Cylake Raises $245M Before Sovereign Security Beta
Moving cybersecurity back inside the building sounds like retreat until the customer is a bank, government agency, defense program, hospital, or critical-infrastructure operator whose most sensitive telemetry cannot leave. Cylake is financing that reversal with a $245M convertible note before its product reaches beta.
Lightspeed Venture Partners led the financing, with Picture Capital and Redpoint Ventures participating. Cylake says the September 8, 2026 note brings total disclosed funding to $290M after a $45M Seed led by Greylock Partners.
The money will support product development and hiring as Cylake builds a customer-controlled system that combines hardware, security software, a shared data foundation, and AI. A beta is expected by the end of 2026, with general availability planned for 2027.
What Cylake Announced
Cylake's official funding announcement describes the $245M as a convertible note rather than a priced equity round. Lightspeed says it led the financing, while the issuer release names Lightspeed, Picture Capital, and Redpoint Ventures as participants. The company did not disclose a valuation, ownership impact, investor allocations, conversion cap, discount, interest rate, maturity, or other note economics.
The financing follows a $45M Seed led by Greylock Partners. Cylake's latest release dates that Seed to March 2026, its launch announcement is dated February 4, and Greylock published its investment article on March 5. Those records describe one prior Seed, not separate February and March rounds. DevCuration's earlier Cylake coverage captures that launch-stage financing.
Cylake also announced an investment agreement with In-Q-Tel in April 2026 without disclosing the amount. The company still reports $290M raised in total, so the IQT investment should not be added again as if it were a separate known increment.
A Security Platform Built to Stay Put
The product thesis begins with an awkward buyer constraint. Security architecture spent 2 decades moving toward cloud delivery, but some highly regulated organizations cannot allow sensitive operational data or security telemetry to leave their control. Cylake is building for those customers rather than asking them to accept a reduced version of a public-cloud product.
On its platform page, Cylake describes a complete appliance-based stack installed in a customer's data center or a managed private facility. Compute, storage, a shared data lake, detection, policy, automation, and security functions operate as one system. The company also says the platform can run inside fully air-gapped environments and keep data under the customer's control.
Lightspeed adds more detail to the architecture. Its investment thesis describes CPUs, GPUs, memory, and storage inside the enterprise, with security data flowing into a common lake and security functions operating as applications on top. Machine learning is intended to monitor the data stream, while language models help investigate, explain, and respond to what the detection layer finds. These remain company- and investor-reported plans for a product that has not reached public beta.
The Founders Are Part of the Underwriting
Cylake was founded in Sunnyvale in 2026 by Nir Zuk, Wilson Xu, and Ehud "Udi" Shamir. Nir Zuk is founder and CEO after founding Palo Alto Networks and serving as its CTO for more than 20 years. Wilson Xu is co-founder and Chief Development Officer after leading engineering at Palo Alto Networks, while Udi Shamir is co-founder and Chief Architect after helping found SentinelOne and later working at Palo Alto Networks.
The record requires separating current titles from company history. Jesse Ralston is Cylake's CTO. The current leadership page also lists René Bonvanie as CMO, Jony Hartono as CFO, Maya Marcus as Chief People Officer, and Nick Campagna as Head of Product Management.
The new financing also changes the board. Ravi Mhatre, a partner and co-founder at Lightspeed, is joining as a director, while Picture Capital partner Rakesh Loonkar is joining as an observer. Cylake's April board announcement named Nir Zuk, Greylock partner Asheem Chandna, Jim Goetz, and former Palo Alto Networks chairman and CEO Mark McLaughlin as directors before these additions.
Why a Pre-Beta Company Can Absorb $245M
Software startups can often narrow the first product until a small team finds demand. Cylake is choosing the opposite operating surface: hardware, embedded systems, endpoint agents, a large-scale data pipeline, policy, detection, AI, supply chain, and enterprise deployment all have to meet inside the same product. The capital has several expensive jobs before a commercial rollout begins.
Cylake says it has grown to more than 40 employees and is working with an unnamed cohort of design partners. Its careers page showed 12 openings during this review, including roles in systems software, data pipelines, endpoint engineering, applied AI, supply chain, product design, and commercial recruiting. That hiring map supports the breadth of the architecture, but it does not prove customer adoption or product performance.
The buyer also changes the sales process. A regulated institution does not adopt a security appliance simply because the architecture is elegant. Procurement, data governance, air-gap operations, updates, incident response, hardware reliability, detection quality, integration, and accountability all become part of the product decision.
What the Financing Changes
The $245M note gives Cylake the resources to develop a broad platform and physical delivery system before general availability. It also lets the company recruit against an unusually experienced founding team and move design-partner feedback into a beta scheduled for the end of 2026.
Several pieces of commercial evidence remain unavailable. Cylake has not named design partners, reported revenue, disclosed paid deployments, published customer outcomes, or provided independent performance benchmarks. The company has also not disclosed certifications, production installation counts, or the economics of the convertible note.
That evidence gap does not erase the financing. It defines the work the financing is paying for. Cylake now has to turn a founder-level architectural argument into a machine that can enter the most protected rooms in an organization, stay useful when the internet is unavailable, and earn the trust of security teams whose refusal to compromise created this market in the first place.
Cybersecurity funding, last 30 days
DevCuration's funding database tracked 5 Cybersecurity rounds totaling $2.4B in disclosed capital over the past 30 days. Recent deals we covered:
- Palo Alto Networks Acquires Console for Agentic SecurityM&A · Sep 2
- Visa’s $2.4B BioCatch Deal Moves Fraud Defense Upstream$2.4B · Aug 27
- Molt AI Raises $1M in Pre-Seed FundingPre-Seed · $1M · Aug 21
- TopHat Security Closes Series A for OT CybersecuritySeries A · Aug 21
- Mindgard Raises $30M in Series A FundingSeries A · $30M · Aug 14
Frequently Asked Questions
Why did Cylake use a convertible note for the $245M financing?
Cylake disclosed the instrument but not its pricing or conversion terms. A convertible note can convert into equity under agreed conditions, but Cylake did not publish the valuation cap, discount, interest rate, maturity, allocation, or conversion trigger.
What is Cylake building for regulated organizations?
Cylake is developing an appliance-based cybersecurity platform that combines compute, storage, a shared data foundation, security functions, policy, detection, automation, and AI inside customer-controlled environments. The company says it can operate on premises, in private clouds, and in air-gapped settings without depending on a public cloud.
Why does sovereign cybersecurity matter to Cylake's target buyers?
Governments, banks, healthcare organizations, defense programs, and critical-infrastructure operators may face rules or operating constraints that prevent sensitive security data from leaving their control. Cylake is designing its platform around that requirement instead of adapting a public-cloud product after the fact.
What are investors underwriting before Cylake's beta release?
The financing backs an experienced security team and a broad technical plan spanning hardware, systems software, security products, a common data layer, and AI. The product is still pre-beta, so named customers, production deployments, revenue, and independently validated performance remain undisclosed.
What milestones should the market watch after the financing?
Cylake expects beta by the end of 2026 and general availability in 2027. The important evidence will include design-partner conversion, production reliability, deployment and update operations, detection quality, customer economics, and whether regulated buyers adopt a complete sovereign stack.
Where the Money Moved
The intelligence briefing of the innovation economy. Funding, M&A, debt and fund closes, read as market signal rather than deal announcements.
Subscribe to Where the Money Moved