Security operations vendor Abstract has closed a $25 million funding round co-led by Cheyenne Ventures and AVP, with Olive Hill Ventures joining and Crosslink Capital and Rally Ventures returning, bringing its total funding to nearly $50 million. The company says annual recurring revenue grew 380% over the past year, net revenue retention reached 264%, and its customer base tripled, according to its announcement.
What Abstract sells is a bet against the traditional SIEM model, where security data is indexed and stored with a single vendor before it can be searched or detected on. Abstract’s platform instead decouples data sources from destinations, running threat detections on data while it is still moving, then routing and reformatting it, into schemas like OCSF, ECS, or CIM, only for the systems that actually need it. CEO Colby DeRodeff frames the pitch around AI woven through that pipeline rather than added on top of it, which the company brands Astro AI.
The funding matters less as a single company’s raise than as a data point in where SOC budgets are moving. Composable, streaming-first architectures are a direct response to a complaint security leaders have voiced for years, that SIEM licensing costs scale with data volume even when most of that data is never queried. A platform that lets a team route noisy, low-value telemetry to cheap storage while running detections on it in motion is a cost argument as much as a technical one, and Abstract’s revenue growth suggests that argument is landing with buyers.
It also continues a trend CyberTech has covered of security teams building or buying AI directly into detection and validation workflows rather than treating AI as a bolt-on feature, similar to how Capital One approached AI-assisted vulnerability validation earlier this year.
Source: PR Newswire
