Application Security

Surefire Cyber Tackles Incident Response With $10M Series A Funding

Forgepoint Capital, a venture capital firm focused on cybersecurity investments, is pumping $10 million into an early-stage startup created to provide incident response services within the lucrative cyber-insurance ecosystem.

Ryan Naraine

May 31, 2022

The startup — Surefire Cyber — is the second company incubated by the San Francisco-based Forgepoint Capital (SolCyber was the first) and the $10 million Series A investment signals a big bet on services-related revenues from organizations struggling to cope with a surge in malware attacks.

Surefire Cyber, the brainchild of incident response pioneer Billy Gouveia, is selling incident response services specifically to cyber insurers, brokers and legal firms.

The company is promising “strong response to cyber incidents such as ransomware, email compromise, malware [and] data theft” with what is described as “end-to-end response capabilities.”

[ READ: Cyber Insurance Renewals Helping to Power Anti-Ransomware Success ]

Surefire Cyber’s services include tools for pre-incident preparation, immediate response during an active incident (from containment to eradication to ransomware negotiation and data recovery), to post-incident remediation and management.

The decision to target the cyber-insurance ecosystem comes amidst a surge in major ransomware attacks targeting businesses and new insurance mandates around stricter security controls required to renew and maintain policies.

“With the global rise in cyberattacks and their associated costs, we share Billy’s vision and goals in developing a new and more effective approach that accelerates time to response and recovery, which is crucial for any business,” said Andrew McClure, a partner at Forgepoint Capital.

The incubation and launch of Surefire follows on the heels of SolCyber, a startup styled as the modern MSSP for the midmarket.

Written By Ryan Naraine

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Latest News

Click to comment

Mapping Threat Intelligence to the NIST Compliance Framework Part 2

How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.

Landon Winkelvoss

Password Dependency: How to Break the Cycle

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the password dependency cycle. But how can this be done?

Torsten George

Why CISOs Make Great Board Members

Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make for successful board members.

Galina Antova

A Change in Mindset: From a Threat-based to Risk-based Approach to Security

A threat-based approach to security often focuses on a checklist to meet industry requirements but overlooked the key component of security: reducing risk.

Marie Hattar

Secrets to a Good Security Webinar or Conference Presentation

Tips for making a presentation that will help improve the state of security programs and reflect favorably on the presenters and their companies

Joshua Goldfarb

Application Security

Source Code Security Firm Cycode Launches With $4.6 Million in Funding

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Eduard KovacsSeptember 24, 2019

Network Security

NSA Publishes Security Guidance for Organizations Transitioning to IPv6

NSA publishes guidance to help system administrators identify and mitigate cyber risks associated with transitioning to IPv6.

Ionut Arghire4 days ago

Mobile & Wireless

Arm Vulnerability Leads to Code Execution, Root on Pixel 6 Phones

Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.

Ionut Arghire3 days ago

Nation-State

North Korean APT Expands Its Attack Repertoire

The North Korean APT tracked as TA444 is either moonlighting from its previous primary purpose, expanding its attack repertoire, or is being impersonated by...

Kevin Townsend2 days ago