Zafran, a NYC-based risk and mitigation company, raised over $30m in funding.
The round was led by Sequoia Capital and Cyberstarts, with participation from Cerca Partners and Penny Jar.
The company will use the funds to expand operations and its business reach.
Founded in 2022 by Sanaz Yashar (CEO), Ben Seri (CTO) and Snir Havdala (CPO), Zafran provides a platform for risk and mitigation, mobilizing existing security controls to protect organizations during critical exploitation windows. The platform determines vulnerability exploitability, correlating control configuration, runtime, internet exposure, and threat intelligence exploit analysis. Its hybrid, agentless solution automates mitigations, enabling organizations to proactively reduce threat exposure at scale.
The company’s system empowers security teams to defuse threat exploitation, by connecting to both vulnerability data and the organization’s security controls. It analyzes risk while taking into account controls’ efficacy as well as exploitability factors. The Mitigation Knowledge-base designed to work with EDR, firewalls, cloud tools, and more, enables organizations to conduct a comprehensive evaluation of their risk. Zafran Applicable Risk™ reflects whether vulnerabilities are exploitable or already mitigated by compensating controls, then proactively automates mitigations to eliminate the exploitation window.
