Obsidian Security reaches a $1.1 billion valuation as AI transforms the threat landscape.

      Obsidian Security has emerged as the latest cybersecurity firm to receive a significant upward valuation due to artificial intelligence advancements. The SaaS-security company has secured $85 million in a Series D funding round, achieving a $1.1 billion valuation amidst a growing demand for tools that protect AI technologies.

      This funding elevates Obsidian into unicorn status and highlights a straightforward trend: every new application of AI by businesses also presents new vulnerabilities that need protection.

      Investors have clearly recognized this gap in the market. Substantial investments are flowing into startups focused on securing enterprise AI, from Onyx’s $113 million round aimed at keeping human oversight of AI agents to numerous other companies racing to create similar protective measures.

      Founded in 2017, Obsidian gained recognition for its protection of software-as-a-service applications, including a host of cloud tools such as Salesforce, Microsoft 365, and Workday, which contain crucial data for modern organizations.

      The company’s systems monitor for compromised accounts, unsafe configurations, and identity-centric attacks across this range of applications.

      The issue it originally addressed has expanded significantly. Large organizations now utilize hundreds of SaaS applications, each acting as a potential entry point to their data, and many security teams find it challenging to monitor all of them simultaneously.

      Identity has emerged as a critical area of concern. As network perimeters have faded into the cloud, attackers have shifted from breaking in to logging in, often using stolen credentials and excessively permitted accounts—a vulnerability that AI agents exacerbate.

      The focus has now shifted to AI. Obsidian has been developing defenses for the AI agents that businesses are integrating into their SaaS tools, enabling software to read, write, and act on corporate data with significantly less oversight than human employees.

      This level of autonomy raises substantial concerns. An AI agent with extensive access to a company’s applications possesses both power and risk, and a single misconfigured or hijacked agent can access sensitive data that no phishing email could reach.

      Speed significantly alters the risk calculations. While a compromised employee may accidentally click on a few harmful links, a compromised agent can swiftly traverse multiple applications and interact with massive datasets before any alarm is raised.

      Obsidian's key advantage lies in its position within the SaaS environment where many of these issues manifest. Protecting AI agents largely revolves around regulating what they can access, and Obsidian has dedicated years to mapping this out.

      The timing aligns well with market trends. The adoption of agent-based AI has surged within corporations, and security budgets typically increase as new technologies are implemented, especially after initial breaches highlight the associated risks.

      Larger enterprises are also getting involved. Databricks recently acquired Panther Labs as part of a cybersecurity initiative, indicating that AI-driven security is becoming a sector that major players are eager to dominate rather than simply collaborate in.

      Over the years, Obsidian has attracted investments from several prominent backers, including Greylock, Wing, GV, and Norwest, and this new valuation is a notable increase from its previous funding rounds.

      The company has been signaling a shift in its product offerings, introducing defenses for AI agents and protections for the SaaS supply chain as the adoption of agentic technologies grows. This funding underscores the market's approval of that strategic direction.

      In the realm of software, security is one of the few areas where AI seems to be creating demand rather than presenting a threat. The same automation that may concern security professionals is also generating opportunities for companies like Obsidian to expand.

      While security valuations have risen in the past, not every AI-focused security startup will sustain its valuation long-term. The belief is that protecting AI will become as essential as email security once was.

      For Obsidian, the $1.1 billion valuation is a bet by investors that the challenges of SaaS security and AI security are converging. If they are correct, the company has spent the last decade preparing for a market that is only beginning to emerge.