Astelia raises $35M to cut millions of vulnerabilities down to the ones that matter
What's the deal? Astelia, a New York-based cybersecurity startup founded by veterans of Israel's National Red Team, has raised $35 million in combined seed and Series A funding. The company already counts dozens of customers, including Fortune 500 companies.
Astelia's platform uses agentic AI to identify the small fraction of vulnerabilities that are genuinely exploitable in a given environment. In some deployments, it has surfaced roughly 30 truly exploitable vulnerabilities out of nearly three million flagged — replacing volume-based scanning with evidence-driven prioritisation.
Why now? Security teams are being buried. Organisations face an average of 135 new vulnerabilities per day — 40% more than a year ago — while AI is accelerating attackers' ability to exploit them. A quarter of successful breaches now occur within 24 hours of a vulnerability being disclosed, and 78% of chief information security officers say AI-driven attacks are already affecting their security posture.
The founding team's background adds urgency. CEO Alon NoyDealroom has a profile for this one. Try Dealroom → led Israel's National Red Team, the unit responsible for stress-testing the country's critical infrastructure, working closely with US Cyber Command. Co-founders Nadav OstrovskyDealroom has a profile for this one. Try Dealroom → andRoy RajwanDealroom has a profile for this one. Try Dealroom → held senior roles in Israeli intelligence and the same unit — giving the product a rare, attacker-side perspective on how security failures actually emerge.
What could go wrong? Astelia's core claim — reducing millions of vulnerabilities to dozens of genuinely critical ones — is striking but independently unverified. Enterprises will need to trust that number before committing to a platform that narrows their focus so dramatically.
Translating deep offensive expertise into a repeatable, scalable commercial product is also a different challenge from running red team operations, and one the founding team has not yet proven at scale.
The signal: Investor appetite for exposure management platforms reflects a clear shift in enterprise security buying. The era of more tools and more alerts is giving way to demand for systems that reduce noise and prove what actually matters.
AI is finally making good on a promise the vulnerability management industry has made for years — turning an overwhelming backlog into a short, actionable list. The teams that can back that promise with evidence, not just claims, will define the next generation of security infrastructure.
Sources:
Calcalis Tech
Security Week
A.M.
