful Huq, Jakub Pavlik, and Devesh Mittal.
The timing isn't subtle. A year after landing a $75 million Series A, Exaforce is back with a much larger round, bringing total funding to $200 million. Singla’s pitch is blunt: use AI to catch and stop threats as they happen. “It’s a very simple mandate, but it’s very complex to execute,” he told TechCrunch.
What is Exaforce SOC platform and how does it work?
The Exaforce SOC platform is an agentic security operations system that pulls together security data, analyzes it, and moves teams from alert to decision much faster than the usual SIEM-plus-manual-investigation workflow. Exaforce splits that work across four task-specific agents: Exabot Detect, Exabot Triage, Exabot Investigate, and Exabot Respond. Those bots run on a unified, real-time view of the environment. Customers can use the software directly or buy it as a managed detection and response service.
Under the hood, Exaforce isn’t pitching a single-LLM chatbot for analysts. It uses what it calls a multi-model AI engine that combines semantic models with behavioral and statistical models. It also uses LLM-based reasoning. The point is to work with the messy stuff security teams already deal with — logs, cloud telemetry, identity data, third-party alerts, source code, files, folders, and AI tool usage data — without asking humans to stitch the whole story together by hand.
That changes the workflow in practical ways. The platform can automatically triage alerts and enrich them with context. It also surfaces attack paths and helps threat hunters run hypothesis-driven investigations in plain English. Exaforce’s newer “vibe hunting” feature builds on that idea: analysts can ask whether new attacks appear to be coming from Iran and start investigations from a hunch instead of relying on rigid query language.
It also reaches into response. Exaforce says the system can handle chores like resetting MFA and killing user sessions. It can also disable devices, confirm actions with users or managers, and draw on prior ticket history during new investigations. The company puts the reduction in manual, time-consuming work at as much as 90%. That's an aggressive number.
Who founded Exaforce and why are they credible?
How Exaforce got started
Exaforce was founded in 2023 by Ankur Singla, Ariful Huq, Jakub Pavlik, and Devesh Mittal. The company’s pitch from day 1 was that security teams needed more than another AI assistant bolted onto legacy tools — they needed one platform that could cover detection, triage, investigation, and response. By April 2025, Exaforce was already framing that vision as a 10x productivity push for SOC teams, and by Q4 2025 it had formally brought the product to market after 2 years working with design partners.
Why the founders fit this category
Singla isn’t new to security infrastructure. He previously held roles at F5, Juniper, and Cisco, and the founding bench has operated at companies including Google, F5, and Palo Alto Networks. Pavlik’s background is especially relevant for the operational side: before Exaforce, he led SRE and security operations work tied to F5XC and Volterra. Earlier, he helped build private cloud company tcp cloud.
That matters because Exaforce isn’t selling a generic AI layer. It’s trying to automate the ugliest, highest-context parts of security operations. That's hard. Huq’s background spans product, engineering, and technical operations, which helps explain why Exaforce talks as much about workflow and usability as it does about models.
Past ventures, traction, and fundraising
There’s some repeat-founder signal here too. Singla and Pavlik previously worked together at Volterra, which F5 acquired, and Pavlik was also involved in tcp cloud, which sold to Mirantis. That doesn’t guarantee a win this time. But it does mean investors aren’t betting on first-time founders learning enterprise security sales, infrastructure, and platform design from scratch.
On traction, Exaforce is still early but no longer in science-project mode. It launched commercially in Q4 2025 after testing with enterprise design partners, and it has added 20 customers so far, including Replit and Guardant Health. Singla told TechCrunch he expects that figure to reach 40 to 50 customers by the end of 2026.
The new money is the headline: $125 million in Series B funding at a $725 million valuation, with participation from HarbourVest, Peak XV, Mayfield, Khosla Ventures, and Seligman Ventures. Exaforce raised $75 million in Series A in April 2025, so total funding now sits at $200 million. A round of this size is meant to fund heavy product development and the expensive enterprise go-to-market motion required to sell an end-to-end AI SOC platform.
Competition is getting crowded fast. TechCrunch named 7AI, Dropzone AI, and Prophet Security as direct startup rivals, while Palo Alto Networks and CrowdStrike loom as giant incumbents. Exaforce is trying to sell breadth: not just AI triage, but a full workflow spanning detection through response. It also pitches a data layer that correlates cloud, SaaS, identity, endpoint, and email signals. Dropzone AI raised a $37 million Series B in July 2025 and says it serves more than 100 enterprises; Prophet Security raised a $30 million Series A that same month; and 7AI raised $130 million in December 2025 at a $700 million valuation. Investors are piling into AI SOC tooling. Exaforce won’t have much room for execution mistakes.
Why does Exaforce funding round matter?
A round this size matters because Exaforce isn’t building a lightweight add-on. It’s trying to replace a messy stack of alerting and investigation workflows. It also wants to cover hunting and response with one AI-native system. That takes a lot of engineering, a lot of integrations, and a lot of customer hand-holding. The $125 million raise looks less like vanity financing and more like acknowledgment that enterprise security buyers want proof, precision, and support before they trust automation in high-stakes environments.
For customers, the signal is clear too. Singla said recent attacks have “supercharged” Exaforce’s path into accounts, and that buyers are no longer asking why they need automation so much as how to operationalize it. That’s a shift from curiosity to deployment.
But money alone doesn’t settle the question. Buyers will still care about whether the platform is accurate, explainable, and safe when it starts taking response actions. Exaforce’s human-in-the-loop language and multi-model architecture are meant to answer that concern. Now it has to prove those design choices hold up outside early adopters.
How big is the AI SOC market getting?
The macro setup is favorable. Gartner said enterprise spending on cybersecurity software and network security would grow 14% in 2025 to $118.5 billion. That doesn’t map one-to-one to the AI SOC category, but it shows how much budget is already flowing into tools that help enterprises defend increasingly complex environments.
The labor problem hasn’t gone away. ISC2’s 2024 Cybersecurity Workforce Study was based on 15,852 respondents, and its findings showed a profession under strain: 58% said staffing shortages pose significant risk to their organizations, while 64% said skills gaps can hurt security even more than pure headcount shortages. That’s why startups like Exaforce, Dropzone, Prophet, and 7AI keep getting funded. The pitch isn’t just “AI is cool.” It’s that the old model of throwing more analysts at more alerts has stopped penciling out.
Final take on Exaforce SOC platform
Exaforce has gone from stealthy infrastructure bet to one of the better-funded companies in agentic security operations in just 3 years. The Exaforce SOC platform is ambitious — maybe uncomfortably ambitious — because it’s trying to automate the full loop, not just the easy first step. That’s why investors are interested.
What to watch next is simple: customer growth. Exaforce says it has 20 customers today and wants 40 to 50 by the end of 2026. If it hits that while keeping response quality high, this won’t look like just another big AI security round. It’ll look like early proof that the SOC is being rebuilt around agents.
Read how Dil Foods raised ₹72 Cr in Series B funding led by Bikaji Foods Family Office to turn underused local kitchens into scalable delivery-first food brands across India.
FAQ
– What is the latest Exaforce funding round?
Exaforce raised a $125 million Series B on May 12, 2026, at a $725 million valuation. The round included HarbourVest, Peak XV, Mayfield, Khosla Ventures, and Seligman Ventures, and it came roughly a year after the company’s $75 million Series A, bringing total funding to $200 million.
– How does Exaforce SOC platform work?
It works by combining a unified security data layer with 4 AI agents — Detect, Triage, Investigate, and Respond — that handle different parts of the SOC workflow. Exaforce also uses a multi-model architecture, not just a single LLM, so it can reason across logs, identity data, cloud telemetry, third-party alerts, and response actions with more context than a chatbot-style copilot.
– Who founded Exaforce?
Exaforce was founded in 2023 by Ankur Singla, Ariful Huq, Jakub Pavlik, and Devesh Mittal. Singla brings experience from F5, Juniper, and Cisco, while Pavlik previously worked on Volterra and tcp cloud, giving the company a founding team with real infrastructure, cloud, and security operations depth.
– Is Exaforce part of AI cybersecurity or broader enterprise software?
It’s both, but the cleaner label is AI cybersecurity — more specifically, agentic security operations software. Exaforce sits in the emerging AI SOC category, where vendors try to automate alert triage, investigation, threat hunting, and response for security teams that can’t keep scaling headcount at the same pace as alert volume and cybersecurity spending.
