Overwatch Data Raises $15M for AI Risk Investigations

A merchant application can carry evidence that matters to the people investigating a cyberattack. Overwatch Data is building its risk software around that uncomfortable overlap, with a $15M Series A announced in October 2026 to expand the work its AI agents can take through to an analyst's decision.

Mouro Capital led the round, joined by strategic investors Visa Ventures and Capital One Ventures. Overwatch's announcement also names follow-on investments from PruVen Capital and New Era Capital Partners, putting the New York company's next product and hiring plans behind a group with a direct interest in financial-services operations.

The commercial question reaches beyond how many threats software can find. Overwatch is asking customers to bring connected evidence into decisions made by different teams, where the cost of losing context can survive long after an alert has been closed.

What Overwatch Data's $15M Series A will fund

According to Overwatch's funding announcement, the proceeds will extend its agents across more of the risk lifecycle, including monitoring, investigations into criminal underground activity, merchant onboarding and due diligence. The company also plans to hire across engineering, investigations and sales. Those assignments put product development beside the people who investigate threats and the people who must explain the system to buyers.

The participating investors have different relationships to that work. Mouro describes its investment thesis in terms of automating financial-services operations, while Visa Ventures and Capital One Ventures enter as strategic investors. Overwatch also identifies Visa as an existing customer. That relationship gives the round an operating connection worth understanding, without requiring an assumption about a new contract, exclusivity or future revenue.

The announcement reports a $15M Series A, with no valuation or investor check sizes disclosed in the primary material reviewed. The dollar denomination is left unspecified rather than converted into an asserted USD amount. Publication dates vary across the company page and subsequent coverage, so October 2026 is the supported timing used here; the date on an article is not a transaction closing certificate. The company and lead investor agree on the round, amount and strategic participants.

The product follows an investigation toward a decision

Overwatch's platform description brings cyber, fraud, brand and merchant risk into one product. The company says its agents gather adversarial intelligence, connect information across sources and produce assessments that analysts can review. The intended purchase is an investigation that arrives with usable evidence, rather than a new obligation for somebody to reconstruct the case from scratch.

That distinction has a practical consequence for a financial institution. A merchant review and a cyber investigation can touch the same activity while asking different questions about it. The investigator needs to establish what happened; the merchant-risk team needs enough context to decide how the business should respond. Connecting those jobs requires the supporting evidence to remain legible as the case changes hands.

For Overwatch, that connection has to work inside the responsibilities a customer already has. The team reviewing a suspicious merchant still needs a basis for its decision, even when the first evidence came from somewhere else in the institution. A recommendation that reaches the right person with its reasoning intact has a different commercial value from an alert that simply adds another item to a queue. That is where an AI product starts meeting the customer's procedures, and where a software vendor inherits a much more detailed understanding of how work actually gets approved.

Founders who have worked on both risk and threat analysis

Arjun Bisen and Zara Perumal are Overwatch Data's cofounders, serving as CEO and CTO respectively. Bisen's background includes risk work at Stripe, Google and Twitter; Perumal worked on Google Assistant and at Google's Threat Analysis Group. Y Combinator's Overwatch profile identifies the company as founded in 2022 and part of its Summer 2022 batch, with a New York City location.

Those backgrounds help explain the combination inside the product. Risk operations requires a judgment about an account, merchant or business relationship, while threat analysis follows the activity and intent of an adversary. Building software that serves both demands more than attaching an AI answer to each department's existing screen. The evidence has to remain useful when the question changes.

Jeff Needham, Overwatch's CRO, adds a commercial background that includes Flashpoint and Intel 471. His role matters to the funded expansion because selling a broader investigation workflow involves understanding where a customer expects automation to stop and a person to take responsibility. The founders' technical and operating experience provides a starting point for that conversation. Each additional use case gives the company another set of customer decisions to learn, explain and support, particularly when the software crosses the boundary between identifying suspicious activity and recommending a response.

What buyers can learn from the reported results

Overwatch reports that an unnamed regional bank identified 6x more critical threats and saved more than 20 hours of manual triage per analyst each week. These are company-reported results from one customer example, with no independently reviewed benchmark supplied here. They describe a useful operating outcome to examine in a buyer's own environment, rather than a performance promise to apply to every institution.

The saved time matters because investigation work has an opportunity cost. Time spent sorting and joining evidence is time unavailable for the difficult case that needs an experienced person's judgment. For a buyer assessing Overwatch, the useful questions concern how a recommendation is supported, how another team receives the case and how an analyst reviews a conclusion before acting on it. Those are procurement considerations arising from the product's stated workflow, not a claim about controls the company has independently demonstrated.

Overwatch's operational threat-intelligence thesis places that work inside everyday risk decisions. The new capital gives its team resources to build further into those decisions while hiring the engineers, investigators and commercial staff needed to support them. As the product reaches merchant onboarding and due diligence, the person receiving the case will still need to understand why it landed on their desk and what the evidence now asks them to do.