From TechCrunch · Dominic-Madori Davis · · 1m 50s
Comp AI raises $34M to automate security and compliance
A new startup uses AI agents to handle tedious security audits and compliance work that slows down software companies.
In brief
A new startup uses AI agents to handle tedious security audits and compliance work that slows down software companies. As companies deploy more AI agents, they need continuous security monitoring that can catch new risks in real time, not just at audit time. Originally reported by TechCrunch.
Comp AI lands $34M Series A
The cybersecurity startup raised funding led by Roo Capital and Grand Ventures to automate security and compliance work for software companies.
Three founders learned from LeapAI
Lewis Carhart, Claudio Fuentes, and Mariano Fuentes built LeapAI together, which grew to over a million users before they shut it down to find a better use case.
SOC 2 compliance inspired the idea
While scaling LeapAI, the founders spent months manually handling SOC 2 compliance, which distracted them from building the product.
“It's a very obscure process. It took us a couple of months of doing things by hand, and the whole time it meant taking our eyes off building the product.”
AI agents handle compliance tasks
Comp AI's platform uses AI agents to write security policies, collect audit evidence, and continuously monitor whether companies meet compliance controls.
Humans stay in control
AI agents draft policies and perform tasks, but humans review and approve all work. As agents take on riskier actions, safeguards and human oversight increase.
“An agent might draft a policy, for example, but a person still reviews and approves it.”
Security and compliance drive revenue
For software companies, security and compliance directly impact deals. Customers often request SOC 2 reports before closing contracts, making compliance automation valuable.
“For a lot of software companies, security and compliance are directly tied to revenue.”
AI agents create new compliance gaps
When companies deploy new AI agents that access customer data or change permissions, traditional audits become outdated within weeks, creating blind spots.
“The audit didn't become invalid; it simply wasn't designed to tell you in real time what changed afterward.”
Continuous monitoring for AI systems
Comp AI monitors what AI agents access, what they attempt to do, and whether they stay within set boundaries as systems evolve.
Part of a growing security wave
Comp AI joins a wave of AI security startups like Vanta and Drata, responding to new risks from rapid AI adoption and experimentation.
The takeaway
As companies deploy more AI agents, they need continuous security monitoring that can catch new risks in real time, not just at audit time.
