All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Above Security sells insider threat investigation as a finished case rather than another alert stream. Its AI agents watch human and AI behavior across SaaS, endpoints, and identity, score intent, and hand security, HR, and legal teams an evidence timeline. Eight months past its 2025 founding, the ten-person company had raised $50 million and placed runner-up in a CrowdStrike accelerator. A vendor this young that reads customers' most sensitive behavior must clear a high trust bar, and Above has shown little public proof of it. Its trust center, showing a SOC 2 Type 2 attestation and audit reports available on request in June 2026, went offline by July. Its homepage carries endorsements from named security leaders, with the one deployment account behind them dating to the launch coverage.
| Description | Above Security builds a managed insider threat platform whose fleet of AI investigative agents analyzes human and AI agent behavior across identity, endpoint, SaaS, and AI environments and delivers investigations that security, legal, and HR teams can act on. | [f1] |
|---|---|---|
| Founded | 2025 | [f2] |
| HQ | San Francisco, California, US and Tel Aviv, Israel | [f1] |
| Funding | $50M total | [f1] |
| Latest funding | Series A, $43M (March 2026) | [f2] |
| Product | What it does |
|---|---|
| Above | Runs specialized investigative AI agents, five named on the site as of July 2026, producing structured investigations with role-scoped views for security, HR, and legal teams. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Above watches user and AI agent behavior across SaaS, endpoint, and identity systems, intervenes in risky actions, and produces investigation narratives for insider threats. The company is mapped to the Cyber Defense Matrix. [f1]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 3/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 2/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Above Security funding press release (PRNewswire, March 23, 2026) | press | 2026-06-11 |
| f2 | CTech on the Above Security Series A (March 23, 2026) | press | 2026-06-11 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Above Security homepage “Insider threat isn’t a single incident, it’s a narrative that unfolds. Oren Gur, CISO: The insider threat is one of the biggest and prioritized risks especially when you deal with international companies and ongoing M&As.” | official | 2026-07-02 |
| s2 | Above AI Investigative Agents platform page (moved from /product, which returned 404 on 2026-07-02) “A fleet of AI investigative agents. Real risk surfaces early, already worked up into a case your team can act on. One case, every team. Security, HR & Legal act together.” | official | 2026-07-02 |
| s3 | About Above Security page “Prev. Co-founder & CTO of Ctrl, acquired by Sana which was acquired by Workday. Politely intervene and stop risky actions before they happen.” | official | 2026-07-02 |
| s4 | Above agentic AI use-case page “The agent now reads at the speed of an API, on the vendor's servers, indefinitely.” | official | 2026-06-12 |
| s5 | Above blog post on the Insider Threat Matrix sponsorship | official | 2026-06-12 |
| s6 | Above blog post citing Gartner insider-risk guidance (May 7, 2026) | official | 2026-06-12 |
| s7 | Above Security funding press release (PRNewswire, March 23, 2026) “Above has established integrations with CrowdStrike, and others across identity, endpoint, and SaaS environments.” | press | 2026-06-12 |
| s8 | CTech on the Above Security Series A (March 23, 2026) “Eight-month-old Israeli cyber startup Above Security raises $43 million Series A with just 10 employees” | press | 2026-06-12 |
| s9 | Ynetnews on the Above Security funding (March 23, 2026) “The funding round was led by Ballistic Ventures, Merlin Ventures and Norwest, with participation from Jump Capital and QPV Ventures, the company said Monday.” | press | 2026-06-12 |
| s10 | Ballistic Ventures on its Above Security investment “Most Above customers are operational in minutes to hours, not months.” | press | 2026-06-12 |
| s11 | Above Security ITM sponsorship press release (PRNewswire, April 27, 2026) “The ITM Sponsorship Program is limited to six positions, each held on an annual basis.” | press | 2026-06-12 |
| s12 | CrowdStrike accelerator selection press release (January 5, 2026) “CrowdStrike (NASDAQ: CRWD) today announced the 35 startups selected for its third annual Cybersecurity Startup Accelerator with Amazon Web Services (AWS) and NVIDIA” | press | 2026-06-12 |
| s13 | CrowdStrike accelerator winner press release (March 25, 2026) “Above Security was named runner-up for using AI agents to proactively manage insider risk and replace alerts with full investigative narratives.” | press | 2026-06-12 |
| s14 | Above Security trust center (captured 2026-06-18, trust probe 2026-07-02 found NXDOMAIN on public resolvers and no trust link on the served site) “(12) Certifications - SOC 2 Type II, pen test by Sayfer Security.” | official | 2026-06-18 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Above Security homepage “Most tools surface anomalies. Above surfaces context. Oren Gur, CISO: The insider threat is one of the biggest and prioritized risks especially when you deal with international companies and ongoing M&As.” | official | 2026-07-02 |
| s2 | Above AI Investigative Agents platform page (moved from /product, which returned 404 on 2026-07-02) “A fleet of AI investigative agents. Real risk surfaces early, already worked up into a case your team can act on. See an investigation on your own data.” | official | 2026-07-02 |
| s3 | About Above Security page “Prev. Founder Trullion, First SVP R&D at Silverfort, VP at DriveNets. Politely intervene and stop risky actions before they happen.” | official | 2026-07-02 |
| s4 | Above agentic AI use-case page “an AI agent acting on behalf of an employee is itself a class of insider” | official | 2026-06-11 |
| s5 | Above blog post on the Insider Threat Matrix sponsorship | official | 2026-06-11 |
| s6 | Above blog post citing Gartner insider-risk guidance (May 7, 2026) | official | 2026-06-11 |
| s7 | Above Security funding press release (PRNewswire, March 23, 2026) “The platform targets organizations with 1,000 or more employees operating in SaaS-forward environments.” | press | 2026-06-11 |
| s8 | CTech on the Above Security Series A (March 23, 2026) “Within just six months of its founding, the company completed both a $7 million Seed round, led by Merlin Ventures and Norwest, and this latest Series A.” | press | 2026-06-11 |
| s9 | Ynetnews on the Above Security funding (March 23, 2026) “Above Security, an Israeli-founded cybersecurity startup, has emerged from stealth with $50 million in funding” | press | 2026-06-11 |
| s10 | Ballistic Ventures on its Above Security investment “every organization can now have the effect of a highly trained insider risk investigation team, continuously learning, adapting, and evolving” | press | 2026-06-11 |
| s11 | Above Security ITM sponsorship press release (PRNewswire, April 27, 2026) “the open-source framework maintained by Forscie that catalogs the human behaviors and discrete events defining insider threat investigations” | press | 2026-06-11 |
| s12 | CrowdStrike accelerator selection press release (January 5, 2026) “Thirty-five startups were selected for the eight-week, equity-free program” | press | 2026-06-11 |
| s13 | CrowdStrike accelerator winner press release (March 25, 2026) “Above Security was named runner-up for using AI agents to proactively manage insider risk and replace alerts with full investigative narratives.” | press | 2026-06-11 |
| s14 | CTech on the Above Security Series A and headcount (March 23, 2026) “Eight-month-old Israeli cyber startup Above Security raises $43 million Series A with just 10 employees” | press | 2026-06-13 |
| s15 | Above Security trust center (captured 2026-06-18, trust probe 2026-07-02 found NXDOMAIN on public resolvers and no trust link on the served site) “Compliance: SOC 2 Type 2. Documents: SOC 2 Report, Pentest Report, Privacy Whitepaper, Security Whitepaper, Data Flow Diagram. Risk Profile: Data Access Level Restricted, Impact Level Moderate, RTO 4 hours.” | official | 2026-06-18 |
| s16 | Above integrations page “Plug Above into the stack you already run. Above connects to your identity, SaaS, endpoint, cloud and AI tools” | official | 2026-07-02 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.