Comp AI, which uses AI agents to draft security policies, collect audit evidence, conduct continuous compliance monitoring, and more, raised a $34M Series A

Automated security compliance checks can now be performed continuously, making manual SOC 2 audits less necessary for ongoing operations.

Comp AI, a startup focused on automating security and compliance tasks using AI agents, has secured $34 million in Series A funding. The round was co-led by Roo Capital and Grand Ventures. Founded in January, Comp AI aims to streamline processes like drafting security policies, collecting audit evidence, and continuous compliance monitoring. The company's founders, Lewis Carhart, Claudio Fuentes, and Mariano Fuentes, previously collaborated on a successful workflow platform that garnered over a million users before being shut down. Their experience highlighted the challenges of manual compliance procedures, particularly during the SOC 2 process, which inspired the creation of Comp AI. The platform assists companies in meeting security requirements and maintaining compliance without replacing human oversight or independent audit reviews. It also offers AI-powered penetration testing to identify vulnerabilities in codebases and infrastructures. Comp AI has raised a total of $37.5 million to date and plans to use the new capital for product expansion. The company is addressing the emerging security risks associated with the rapid adoption of AI by businesses.

The emergence of companies like Comp AI signals a growing market trend toward agentic security solutions designed to handle the complexities of modern compliance in an AI-driven world. As businesses increasingly integrate AI into their operations, the need for real-time monitoring and validation of agent actions becomes paramount, moving beyond traditional audit cycles that struggle to keep pace with rapid technological deployment. This shift suggests a future where cybersecurity and compliance are proactive, continuous, and deeply embedded within the operational fabric of organizations.

For businesses, this means a potential reduction in the manual labor and time currently dedicated to compliance, freeing up resources for core product development. It also implies a new approach to security risk management, where the focus shifts from periodic checks to constant oversight of AI agents' access and behavior. Investors are clearly backing this vision, as evidenced by the significant funding rounds for startups like Comp AI, indicating a strong belief in the future of automated, agent-based security and compliance solutions.