Craft Ventures

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

Upwind Security is a cybersecurity company focused on protecting organizations' digital assets and ensuring data integrity. The company develops tools that identify potential threats and provide security measures to mitigate risks. By leveraging runtime data, Upwind Security aims to enhance the security of cloud infrastructure, thereby democratizing access to effective cybersecurity solutions. Their services also support compliance efforts, assisting organizations in navigating the complexities of digital security in an increasingly connected world.

Vanta is a trust management platform that focuses on simplifying security and compliance for organizations. Its software automates the collection of evidence necessary for various compliance frameworks, thereby facilitating the scaling of security practices. By providing continuous control monitoring, Vanta helps businesses effectively manage risk and enhance their overall security programs. The platform is particularly beneficial for sales teams, providing real-time insights that support trust-building and streamline security reviews. Vanta's solutions enable organizations to achieve compliance certifications and maintain recognized industry standards for security and privacy, ensuring the protection of consumer data.

Upwind Security is a cybersecurity company focused on protecting organizations' digital assets and ensuring data integrity. The company develops tools that identify potential threats and provide security measures to mitigate risks. By leveraging runtime data, Upwind Security aims to enhance the security of cloud infrastructure, thereby democratizing access to effective cybersecurity solutions. Their services also support compliance efforts, assisting organizations in navigating the complexities of digital security in an increasingly connected world.

Horizon3.ai specializes in security automation through its flagship product, NodeZero, an autonomous penetration testing solution. NodeZero enables organizations to continuously assess their security posture across various attack surfaces, including external networks, identity systems, on-premises infrastructures, Internet of Things devices, and cloud environments. By simulating advanced persistent threats and ransomware attacks, it effectively identifies vulnerabilities, misconfigurations, and insecure default settings. The platform operates as a self-service software-as-a-service (SaaS) solution, designed for safe production use without the need for persistent or credentialed agents. This approach allows enterprises to gain a comprehensive view of their security landscape and proactively address potential threats before they can be exploited. Horizon3.ai combines the expertise of military cyber operators with artificial intelligence and engineering to provide continuous automated red teaming services that help organizations defend their data and prioritize security vulnerabilities.

AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems.

Vanta is a trust management platform that focuses on simplifying security and compliance for organizations. Its software automates the collection of evidence necessary for various compliance frameworks, thereby facilitating the scaling of security practices. By providing continuous control monitoring, Vanta helps businesses effectively manage risk and enhance their overall security programs. The platform is particularly beneficial for sales teams, providing real-time insights that support trust-building and streamline security reviews. Vanta's solutions enable organizations to achieve compliance certifications and maintain recognized industry standards for security and privacy, ensuring the protection of consumer data.

TrustLayer is an insurtech solutions company that focuses on automating insurance verification through the use of machine learning and artificial intelligence. Its collaborative risk management platform aims to reduce friction between businesses by streamlining the verification and tracking of insurance certificates, licenses, and other compliance documents. By employing robotic process automation tools, TrustLayer helps organizations eliminate manual, error-prone workflows, increasing insurance compliance and reducing organizational risk. The company serves clients across multiple billion-dollar industries, including construction and property management, who value the platform's ease of use and its ability to enhance vendor compliance while supporting various use cases.

Bitwise is a specialized asset manager focused on cryptocurrency investments for individuals, investment managers, and institutions. The company provides a diverse range of investment solutions, including index funds, yield and alpha strategies, multi-strategy offerings, and separately managed accounts. Bitwise emphasizes the importance of security and liquidity, implementing modern protective measures for assets. Its platform is designed to facilitate rules-based exposure to the cryptocurrency market, helping clients navigate the complexities of digital assets while aligning with their investment objectives.