Connect with us

Hi, what are you looking for?


Application Security

Drata Scores $100M Investment for Security and Compliance Automation

Valuations for early-stage cybersecurity startups are continuing to soar with news this week that Drata banked $100 million in a funding deal that values the company north of $1 billion.

Valuations for early-stage cybersecurity startups are continuing to soar with news this week that Drata banked $100 million in a funding deal that values the company north of $1 billion.

The new $100 million funding round comes less than 10 months after the San Diego, Calif-based company emerged from stealth with $3 million in seed funding to design and build a security and compliance automation platform.

Drata has positioned itself as a platform that offers businesses a fast way to achieve and maintain SOC 2 and ISO 27001 continuous compliance.

The Series B funding round was led by ICONIQ Growth with additional investments from Alkeon Capital and Salesforce Ventures. Existing investors GGV Capital, Cowboy Ventures, and Leaders Fund also participated.

[ READ: The VC View: Cloud Security and Compliance ]

Less than a year after its public launch, Drata claims it is signing hundreds of new customers and growing its revenue about 70 percent month-over-month since January.

The company plans to triple its workforce over the next year and use the new month to launch two additional frameworks — HIPAA and PCI DSS — to its continuous compliance offerings. 

Drata co-founder and chief executive Adam Markowitz described the funding round as the “rocket fuel” that lets the company “move even quicker, launch more frameworks, [and] ship new features.” 

Advertisement. Scroll to continue reading.

Related: What’s Behind the Surge in Cybersecurity Unicorns?

Related: Data Privacy Compliance Startup CYTRIO Launches With $3.5

Related: Data Security Company Symmetry Systems Raises $15 Million

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Click to comment


Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.


SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.


People on the Move

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

Certificate lifecycle management firm Sectigo has hired Jason Scott as its CISO.

The State of Vermont has appointed John Toney as the state’s new CISO.

More People On The Move

Expert Insights

Related Content


Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.


A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

Cybersecurity Funding

SecurityWeek investigates how political/economic conditions will affect venture capital funding for cybersecurity firms during 2023.

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...