All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Copperhelm sells AI agents that inspect running cloud machines for vulnerabilities, confirm which ones an attacker could exploit, and apply fixes such as a firewall rule or a patch. It sells to CISOs and security teams at large enterprises and lists a $50,000 12-month contract on AWS Marketplace. Founded in late 2025, it raised a $7 million seed round led by TLV Partners. Cass Information Systems, a regulated financial institution, is its named customer, and Copperhelm says its paying customers include Fortune 500 enterprises. Customers decide which actions the agents execute on their own and which require approval. The agents read data from the customer's own cloud accounts, so a rival whose product is already connected to those accounts could add the same checks and fixes.
| Description | Agentic cloud security company whose AI agents, grounded in a real-time Context Lake of the customer's cloud environment, investigate live workloads, validate which exposures are exploitable, and execute remediation such as WAF rules. | [f1] |
|---|---|---|
| Founded | 2025 | [f2] |
| HQ | Tel Aviv, Israel | [f3] |
| Funding | $7M total | [f4] |
| Latest funding | Seed, $7M (April 2026) | [f5] |
| Product | What it does |
|---|---|
| Copperhelm | Agentic cloud security platform whose System, Network, Adversary, and Resolution agents inspect live workloads, trace network reachability, validate exploitability, and deploy WAF mitigations. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
AI agents inspect cloud workloads to validate exposures, monitor environments, and execute remediation, with network reachability mapping and WAF deployment. Copperhelm uses AI to defend general cloud infrastructure and is mapped to the Cyber Defense Matrix.
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Copperhelm’s launch release describes its buyer as CISOs and security teams at large enterprises. Its about page describes those teams sifting through millions of raw alerts by hand. The one quantified case, a Fortune 500 company whose 6 million raw findings became a few hundred validated risks, is the company’s own figure as SiliconANGLE reports it. The problem is clear and specific, and the company’s own figure is a count of findings at one customer. [s8, s2, s10] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Copperhelm’s technology page says its System Agent connects to running machines, inspects in-memory code, and analyzes real-time configurations to determine exploitability. Its homepage lists the actions its agents take, from applying a WAF rule to isolating a service network or shutting down an instance. SecurityWeek and Ynetnews describe the same design, and neither reports testing it, so the detail is concrete and vendor-documented. [s3, s1, s12, s9, s11] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | The enabler Copperhelm names is AI that finds and weaponizes vulnerabilities faster than 14 or 30-day patch cycles can respond, the case its Mythos page makes. The buyer-side evidence is one kind, testimonials on Copperhelm’s own site. In one, the CISO of Cass Information Systems says Cass needed autonomous investigation and remediation to keep pace. Launch coverage of the April 2026 seed round adds press interest, so the timing is plausible and the demand evidence is indirect. [s4, s1, s8, s9] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | SecurityWeek reports that founders Shimon Tolts, Eyar Zilberman and Roman Labunsky held leadership and senior technical roles at Unity, McAfee and RSA. The launch release and Ynetnews cite AWS Hero, CNCF Ambassador and GitHub Star recognitions. A VentureBeat contributor article says Labunsky was VP of Engineering at Datree, a Kubernetes security tool. The founders have verifiable senior cloud and security roles and one named prior build. [s9, s8, s11, s14] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 | In a testimonial on Copperhelm’s site, the CISO of Cass Information Systems says Copperhelm gave Cass the confidence to deploy agentic AI. Copperhelm also sells through an AWS Marketplace listing with a $50,000 12-month contract. Its launch release says it works with paying customers including Fortune 500 enterprises, and SiliconANGLE reports one unnamed Fortune 500 customer as the company’s statement. One named customer and a listing, without independent corroboration of scale, fit this score. [s1, s12, s8, s10] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | SecurityWeek reports a $7 million seed round led by TLV Partners. The visible output against it is a product for sale on AWS Marketplace at a published 12-month price. The cited sources include no revenue or customer-growth figure. The raise appears proportional to seed-stage sales to large enterprises, with efficiency unconfirmed. [s9, s12, s8] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 | Copperhelm calls its category agentic cloud security, and SecurityWeek and SiliconANGLE use the same label in launch coverage. Its AWS Marketplace listing says Copperhelm is redefining exposure management for cloud-first teams. The agentic cloud security label is Copperhelm’s own, and the launch coverage adopts it. [s2, s9, s10, s12] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 2/5 | Copperhelm’s launch release describes the Context Lake as a layer that structures and connects cloud data across environments. Its technology page applies that layer to each customer’s own cloud architecture. The cited record documents no retained cross-customer dataset, embedded workflow lock or procurement position, and it does not document rival products. On that record, validating and remediating cloud exposures is a plausible feature for a platform already connected to the same cloud accounts. [s8, s3, s9] |
Copperhelm sells AI agents that investigate and fix cloud security issues for large enterprises. Its about page describes cloud security teams sifting through millions of raw alerts by hand while software engineers use AI to ship faster. The launch release describes the buyer as CISOs and security teams at large enterprises.
Copperhelm quantifies the pain with one company-reported case. The launch release says a Fortune 500 company turned 6 million raw findings into a few hundred validated risks its teams could remediate. SiliconANGLE attributes the same outcome to the company’s statement about an unnamed customer.
Copperhelm argues that AI-built exploits shorten the time defenders have. A page it titles Mythos describes AI discovering and weaponizing vulnerabilities, and it says the exploit window has collapsed to 15 minutes. The same page says 14 or 30-day patch cycles were built for human adversaries. [s2, s8, s10, s4]
Copperhelm’s product is a set of AI agents that investigate cloud vulnerabilities and act on them. The technology page lists System, Network, Adversary and Resolution agents. It says the System Agent connects to running machines, inspects active processes and in-memory code, and analyzes real-time configurations to determine exploitability.
The homepage groups the agents’ actions into patching, prevention, containment and hand-off. The actions include bumping an image version, applying a WAF rule, isolating a service network, shutting down an instance and writing a SIEM rule. Copperhelm says its agents suggest the intervention that fits each risk.
Copperhelm’s agents use the Context Lake as their model of the customer’s cloud. The launch release calls it a real-time decision layer that structures and connects cloud data across environments. The Anthropic partner page says Copperhelm is testing how its agents use frontier models such as Claude. [s3, s1, s8, s5]
Copperhelm positions its agents against manual triage and scanner output. Its AWS Marketplace listing says the product does what an engineer would do. The listing says it checks running machines for loaded vulnerable packages and processes listening on exposed ports.
The AWS Marketplace listing places Copperhelm in exposure management for cloud-first teams. It describes mapping attack paths across containers, cloud and infrastructure and validating which exposures can be exploited.
Copperhelm presents fixing problems as its distinction from tools that point them out. Its about page describes an autonomous agent that fixes problems, and its homepage says the agents execute remediation such as a WAF rule or an image patch. [s12, s2, s1]
Copperhelm sells through demo requests on its website and a contract listing on AWS Marketplace. The homepage includes a book-a-demo call to action, and the Marketplace listing offers a 12-month contract at $50,000 for protecting workloads.
Cass Information Systems is the customer Copperhelm names. Its CISO says Copperhelm gave the company the confidence to deploy agentic AI. The launch release says Copperhelm works with paying customers including Fortune 500 enterprises, and SiliconANGLE reports one unnamed Fortune 500 outcome as the company’s statement.
Copperhelm is a seed-stage company building its team. The launch release says the $7 million round will fund product development, go-to-market efforts and engineering hiring. The careers page lists two engineering openings in Tel Aviv, a Full Stack Engineer and a Senior Full Stack Developer. [s1, s12, s8, s10, s6]
Copperhelm’s founders come from cloud infrastructure and security roles. SecurityWeek reports that CEO Shimon Tolts, CPO Eyar Zilberman and CTO Roman Labunsky held leadership and senior technical roles at Unity, McAfee and RSA. CTech reports that the company was founded in late 2025 and is headquartered in Tel Aviv.
Community recognition is part of the team’s public profile. The launch release cites AWS Heroes, a CNCF Ambassador, a GitHub Star and Y Combinator alumni on the team. Ynetnews reports the same three recognitions, and a VentureBeat contributor article says Labunsky was VP of Engineering at Datree, a Kubernetes security tool.
The board includes partners from two venture firms. Copperhelm’s about page lists Rona Segev and Brian Sack of TLV Partners, which led the seed round, and Shay Michel of Merlin Ventures. [s9, s13, s8, s11, s14, s2]
Copperhelm publishes a trust center with its compliance status and controls. It lists SOC 2 Type II as its framework and a report titled 2025 SOC 2 Type II that buyers can request. Copperhelm states that it runs annual third-party penetration tests and tests its incident response plan at least annually.
Copperhelm describes customer controls over what its agents change. The homepage says customers decide what an agent may do on its own, choosing among execute, suggest and monitor, and which actions require approval. It also says customers see a map of everything a change touches beforehand and can roll back any action in one click.
Copperhelm frames its Anthropic relationship around safety. Its announcement says it joined Anthropic’s Cyber Verification Program and is testing and validating how its agents use frontier models such as Claude. [s7, s1, s5]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Wiz | competes with | Competes for the same enterprise cloud security buyer. | |
| Orca Security | competes with | Competes for cloud security teams prioritizing exposures across their cloud estates. | |
| Tamnoon | competes with | Competes for buyers seeking automated cloud remediation. | |
| Sweet Security | competes with | Competes for cloud runtime security budgets. | |
| Torq | adjacent | Adjacent through the security operations automation budget. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Dropzone AI | adjacent | Adjacent through the AI-assisted security operations budget. |
Add analyzed competitors to compare them side by side with Copperhelm.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
Copperhelm sells software to security teams at large enterprises, and the customer's own team runs it, sets its policies, and owns the results. Its agents connect to running machines, inspect code in memory, and apply firewall rules or shut down instances on live infrastructure. Making those changes on live systems, with a map of what each change affects and a one-click rollback, is engineering a competitor would need to reproduce. Its Context Lake, the layer that structures cloud data for the agents, reads each customer's own environment, and Copperhelm does not describe data it keeps across customers. A customer that left would have to recreate elsewhere the policies it wrote in Copperhelm, which list the actions the agents execute on their own, only suggest, or submit for approval.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers buy Copperhelm as software, for example through a $50,000 12-month AWS Marketplace contract. Its homepage says the customer decides what the agents may do on their own and what requires approval. The customer’s team operates the product and owns its outcomes. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Leaving Copperhelm would mean connecting a replacement to the customer’s cloud accounts. The customer would also rebuild its policies for which agent actions execute, stay as suggestions, or need approval. Those are integrations and learned workflows, and the cited record documents no inline traffic dependence, network effect or regulatory tie and does not size a migration. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Copperhelm’s trust center lists a SOC 2 Type II report labeled 2025, annual third-party penetration tests and a 99.9% availability commitment. A funded competitor can obtain the same attestation through ordinary enterprise preparation. The cited record includes no authorization or mandate tied to the product. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Copperhelm’s agents connect to running machines, inspect in-memory code, analyze real-time configurations for exploitability, and change production infrastructure. The homepage says each change comes with a map of everything it touches and a one-click rollback. Making such changes safely on live cloud workloads is real-time systems work, documented through Copperhelm’s own description. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Sean Mullins, CISO of Cass Information Systems, describes Cass as a century-old, highly regulated financial institution. Mullins says Copperhelm gave Cass the confidence to deploy agentic AI. Copperhelm’s launch release says it serves CISOs and security teams at large enterprises and cites one unnamed Fortune 500 company. A named regulated financial buyer meets the regulated-enterprise level, and that buyer appears in a testimonial on Copperhelm’s own site. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 1/3 | Copperhelm is an application whose agents do cloud security work for the customer’s team. Its technology page invites customers to connect their own AI workflows to the Context Lake. That Build Your Agent section contains no interface details or examples of dependent systems, so the record documents an application with a marketed extension point. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | SecurityWeek calls the Context Lake a proprietary component that structures and connects cloud data across environments. Copperhelm’s technology page applies it to each customer’s own cloud architecture, which describes a technology working on per-customer data. The cited record evidences no dataset, content licence or patent that Copperhelm retains. |
Copperhelm sells to CISOs and security teams at large enterprises, according to its launch release. Ynetnews reports that the platform is designed for cloud infrastructure and can operate across hundreds of accounts. A testimonial from a director of financial services says a team cannot just plug a large language model into 200 AWS accounts and expect it to know how everything connects.
Regulated finance appears in the customer Copperhelm names. Sean Mullins, CISO at Cass Information Systems, describes Cass as a century-old, highly regulated financial institution. Mullins says Copperhelm gave Cass the confidence to deploy agentic AI. The launch release adds one unnamed Fortune 500 company that cut 6 million raw findings to a few hundred validated risks, a figure the company reports.
Two other homepage testimonials identify their speakers by role. Andrey Eidelman is labeled “Director Product Security ex-gong” and Evan London “Director of financial services”. Neither label includes a current employer, so these testimonials describe use without identifying a customer organization.
Copperhelm’s AI agents investigate cloud vulnerabilities and then act on them. The technology page lists System, Network, Adversary and Resolution agents. It says the System Agent connects to running machines, inspects active processes and in-memory code, and analyzes real-time configurations to determine exploitability.
The homepage groups the actions the agents recommend or execute into four families. Patching covers bumping an image version, and prevention covers SCP policies and WAF rules. Containment covers microsegmentation, isolating a service network or shutting down an instance, and hand-off covers writing a SIEM rule or enabling logging.
Copperhelm’s agents use the Context Lake as their model of the customer’s cloud. The launch release calls it a real-time decision layer that structures and connects cloud data across environments. The Anthropic partner page says Copperhelm is testing how its agents use frontier models such as Claude for network analysis, live remediation and vulnerability management.
Copperhelm sells through demo requests and an AWS Marketplace contract listing. The homepage includes a book-a-demo call to action, and the Marketplace listing offers 12-month, 24-month and 36-month contract terms.
Cass Information Systems is the customer Copperhelm names. Its CISO says Copperhelm gave the company the confidence to deploy agentic AI. The launch release says Copperhelm works with paying customers including Fortune 500 enterprises, and SiliconANGLE reports one unnamed Fortune 500 outcome as the company’s statement.
Copperhelm is a seed-stage company building out its team. The launch release says the $7 million round will fund product development, go-to-market efforts and engineering hiring. The careers page lists a Full Stack Engineer and a Senior Full Stack Developer, both in Tel Aviv.
Copperhelm’s published price is a $50,000 12-month contract on AWS Marketplace. The listing has one pricing dimension, Copperhelm, described as Protect workloads, and offers 24-month and 36-month contract options alongside the 12-month term.
The listing states that pricing is based on the duration and terms of the buyer’s contract with the vendor. Copperhelm and the buyer therefore set the cost of a given deployment in their contract terms.
Copperhelm describes its agents acting on production infrastructure under controls the customer sets. The homepage says nothing happens unless the customer says go. Customers decide what the agent may do on its own, choosing among execute, suggest and monitor, and which actions require their approval.
The homepage describes two further safeguards for each change. Before an agent makes a change, the customer sees a map of everything it touches and affects. Copperhelm also says every action can be rolled back in one click, and SecurityWeek reports the company’s description that human teams remain in control.
Copperhelm’s trust center lists operational commitments alongside the product controls. Copperhelm states that all software and infrastructure changes undergo authorization, documentation and testing, and it commits to 99.9% service availability. AWS is its listed cloud service provider.
Copperhelm publishes a trust center listing its compliance status and controls. It names SOC 2 Type II as its framework and lists a report titled 2025 SOC 2 Type II that buyers can request.
The listed controls span product security, access management, continuity, data security, organization security and endpoint security. Copperhelm states that it runs annual third-party penetration tests and tests its incident response plan at least annually.
Copperhelm frames its Anthropic relationship around safe use of frontier models. Its announcement page says it joined Anthropic’s Cyber Verification Program. The page also says Copperhelm is testing and validating how its agents use models such as Claude, in the company’s own words.
Copperhelm’s ecosystem ties are to a cloud provider, a model provider and a marketplace. The product is listed on AWS Marketplace, and the trust center lists AWS as its cloud service provider. The Anthropic partner page mentions Claude among the frontier models its agents use.
Copperhelm’s agents act on cloud controls and security tooling. The homepage lists enforcing SCP policies and applying WAF rules among prevention actions. It lists writing a SIEM rule and enabling relevant logging among hand-off actions.
Copperhelm markets the Context Lake as a foundation for customers’ own agents. Its technology page invites customers to connect custom AI workflows to what it calls a real-time cloud ontology and to build their own agentic solutions on it.
Copperhelm’s founders come from cloud infrastructure and security roles. SecurityWeek reports that CEO Shimon Tolts, CPO Eyar Zilberman and CTO Roman Labunsky held leadership and senior technical roles at Unity, McAfee and RSA. CTech reports that the company was founded in late 2025 and is headquartered in Tel Aviv.
Community recognition is part of the founders’ public profile. The launch release cites AWS Heroes, a CNCF Ambassador, a GitHub Star and Y Combinator alumni on the team. Ynetnews reports the same three recognitions, and a VentureBeat contributor article says Labunsky was VP of Engineering at Datree, a Kubernetes security tool.
The board includes partners from two venture firms. Copperhelm’s about page lists Rona Segev and Brian Sack of TLV Partners, which led the seed round, and Shay Michel of Merlin Ventures.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Copperhelm technology page | official | 2026-06-11 |
| f2 | CTech on the Copperhelm seed round | press | 2026-09-15 |
| f3 | Ynetnews on the Copperhelm seed round | press | 2026-09-15 |
| f4 | SecurityWeek on the Copperhelm seed round | press | 2026-09-15 |
| f5 | SiliconANGLE on the Copperhelm launch | press | 2026-09-15 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Copperhelm: homepage | official | 2026-09-15 |
| s2 | Copperhelm: about page | official | 2026-09-15 |
| s3 | Copperhelm: technology page | official | 2026-09-15 |
| s4 | Copperhelm: Mythos page | official | 2026-09-15 |
| s5 | Copperhelm: Anthropic Cyber Verification Program announcement | official | 2026-09-15 |
| s6 | Copperhelm: careers page | official | 2026-09-15 |
| s7 | Copperhelm: trust center | official | 2026-09-15 |
| s8 | PR Newswire: Copperhelm launch and seed funding release | official | 2026-09-15 |
| s9 | SecurityWeek: Copperhelm seed funding article | press | 2026-09-15 |
| s10 | SiliconANGLE: Copperhelm launch article | press | 2026-09-15 |
| s11 | Ynetnews: Copperhelm seed round article | press | 2026-09-15 |
| s12 | AWS Marketplace: Copperhelm listing | official | 2026-09-15 |
| s13 | CTech: Copperhelm seed funding article | press | 2026-09-15 |
| s14 | VentureBeat: contributor article on the Copperhelm launch | official | 2026-09-15 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Copperhelm: homepage | official | 2026-09-15 |
| s2 | Copperhelm: about page | official | 2026-09-15 |
| s3 | Copperhelm: technology page | official | 2026-09-15 |
| s4 | Copperhelm: Mythos page | official | 2026-09-15 |
| s5 | Copperhelm: Anthropic Cyber Verification Program announcement | official | 2026-09-15 |
| s6 | Copperhelm: careers page | official | 2026-09-15 |
| s7 | Copperhelm: trust center | official | 2026-09-15 |
| s8 | PR Newswire: Copperhelm launch and seed funding release | official | 2026-09-15 |
| s9 | SecurityWeek: Copperhelm seed funding article | press | 2026-09-15 |
| s10 | SiliconANGLE: Copperhelm launch article | press | 2026-09-15 |
| s11 | Ynetnews: Copperhelm seed round article | press | 2026-09-15 |
| s12 | AWS Marketplace: Copperhelm listing | official | 2026-09-15 |
| s13 | CTech: Copperhelm seed funding article | press | 2026-09-15 |
| s14 | VentureBeat: contributor article on the Copperhelm launch | official | 2026-09-15 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.