Obsidian Security reaches a $1.1 billion valuation as artificial intelligence transforms the landscape of threats.

      Obsidian Security has emerged as the latest cybersecurity firm to see its valuation increase due to the influence of artificial intelligence. The SaaS-security company has secured a new funding round of $85 million in Series D financing, reaching a valuation of $1.1 billion, driven by the rising demand for tools that protect AI applications.

      This funding elevates Obsidian to unicorn status and highlights a straightforward reality: as businesses find new uses for AI, they also face new vulnerabilities, and there is a need for protection.

      Investors have clearly recognized this opportunity. Significant capital has flowed into startups focused on securing enterprise AI, exemplified by Onyx’s $113 million round aimed at keeping human oversight of AI agents, among several others striving to create similar safety measures.

      Founded in 2017, Obsidian has established itself in safeguarding software-as-a-service applications, encompassing a wide array of cloud platforms like Salesforce, Microsoft 365, and Workday that store critical data for modern businesses.

      The company's systems monitor for compromised accounts, hazardous configurations, and identity-based attacks across its expansive environment.

      The initial problem Obsidian tackled has only intensified. Large enterprises now utilize hundreds of SaaS applications, each serving as an entry point to their data, and many security teams struggle to monitor all of them simultaneously.

      The focus has shifted to identity as the main battleground. With the dissolving of traditional perimeter defenses in favor of the cloud, attackers have transitioned from breaking in to logging in, utilizing stolen credentials and over-permissioned accounts—exactly the vulnerabilities that AI agents now amplify.

      The current narrative has shifted toward AI. Obsidian has been developing defenses for the AI agents that businesses are integrating with their SaaS tools, software that can access, modify, and act upon corporate data with far less oversight than human employees.

      This level of autonomy is particularly concerning. An agent given extensive access to a company's applications holds significant power and poses risks; a single misconfigured or compromised agent can access data that no phishing email could.

      The speed of operation alters the dynamics. A compromised employee may click a few incorrect links; however, a compromised agent can traverse numerous applications and access vast amounts of data before detection.

      Obsidian’s advantage lies in its established presence within the SaaS framework where much of this activity occurs. Securing AI agents largely involves controlling their access, an area where Obsidian has invested years in developing comprehensive mappings.

      The timing aligns well with the available investment. The adoption of agentic AI has rapidly increased among enterprises, and security budgets generally increase with the introduction of new technologies, especially after the initial breaches make the risks apparent.

      Larger players are also getting involved. Databricks recently acquired Panther Labs as part of a cybersecurity initiative, indicating that security in the age of AI is becoming a sector that major companies aim to dominate rather than merely collaborate in.

      Over the years, Obsidian has attracted funding from a variety of notable investors, including Greylock, Wing, GV, and Norwest, with the new valuation marking a significant increase from prior funding rounds.

      The company has already begun to signal a transition in its product offerings, introducing AI-agent defenses and SaaS supply-chain protections as the adoption of agentic technologies rises. The new funding represents a market endorsement of this strategic direction.

      In the realm of software, security is one of the rare categories where AI is clearly driving increased demand rather than posing a threat. The same automation that causes concern among defenders is also generating work that sustains the growth of companies like Obsidian.

      Valuations in the security sector have previously surged, and not all AI-security startups will live up to their valuations. The bet being placed is that securing AI will become as essential as securing email once was.

      For Obsidian, the $1.1 billion valuation signals a belief among investors that the issues surrounding SaaS security and AI security are converging. If they are correct, the company has spent the last decade preparing for a market that is only now emerging.