Connect with us

Hi, what are you looking for?


Application Security

Surefire Cyber Tackles Incident Response With $10M Series A Funding

Forgepoint Capital, a venture capital firm focused on cybersecurity investments, is pumping $10 million into an early-stage startup created to provide incident response services within the lucrative cyber-insurance ecosystem.

Forgepoint Capital, a venture capital firm focused on cybersecurity investments, is pumping $10 million into an early-stage startup created to provide incident response services within the lucrative cyber-insurance ecosystem.

The startup — Surefire Cyber — is the second company incubated by the San Francisco-based Forgepoint Capital (SolCyber was the first) and the $10 million Series A investment signals a big bet on services-related revenues from organizations struggling to cope with a surge in malware attacks.

Surefire Cyber, the brainchild of incident response pioneer Billy Gouveia, is selling incident response services specifically to cyber insurers, brokers and legal firms.

The company is promising “strong response to cyber incidents such as ransomware, email compromise, malware [and] data theft” with what is described as “end-to-end response capabilities.”

[ READ: Cyber Insurance Renewals Helping to Power Anti-Ransomware Success ]

Surefire Cyber’s services include tools for pre-incident preparation, immediate response during an active incident (from containment to eradication to ransomware negotiation and data recovery), to post-incident remediation and management. 

The decision to target the cyber-insurance ecosystem comes amidst a surge in major ransomware attacks targeting businesses and new insurance mandates around stricter security controls required to renew and maintain policies.

Advertisement. Scroll to continue reading.

“With the global rise in cyberattacks and their associated costs, we share Billy’s vision and goals in developing a new and more effective approach that accelerates time to response and recovery, which is crucial for any business,” said Andrew McClure, a partner at Forgepoint Capital. 

The incubation and launch of Surefire follows on the heels of SolCyber, a startup styled as the modern MSSP for the midmarket. 

Related: SolCyber Emerges From Stealth With $20 Million Series A

Related: Improving Security Posture to Lower Insurance Premiums

Related: Cyber Insurance Renewals Helping to Power Anti-Ransomware Success

Related: The Wild West of the Nascent Cyber Insurance Industry

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.


Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...


WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

Cybersecurity Funding

SecurityWeek investigates how political/economic conditions will affect venture capital funding for cybersecurity firms during 2023.