In a move that signals a significant shift in the cybersecurity venture landscape, Artemis has officially emerged from stealth mode, announcing a combined $70 million in seed and Series A funding just six months after its founding. The rapid infusion of capital underscores a growing urgency within the enterprise sector to address the limitations of traditional security operations centers (SOCs) through advanced artificial intelligence and more efficient data architectures. The Series A round was led by Felicis, with substantial participation from existing investors and a roster of prominent figures from the cybersecurity industry. The preceding seed round was co-led by Brightmind, whose general partner, Gur Talpaz, also increased his stake during the Series A proceedings. This significant war chest is earmarked for the aggressive expansion of Artemis’s engineering, research, and go-to-market functions as the company attempts to keep pace with mounting enterprise demand.
A New Paradigm in Security Data Modeling
At the core of the Artemis platform lies a proprietary dynamic data model designed to overcome the "alert fatigue" that has plagued security teams for over a decade. Unlike traditional security information and event management (SIEM) systems that rely on static rules and disconnected logs, Artemis constructs a living model based on each customer’s unique telemetry. By fusing behavioral log data across users, physical machines, cloud workloads, and third-party applications with specific business context, the system can autonomously determine whether a specific action is benign or malicious within the context of that specific organization.
The platform’s primary innovation is its ability to correlate disparate signals into a single, coherent narrative. In modern enterprise environments, security analysts are often inundated with hundreds of thousands of alerts per day, many of which are false positives or isolated incidents that lack broader context. Artemis aims to solve this by providing a unified account of an attack. For example, if the system detects unusual API activity within an Amazon Web Services (AWS) environment occurring simultaneously with a privilege escalation event in an identity provider like Okta, the platform does not issue two separate notifications. Instead, it contextualizes both events as part of a single potential breach, presenting security teams with one unified narrative. This capability allows for machine-speed automated responses, such as the immediate isolation of a compromised identity before lateral movement can occur across the network.
Disruption of the Traditional Security Cost Structure
Beyond its technical capabilities in threat detection, Artemis is positioning itself as a cost-efficient alternative to the legacy "collect-and-store" model of cybersecurity. For years, the industry standard has required organizations to ingest and store all security data in advance—a model where costs scale linearly with data volume. As enterprises migrate more services to the cloud and generate petabytes of log data, the financial burden of traditional security architectures has become unsustainable for many.
Artemis utilizes a federated query model, retrieving data on demand from a customer’s existing cloud storage and log sources. This approach eliminates the need for expensive, redundant data ingestion and storage fees. According to company data, this architectural shift allows for full visibility at approximately one-fifth of the cost of traditional security operations. This economic advantage is particularly attractive to large-scale enterprises in the banking and technology sectors, where data volumes are massive and regulatory requirements for data retention are stringent.
The Founders: A Fusion of Cybersecurity and AI Pedigree
The leadership team at Artemis brings a rare combination of category-creating experience and deep academic research. Co-founder and CEO Shachar Hirshberg is a veteran of the security operations space. He previously played a pivotal role in building and scaling platforms at Palo Alto Networks and Demisto. Demisto is widely credited with creating the Security Orchestration, Automation, and Response (SOAR) category, and its acquisition by Palo Alto Networks for $560 million remains one of the most significant deals in the history of pure-play security operations. Following his tenure at Palo Alto Networks and completing an MBA at Harvard Business School, Hirshberg led GuardDuty at AWS, which is currently the largest cloud attack detection product in the world.
Complementing Hirshberg’s operational expertise is Co-founder and CTO Dan Shiebler, who has spent the last decade developing large-scale AI systems. Shiebler most recently led machine learning and AI initiatives at Abnormal AI, a company known for its advanced behavioral AI approach to email security. Shiebler’s work at Artemis draws heavily on his doctoral research in machine learning at the University of Oxford, focusing on the creation of structured models that allow AI to understand complex organizational functions.
Early Market Traction and Performance Metrics
Despite its short history, Artemis has already moved beyond the conceptual stage, deploying its platform in production environments for enterprise clients across the technology, banking, and financial services sectors. The platform is currently processing billions of events per hour, and early performance data suggests significant operational improvements for its users.
In one instance, a technology firm utilizing Artemis for its first scan identified multimillion-dollar cloud spend savings by uncovering "shadow" activity—undocumented integrations and over-privileged accounts that were not only security risks but also significant financial drains. In another case, a heavily regulated organization with tens of thousands of employees reported a 96% reduction in investigation times. Investigations that previously took hours or days are now being completed in under five minutes, allowing security teams to focus on high-level strategy rather than manual log correlation.
Industry Context: The Rise of AI-Native Defense
The launch of Artemis comes at a time when the cybersecurity industry is grappling with the dual-edged sword of artificial intelligence. While AI has empowered attackers to automate phishing, exploit discovery, and malware mutation, it has also become the primary hope for defenders looking to level the playing field. The "AI-native" approach championed by Artemis represents a departure from the "AI-added" approach of legacy vendors, who often layer basic machine learning models on top of aging, brittle architectures.
"We built Artemis as an AI-native defense system from the ground up," stated Shachar Hirshberg. "The question isn’t whether this model wins, but who builds it best. Some of the largest and fastest-growing companies in the world are among our first customers, and we’re able to deliver value to them on day one. That trust matters, and we intend to earn it every day."
Dan Shiebler added that the real breakthrough of the platform is not merely the use of more powerful AI models, but the underlying data structure. "The real breakthrough isn’t just using better AI models, but in giving those models deep, structured understanding of how an organization functions, making reliable detection and automated response possible."
Investor Perspective and Market Outlook
The $70 million funding round is a testament to the high confidence investors have in the Artemis team and their technological approach. Jake Storm, a general partner at Felicis, highlighted the rarity of the demand Artemis has seen while still in its stealth phase.
"Artemis has built a truly world-class team with rare depth at the intersection of AI and cybersecurity, solving a problem that’s becoming increasingly urgent as attacks grow in frequency and complexity," Storm said. "Just six months after founding and while still in stealth, the team has seen enterprise inbound driven purely by word of mouth and early results. That level of demand at this stage is rare and signals the scale of the opportunity."
The broader implications for the cybersecurity market are significant. If Artemis can continue to prove its 80% cost-reduction claim while simultaneously improving detection accuracy, it could force a major repricing and architectural overhaul across the SIEM and XDR (Extended Detection and Response) markets. For enterprises, the promise of a system that understands "business context" rather than just "log strings" represents a potential end to the era of disconnected security tools and the beginning of a more integrated, autonomous defense posture.
As Artemis moves out of stealth, the company faces the challenge of scaling its technology to meet the diverse needs of global enterprises while maintaining the speed and agility that allowed it to raise $70 million in its first half-year. With a leadership team that has successfully navigated the acquisition and scaling process before, the industry will be watching closely to see if Artemis can indeed define the next generation of security operations.
