Craft Ventures

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

Upwind Security is a cybersecurity company focused on protecting organizations' digital assets and enhancing internet security. The company develops tools that identify potential threats to data integrity and offers security measures that support compliance with industry standards. By managing risks and leveraging runtime data, Upwind Security empowers organizations to secure their cloud infrastructure effectively.

Horizon3.ai specializes in security automation through its flagship product, NodeZero, an autonomous penetration testing solution. NodeZero enables organizations to continuously assess their security posture across various attack surfaces, including external networks, identity systems, on-premises infrastructures, Internet of Things devices, and cloud environments. By simulating advanced persistent threats and ransomware attacks, it effectively identifies vulnerabilities, misconfigurations, and insecure default settings. The platform operates as a self-service software-as-a-service (SaaS) solution, designed for safe production use without the need for persistent or credentialed agents. This approach allows enterprises to gain a comprehensive view of their security landscape and proactively address potential threats before they can be exploited. Horizon3.ai combines the expertise of military cyber operators with artificial intelligence and engineering to provide continuous automated red teaming services that help organizations defend their data and prioritize security vulnerabilities.

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

Vanta is a trust management platform that focuses on simplifying security and compliance processes for organizations. The company develops software that automates evidence collection for various compliance frameworks, allowing businesses to effectively manage risk through continuous control monitoring. By supporting sales teams with real-time insights, Vanta enhances trust and streamlines security reviews. Its solutions enable organizations to scale their security practices and achieve compliance with industry standards, thereby establishing credible security programs and obtaining necessary certifications to safeguard consumer data.

TrustLayer is an insurtech solutions company that focuses on automating insurance verification through the use of machine learning and artificial intelligence. Its collaborative risk management platform aims to reduce friction between businesses by streamlining the verification and tracking of insurance certificates, licenses, and other compliance documents. By employing robotic process automation tools, TrustLayer helps organizations eliminate manual, error-prone workflows, increasing insurance compliance and reducing organizational risk. The company serves clients across multiple billion-dollar industries, including construction and property management, who value the platform's ease of use and its ability to enhance vendor compliance while supporting various use cases.

Bitwise is a cryptocurrency-focused asset manager that provides investment solutions for individuals, investment managers, and institutions. The company offers a diverse range of 32 investment products, including yield and alpha strategies, multi-strategy solutions, separately managed accounts, onchain staking, and index funds. It aims to facilitate access to the cryptocurrency market by offering secure, liquid, and low-cost investment options. By employing modern security measures, Bitwise ensures the protection of clients' assets while delivering rules-based exposure to the crypto-asset space, thus helping clients achieve their financial objectives.