Threat hunting startup Nebulock Inc. revealed today that it has raised $25 million in new funding to push its autonomous hunting platform into broader “hunt-first” security analytics.

Founded in 2023, Nebulock offers autonomous, vendor-agnostic threat hunts driven by artificial intelligence. Those hunts span endpoint, identity, cloud, network and software-as-a-service telemetry. Its argument is simple: Most security tooling judges events one at a time, so it misses threats that only surface once activity is read as a sequence over time.

The company calls the resulting risks “green flags,” its term for malicious activity that looks routine on the surface. An attacker logging in with valid stolen credentials, or a sanctioned AI agent doing something nobody authorized, trips no rule and raises no obvious anomaly. Nebulock turns an organization’s own telemetry into what it describes as a behavioral system of record, letting analysts reason across systems rather than chase individual alerts.

Nebulock said the platform has run more than 300 million agentic investigations and produced more than 4,000 high-confidence findings since its public launch less than a year ago. Customers include Cribl Inc., HealthEdge Software Inc. and Bain Capital LP, alongside Fortune 500 enterprises in financial services, healthcare and technology.

Alongside the raise, Nebulock shipped new tooling. One feature for insider risk pulls a person’s or an AI agent’s scattered accounts, identities and hosts into a single entity that analysts can monitor. Another correlates unrelated signals from endpoint, identity and cloud into one detection, with a full evidence chain behind it. There’s also a Command Center view that tells teams where to hunt, what to investigate and which coverage gaps matter most, including the ones still buried in a customer’s security information and event management system.

Enterprise AI adoption is what Nebulock says makes the approach urgent. When OpenClaw went viral earlier this year, the company logged more than 50,000 related events across 40% of its customer base inside a week. Detections went out before those events turned into incidents, it said.

“Expert threat hunting should not demand endless headcount, months of integration, or a pile of tools that never talk to each other,” founder and Chief Executive Damien Lewke said in a blog post announcing the round.

FirstMark Capital led the Series A round. Existing backers Bain Capital Ventures, Decibel Partners, Zetta Venture Partners and Step Function Ventures also took part.

With the new funding, Nebulock has now raised about $33.5 million in total. The company previously raised $8.5 million in a seed round in July 2025.

Image: Nebulock