Twenty Raises $100M Series B at $1B Valuation as Offensive Cyber Becomes a Venture Category

Twenty, an Arlington, Virginia-based defense technology company building AI-enabled offensive cyber systems, has raised $100M in Series B funding at a $1B valuation. The round was led by Accel with participation from Friends & Family Capital, Point72 Ventures, and Caffeinated Capital. Founded in 2024, Twenty develops end-to-end offensive cyber operations capabilities for U.S. government mission partners and says its mission is to industrialize cyber warfare through intelligent systems designed for modern national security environments.

The funding brings Twenty's total disclosed funding to $138M, following $38M in previously disclosed funding. The company was founded by former cybersecurity operators, military cyber veterans, and leaders from Palo Alto Networks. The significance extends well beyond a funding round, as venture capital increasingly moves toward the intersection of artificial intelligence, defense technology, and national security infrastructure. Twenty's latest raise suggests offensive cyber operations are emerging as a venture-backed category of their own.

What Happened

Twenty announced a $100M Series B led by Accel at a $1B valuation, less than two years after the company's founding. The leadership team helps explain why investors moved aggressively. Joe Lin, Co-Founder & CEO, previously served as VP of Product Management at Palo Alto Networks, while Leo Olson, Co-Founder & CTO, led the engineering team behind Palo Alto Networks' first cyber operations capability deployed across the U.S. Government, Five Eyes, and NATO allies.

The founding team also includes Skyler Onken, Co-Founder & VP Product, one of the military's first Master Cyber Operators who spent more than a decade at U.S. Cyber Command and the U.S. Army, along with Pete Sorrentino, Co-Founder & VP Growth, who worked extensively with national security customers within Cortex, Palo Alto Networks' security operations platform. Supporting leadership includes Dan Quinlan, VP Finance & Operations, Adam Howard, VP Cyber Policy, and Kevan Dunsmore, VP Engineering.

Twenty describes its mission in unusually direct terms, building offensive cyber systems intended for active operational environments rather than hypothetical future threats. That positioning separates Twenty from much of the cybersecurity market where the focus remains on defense, compliance, monitoring, and detection.

Why This Matters

Cybersecurity has historically attracted venture funding through defensive technologies such as identity management, threat detection, endpoint security, and risk management. Those categories created enormous enterprise value because organizations needed protection from increasingly sophisticated threats. Twenty approaches the market from the opposite direction by focusing on offensive cyber operations and the industrialization of cyber warfare capabilities.

Whether operators agree with that strategy or not, investors increasingly recognize that cyber conflict has become a permanent feature of geopolitical competition. The market reality is uncomfortable but difficult to dismiss. Nation-state cyber operations are no longer niche discussions reserved for intelligence communities. They have become part of the infrastructure of modern power, creating demand for entirely new categories of technology.

Market Context

Timing matters because artificial intelligence is accelerating both cyber attacks and cyber defense. The same technological advances that help organizations automate security operations can also increase the speed and scale of offensive cyber activity. Twenty argues that cyber conflict increasingly operates beyond normal human responsiveness, requiring systems capable of operating at machine speed while preserving human decision-making authority.

That thesis is resonating with investors. The broader defense technology market has experienced a resurgence over the past several years, with companies such as Anduril, Palantir, and Shield AI helping reshape investor perceptions around defense software, autonomous systems, and national security infrastructure. What was once viewed as a niche venture category is increasingly becoming a core investment theme, and Twenty sits directly inside that trend.

Competitive Landscape

The most interesting aspect of Twenty may not be its technology. It may be its category definition. Most cybersecurity companies compete for enterprise security budgets, while Twenty is pursuing mission partners across the U.S. government and allied national security ecosystem. That creates a fundamentally different market dynamic.

The company is not competing for compliance budgets or security operations center modernization projects. Instead, Twenty is positioning itself as operational infrastructure for offensive cyber capabilities. That distinction changes how investors evaluate growth potential, strategic value, procurement dynamics, and long-term market opportunity. The result is a company that looks less like traditional cybersecurity software and more like emerging defense infrastructure.

What This Signals

The $100M Series B is not simply a funding announcement. It reflects growing investor conviction that offensive cyber operations will become an increasingly important component of national security modernization. It also reflects confidence in founder-market fit, a concept that often sounds overused in venture capital conversations but remains rooted in a simple reality.

The people building Twenty understand the problem because they have spent years operating inside it. Twenty's founders built careers across cybersecurity, military operations, intelligence environments, and national security organizations long before launching the company. Investors clearly view that experience as a competitive advantage, particularly in a market where credibility is difficult to manufacture and operational expertise carries significant weight.

The Bigger Industry Shift

For years, cybersecurity conversations centered almost exclusively on defense, stopping intrusions, reducing risk, and preventing breaches. Those priorities remain essential, but a parallel market is now emerging around operational cyber capability, machine-speed decision support, and national security readiness. Twenty's rise from founding in 2024 to a $1B valuation following $138M in total funding suggests investors believe this market is becoming strategically important.

The company says the new capital will support research and development while advancing its existing product roadmap. Whether that thesis proves correct over the next decade remains to be seen. What is already clear is that venture capital is no longer treating offensive cyber operations as a theoretical discussion. Capital is entering the category, experienced operators are building companies around it, and government demand appears strong enough to support the investment case. That combination tends to get markets moving.