TopHat Security Closes Series A for OT Cybersecurity

TopHat Security announced an undisclosed Series A financing led by Landolt Securities on August 19, 2026. Landolt also served as placement agent, while TopHat Security said the capital will expand O-RANGE, advance its enterprise cybersecurity portfolio, strengthen customer delivery, and support its next growth milestones.

The deal matters because TopHat Security is operating where cyber risk stops being an abstract contest between software teams and starts touching plants, utilities, transportation networks, government systems, and AI infrastructure. The company's pitch is simple enough to survive contact with a control room: give security teams a safe place to test what could happen before a live industrial system has to absorb the lesson.

What TopHat Security Announced

The Series A announcement identifies Landolt Securities as lead investor and placement agent but does not disclose the round size, valuation, security, ownership, or additional investors. That missing amount is not an invitation to borrow a number from a database and hope nobody checks the label.

A September 2025 Form D described a separate $5M SAFE offering ceiling and reported $300K sold as of that filing. Those figures provide historical financing context, but neither is the disclosed amount of the August 2026 Series A. The clean conclusion is also the less theatrical one: TopHat Security announced a Series A, Landolt led it, and the amount remains undisclosed.

Why O-RANGE Sits at the Center

TopHat Security's flagship O-RANGE platform creates high-fidelity digital twins of operational technology environments. The company says those virtual environments can represent assets, network relationships, firmware, software, control systems, and physical processes, allowing teams to model attack paths, investigate vulnerabilities, rehearse scenarios, and evaluate remediation without treating production like a test bench.

That distinction matters in operational technology. A software team can often roll back a bad deployment; an operator responsible for a refinery, power system, transportation network, or industrial line has to account for availability, safety, and physical consequences. O-RANGE is designed to add operational context to vulnerability data, helping teams ask not only whether a weakness exists, but what a proposed fix could change in the real environment.

Why OT Security Requires Different Economics

NIST's Guide to Operational Technology Security defines OT as systems and devices that interact with the physical environment and emphasizes their distinct performance, reliability, and safety requirements. That framework explains why ordinary IT security logic does not transfer cleanly into industrial settings. A control can be technically correct and still be operationally reckless if it interrupts a process that cannot simply be restarted after lunch.

This is the commercial opening behind TopHat Security's Series A. Critical-infrastructure operators do not need another pile of alerts with no safe way to understand consequences. They need better visibility, realistic validation, and evidence that a remediation plan will reduce risk without creating a fresh outage, safety problem, or compliance mess.

A Portfolio Beyond One Digital Twin

TopHat Security's current product catalog extends beyond O-RANGE. LIGHTFOOT focuses on OT and industrial-control-system scanning, SEEKCAP on industrial network visibility and packet analysis, DDX on cyber-supply-chain inspection, and PARAGUARD on AI-infrastructure security. SECONDLOOK XBOM and ONBOARD add software, firmware, and hardware supply-chain analysis to the portfolio.

That breadth gives the company a more ambitious story than a single-purpose simulator, but it also raises the execution bar. Customers buying into critical environments tend to reward tools that integrate, produce credible evidence, and fit operating constraints. A broad bench helps only if TopHat Security can turn it into repeatable delivery instead of a menu that makes every buyer become the product manager.

Leadership and Investor Signal

Founder and CEO Matt Caldwell is the central verified operating figure in the announcement and on TopHat Security's current leadership page. The company also lists Joe Cardin as Chief Strategy Officer, Rich Mason as CISO, Christy Henry as Vice President and CFO, and Gerry D'Agostino as CRO. Public sources did not verify a current CTO, so none is invented to make the org chart look tidier.

Don McKiernan, identified in the announcement as a Landolt principal, positioned the investment around national security, critical infrastructure, and AI infrastructure. FINRA BrokerCheck lists Landolt as an SEC-registered broker-dealer and investment adviser firm and lists Donald Trendley McKiernan as CEO, co-CCO, and FINOP. The financing therefore carries both an investment thesis and a placement relationship, a detail worth preserving because those are different roles even when one firm holds both.

What the Series A Has to Prove

TopHat Security says the financing will advance its enterprise portfolio, expand customer delivery, and support growth milestones. The company has not publicly disclosed customer identities, revenue, hiring targets, detailed allocation, or independent product-performance results, so the next phase will be measured less by announcement language and more by repeatable deployments in environments where mistakes are expensive.

The larger market signal is that cyber defense is being forced to understand operations, not merely inventory them. If TopHat Security can connect digital twins, asset visibility, supply-chain analysis, and AI-infrastructure defense into a coherent operating system for industrial risk, the Series A can finance a meaningful position in that shift. If it cannot, the market will remember that critical infrastructure has never been impressed by a clever demo when the plant still has to run.