Kevin Mandia’s Armadin Raises $255.5 Million to Let AI Agents Hack Your Company First

Kevin Mandia has already built one legendary cybersecurity company. Now he has raised a quarter of a billion dollars to build its successor, and his pitch is deliberately provocative: the best way to protect your company is to hack it yourself, with an army of AI agents, every single day.

Armadin, the Palo Alto startup Mandia leads as CEO, announced on October 1 that it closed a $255.5 million Series B round at a valuation above $2.5 billion. The round was co-led by Andreessen Horowitz and Accel, with Bain Capital Ventures and Redpoint joining as new investors alongside returning backers including Google Ventures, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures and In-Q-Tel.

The numbers are striking on their own. Armadin only emerged from stealth in early 2026 and launched publicly in March with roughly $189.9 million in combined seed and Series A funding. With the Series B, its total funding now sits at approximately $445 million. Raising nearly half a billion dollars within about seven months puts Armadin among the best-funded young cybersecurity companies in recent memory, and it signals how much conviction investors have in one idea: defense testing built for the AI era.

What Armadin actually sells

Traditional penetration testing is slow and human. A company hires security specialists, they spend a few weeks probing for weaknesses, they deliver a report, and everyone goes back to business as usual until the next test. Armadin's argument is that this rhythm cannot survive the age of AI, because attackers now move at machine speed.

Armadin replaces the hired guns with always-on swarms of AI agents that behave like attackers. These agents run inside a sandboxed environment, rehearsing attacks on a replica of the customer's systems so nothing real gets damaged while they hunt for flaws. Each agent is tuned for a different kind of attack, and they chain individually low-severity weaknesses into what the company calls validated kill chains: paths that run from unauthenticated remote code execution at the perimeter, through lateral movement, to full cloud compromise.

Security teams can then view the exact attack paths an adversary could use against their production systems today, along with the blast radius of each one, and cut those paths off before they are exploited.

The scale of a single deployment hints at why investors are excited. In one customer project, Armadin reportedly spun up 26,000 agents that scanned more than 25,000 assets and uncovered 38 verified attack paths. That kind of continuous, always-on coverage is something a human red team cannot match.

Why Kevin Mandia's name matters so much

Mandia is not a first-time founder riding an AI hype wave. He founded Mandiant, the incident-response firm that became famous for investigating some of the most high-profile breaches of the past two decades, and Google agreed to acquire it for approximately $5.4 billion in 2022.

That track record explains the fundraising. When a founder who has already built and sold a generational security company returns with a sequel, investors line up. There is even a neat symmetry on the cap table: Google bought Mandia's previous company, and Google Ventures is now backing his new one.

Where the money goes, and who is buying

Armadin says it will use the new capital to expand its security platform, invest in research and model training, and build out its commercial operations. The company is aiming its product at two buyer groups: large enterprises and government agencies. In-Q-Tel's participation in the round, the venture arm that backs startups serving the US intelligence community, lines up neatly with that public-sector ambition.

Seven months after emerging from stealth, Armadin says it is already running agentic attack campaigns in production for Fortune 500 enterprises and government customers. That is an unusually fast path to enterprise deployments for a company less than a year out of stealth, and it suggests that CISOs are genuinely worried about AI-driven attacks rather than just curious about AI-driven defenses.

The funding also reflects a broader trend. Investors have poured large sums into early-stage startups building defenses against AI-driven cyberattacks, and automated attack simulation is emerging as one of the hottest subcategories. A high private-market valuation does not guarantee future commercial success, of course, and Armadin will still need to prove that its agent swarms consistently find things human testers miss without drowning customers in false alarms.

What this means for everyone else

Most people will never be an Armadin customer, but the story says something about where cybersecurity is headed. The old model, test twice a year and hope nothing changes in between, was built for an era when attackers needed time. AI has compressed that time, and defenses are being forced to compress with it.

There is also a cautionary side. The same agentic technology that finds weaknesses can, in the wrong hands, exploit them. Mandia's bet is that the only answer to AI-powered offense is better, faster AI-powered defense, run continuously, by the good guys. A quarter of a billion dollars says a lot of smart investors agree.

The real test starts now. Armadin has the funding, the founder, and the early customer traction. The question for the next two years is whether always-on agent swarms become the new standard for enterprise security, or whether this turns out to be one of those ideas that works brilliantly in demos and sandboxes but struggles in the messy reality of corporate networks.

Frequently Asked Questions

What does Armadin do?

Armadin provides an AI-powered cybersecurity platform that deploys swarms of autonomous AI agents to attack a company's own systems inside a safe, sandboxed environment. The agents chain together vulnerabilities to map the exact paths a real attacker could take, so security teams can fix them before they are exploited.

Who founded Armadin?

Armadin was founded by Kevin Mandia, the cybersecurity veteran who previously founded Mandiant, the incident-response company Google acquired for approximately $5.4 billion in 2022. He now serves as Armadin's CEO.

How much has Armadin raised?

Armadin has raised approximately $445 million in total. Its public launch in March 2026 came with about $189.9 million in combined seed and Series A funding, followed by a $255.5 million Series B announced October 1, 2026, which valued the company above $2.5 billion.