Mindgard has raised $30 million in Series A funding, bringing its total funding to almost $42 million.<\/p>\n
The platform has found more than 150 vulnerabilities in AI products, including a zero-day in Cursor and weaknesses in ChatGPT\u2019s guardrails.<\/p>\n
Two major competitors were acquired in the past year, and the AI security market is expected to reach $56.5 billion by 2033.<\/p>\n
Researchers found a way to make Cursor\u2019s AI-powered editor run any code without needing phishing links or malware. The same team also leaked Google Antigravity data across trust boundaries and bypassed ChatGPT\u2019s image-generation guardrails. <\/p>\n
Mindgard<\/a> disclosed all three vulnerabilities.<\/p>\n The startup completed a $30 million Series A round led by Album VC, with new investor Karma Ventures and returning investors .406 Ventures, Atlantic Bridge, IQ Capital,<\/a> and Lakestar<\/a>. This brings its total funding to nearly $42 million, up from about $11.9 million raised in a 2023 seed round and a December 2024 Series A tranche<\/a>.<\/p>\n \u201cAI is creating an entirely new attack surface, and organisations need a fundamentally different approach to securing it. We don\u2019t just automate attacks. We operationalize expertise, turning the knowledge of leading AI security researchers and offensive security practitioners into the capabilities every enterprise needs to secure their AI,\u201d said James Brear<\/a>, chief executive of Mindgard. <\/p>\n From a Lancaster University lab to a commercial red-teaming platform<\/p>\n Founded in 2022, the startup began in what it describes as the world\u2019s largest AI security lab, built on more than ten years of research by Dr. Peter Garraghan at Lancaster University. Garraghan is now Mindgard\u2019s chief science officer. <\/p>\n James Brear, who previously led Swimlane, Veriflow, and Procera, became CEO in October 2025 as the company moved from research to enterprise sales. The company has not shared its current headcount.<\/p>\n The platform runs ongoing, automated red-teaming against models, agents, and applications, simulating real attacker behavior rather than relying on static checklists. It does three main things: finds unmonitored \u201cshadow AI,\u201d tests deployed systems for vulnerabilities, and monitors AI applications in operation. For example, a bank launching a customer chatbot could use the platform to check for prompt injection and data leaks before and after launch.<\/p>\n Mindgard stands out by offering proof of work, with more than 150 disclosed vulnerabilities in real products added to its threat database. The company works with clients in financial services, pharmaceuticals, gaming, digital services, semiconductors, and healthcare.<\/p>\n Rapidly consolidating and well-funded category<\/p>\n The AI security sector has shifted from a crowded market to a consolidating one within a year. HiddenLayer raised $56 million, backed by Microsoft\u2019s M12 and IBM Ventures. Zurich-based Lakera, known for its Gandalf prompt-injection game, raised $30 million before being acquired by Check Point in September 2025. Protect AI secured $60 million at a reported $400 million valuation before its acquisition by Palo Alto Networks the same year.<\/p>\n While other companies focus on guardrails, monitoring, or posture management, Mindgard prioritises offensive research by focusing on finding new exploits. This strategy is harder to copy, but it means Mindgard must stay ahead of attackers who also have access to AI tools. Two of its closest competitors, which focus on<\/a> endpoint protection and stopping AI-era threats, have also raised large amounts of funding this year<\/a>, showing how competitive this sector is.<\/p>\n \u201cOrganisations are moving AI into critical operations without security infrastructure designed for how these systems operate in practice. Mindgard has translated deep research and elite offensive-security expertise into a continuously evolving capability that enables enterprises to stay ahead of emerging AI threats,\u201d said Ty Boswell<\/a>, partner at Album VC.<\/p>\n \u201cAI security is an emerging category, and Mindgard stands out as one of the names to watch. Its technology is built on world-class offensive security research, combining automated reconnaissance with smart penetration testing. Crucially, it\u2019s already proven in production \u2014 some of the most demanding F2000 enterprises rely on it to safeguard their AI systems,\u201d added Kristjan Laanem<\/a>aa, founding partner at Karma Ventures. <\/p>\n The future beyond vulnerability discovery<\/p>\n