- Series B Milestone: Vega Security secured $120 million in funding on February 10, 2026, reaching a strategic valuation of $700 million to scale its AI-native security operations.
- Disruptive Architecture: Unlike legacy SIEMs that require costly data centralization, Vega utilizes a “federated” Security Activity Management (SAM) approach, drastically reducing storage overhead and latency.
- Proven Leadership: Founded by Shay Sandler and Eli Rozen—architects behind Granulate’s $650M exit to Intel—the company is targeting a global security spend now exceeding $240 billion.
The enterprise security perimeter is no longer a wall; it is a flood of disparate data points that legacy systems can no longer contain. In a move that signals a paradigm shift for the SOC (Security Operations Center), Vega Security announced a $120 million Series B funding round on February 10, 2026. This capital injection, led by Accel with participation from Cyberstarts and Redpoint, propels the firm to a $700 million valuation and underscores a growing investor appetite for “AI-native” over “AI-integrated” infrastructure.
While the market is currently saturated with incremental updates—such as when Microsoft launched its first native security LLM—Vega is taking a fundamentally different structural path. By moving away from the expensive, centralized data lakes of traditional SIEM (Security Information and Event Management) providers, Vega is positioning itself as the definitive solution for the 2026 threat landscape.
The Federated Advantage: Why Legacy SIEM is Faltering
For decades, companies like Splunk and Microsoft Sentinel have relied on the “collect everything, then analyze” model. In 2026, where global security spending has surpassed $240 billion according to Gartner, this model is becoming financially unsustainable. The sheer volume of telemetry data generated by cloud-native enterprises makes centralization a bottleneck for both speed and budget.
Vega Security’s Security Activity Management (SAM) platform utilizes a federated approach. Instead of moving data to the security tool, Vega’s AI-native agents analyze data at the source. This architecture provides three critical advantages:
- Zero Latency Detection: Threat identification happens in milliseconds, not minutes.
- Drastic Cost Reduction: Eliminates the “ingestion tax” associated with moving massive datasets into a cloud repository.
- Privacy Compliance: Data stays within its original jurisdiction, a necessity following recent calls for transparency after major industry breaches.
“The goal isn’t just to see more alerts; it’s to eliminate the noise. Our autonomous SOC triage reduces the manual burden on analysts by 85%, allowing humans to focus solely on high-value remediation.” — Shay Sandler, CEO of Vega Security.
Founder Pedigree: From Intel Granulate to Vega
The investor confidence in Vega Security isn’t just about the technology—it’s about the team. Founders Shay Sandler and Eli Rozen are alumni of the elite Unit 8200 and previously founded Granulate, which was acquired by Intel for $650 million. Their background in real-time resource optimization is now being applied to the cybersecurity stack.
This expertise is vital as the industry grapples with increasingly sophisticated attacks. From instances where CareCloud notified hundreds of thousands of victims to the high-profile OpenAI security concerns, the need for proactive, autonomous defense has never been more urgent.
| Feature | Legacy SIEM (2020-2024) | Vega SAM (2026) |
|---|---|---|
| Data Handling | Centralized (Data Lake) | Federated (At-Source) |
| Analysis Method | Rule-based / Heuristic | Autonomous AI Triage |
| Cost Structure | Per-GB Ingestion | Value-based / Per-Node |
Autonomous SOC: The End of Alert Fatigue
In 2026, the primary challenge for CISO (Chief Information Security Officers) isn’t a lack of tools, but a surplus of alerts. Vega’s platform introduces an Autonomous SOC layer that mimics the decision-making process of a Tier-3 security analyst. By integrating generative AI with deep behavioral telemetry, Vega can distinguish between a benign misconfiguration and a sophisticated lateral movement attempt by an Advanced Persistent Threat (APT).
As enterprises scale their digital footprints, Vega Security’s $120 million Series B will likely be used to expand its global Go-To-Market (GTM) strategy and double down on R&D for “offensive-defense” capabilities. In an era where AI is being used by threat actors to find zero-day vulnerabilities in real-time, Vega’s pivot to a federated, autonomous model represents the only logical evolution for enterprise SaaS security.
