Sweet Security

Sweet Security, an Israeli cybersecurity firm established in January 2023, is carving out a niche in the cloud security market by focusing on runtime protection. The company was founded by a team of veterans from elite Israeli military technology and intelligence units, bringing extensive experience in both offensive and defensive cyber operations. The founding team includes CEO Dror Kashti, a retired Brigadier General and former Chief Information Security Officer (CISO) of the Israel Defense Forces (IDF); CPO Eyal Fisher, a retired Colonel who headed the Cyber Department at Unit 8200; and Orel Ben-Ishay, who led a cybersecurity R&D group. This background provided the founders with firsthand knowledge of the shortcomings in existing cloud security solutions, particularly the lack of effective real-time threat detection in live environments.

The company operates on a subscription-based business model, offering its Cloud-Native Application Protection Platform (CNAPP) to clients. This platform is designed to provide comprehensive security for cloud environments, targeting clients ranging from large, cloud-first companies to those undergoing digital transformation in sectors like banking, insurance, and crypto. Sweet Security has secured significant financial backing, raising a $12 million seed round in August 2023, led by Glilot Capital Partners, and a subsequent $33 million Series A round in March 2024, led by Evolution Equity Partners. These funds are aimed at scaling U.S. operations and further developing its platform.

Sweet Security's core offering is a runtime-powered security suite that unifies detection, response, discovery, and prevention. A key feature is its lightweight, eBPF-based sensor, which can be deployed in under five minutes. This sensor provides deep visibility into cloud workloads, applications, and infrastructure, analyzing behavioral anomalies in real-time. By creating a customer-specific behavioral baseline, the platform can detect deviations and contextualize them with known attack tactics, techniques, and procedures (TTPs). This approach aims to reduce the noise of false positives and deliver actionable attack narratives, significantly decreasing the mean time to resolution (MTTR) for security incidents. The platform also addresses vulnerability management by prioritizing exploitable risks and offers capabilities for managing non-human identities, a growing challenge in complex cloud ecosystems.

Keywords: cloud security, runtime security, CNAPP, cloud workload protection, threat detection, incident response, cybersecurity, Israel Defense Forces, Unit 8200, eBPF, vulnerability management, cloud-native security, non-human identity management, cyber operations, behavioral analysis, attack surface management, cloud visibility, real-time protection, DevSecOps, security automation