Zafran Security, a provider of AI-native threat exposure management, has announced a strategic investment from Amex Ventures, the venture capital arm of American Express. Amex Ventures joins Zafran’s latest $60M C round, including existing investors Menlo Ventures, Sequoia Capital, and Cyberstarts.
The investment reflects a broader shift in how enterprises are approaching cybersecurity as AI becomes deeply embedded across core infrastructure. As innovation accelerates across cloud platforms, digital payments, data ecosystems, and third-party integrations, CISOs are under increasing pressure to move faster while maintaining operational resilience, regulatory confidence, and uninterrupted service delivery.
Large financial institutions and other critical infrastructure operators face constant scrutiny from regulators and boards, while being persistently targeted by sophisticated threat actors. These organizations manage hybrid environments spanning cloud, on-premises data centers, endpoints, and third-party providers. At the same time, their tolerance for disruption is minimal. Any instability, rushed remediation effort, or operational misstep can introduce immediate financial and reputational consequences.
Over the years, many of these enterprises have assembled best-in-class security stacks. EDR platforms, firewalls, WAFs, cloud security controls, vulnerability scanners, and ticketing systems are firmly in place. The challenge is no longer a lack of tools. It is the lack of coordination between them.
Zafran addresses this coordination gap with a fundamentally different approach. Designed as the “defensive coordinator” for complex security programs, Zafran aligns coverage across environments and validates how controls operate together in practice. By integrating across the full breadth of an organization’s existing security stack, Zafran consolidates disparate inputs into a unified view of exposure. Rather than replacing tools or adding operational friction, the platform acts as a force multiplier, identifying where defenses break down and surfacing the small number of vulnerabilities that carry material risk.
“Critical infrastructure institutions such as financial organizations are under constant pressure to innovate while maintaining trust, resilience, and regulatory confidence,” said Sanaz Yashar, co-founder and CEO of Zafran Security. “We built Zafran to serve as the defensive coordinator for complex environments. Our platform helps teams understand where the real risk is, align their existing tools, and mobilize action to stop exploitation without disrupting the business.”
Zafran’s Agentic Exposure Management platform unifies discovery, prioritization, mitigation, and remediation into a single operating model. By coordinating tools, teams, and workflows, Zafran enables financial institutions to reduce exposure faster, improve operational consistency, and gain confidence that their layered defenses are functioning as intended.
For Amex Ventures, the investment aligns with a focus on technologies that help financial institutions scale securely in increasingly interconnected environments.
“As financial systems grow more complex and digitally interconnected, visibility and coordination across security controls become essential,” said Kevin Weber, managing director at Amex Ventures. “Zafran’s approach reflects how leading financial institutions are thinking about managing risk at scale while continuing to innovate.”
