Obsidian Security hits a $1.1bn valuation as AI reshapes the threat

Obsidian Security has become the latest cybersecurity company to be repriced upward by artificial intelligence. The SaaS-security firm has raised a fresh funding of $85 Million Series D at a $1.1bn valuation as demand for tools that secure AI surges.

The raise pushes Obsidian into unicorn territory and reflects a simple dynamic. Every new way that companies use AI is also a new way for them to be attacked, and someone has to guard it.

Investors have clearly noticed the gap. Money has poured into startups securing enterprise AI, from Onyx’s $113m round to keep humans in control of AI agents to a string of others racing to build the same guardrails.

Obsidian, founded in 2017, made its name protecting software-as-a-service applications, the sprawl of cloud tools like Salesforce, Microsoft 365, and Workday that hold a modern company’s data.

Its systems watch for compromised accounts, risky configurations, and identity-based attacks across that estate.

The problem it started with has only grown. A large company now runs hundreds of SaaS applications, each a door into its data, and most security teams struggle to see across all of them at once.

Identity has become the real battleground. As the perimeter dissolved into the cloud, attackers stopped breaking in and started logging in, using stolen credentials and over-permissioned accounts, exactly the weakness AI agents now multiply.

The pitch has now tilted toward AI. Obsidian has been building defences for the AI agents that companies are plugging into their SaaS tools, software that can read, write, and act on corporate data with far less oversight than a human employee.

That autonomy is the whole worry. An agent handed broad access to a company’s applications is powerful and dangerous in equal measure, and a single misconfigured or hijacked agent can reach data no phishing email ever could.

The speed is what changes the maths. A compromised employee clicks a few wrong links; a compromised agent can move across dozens of apps and touch enormous volumes of data before anyone notices.

Obsidian’s advantage is that it already sits inside the SaaS layer where much of this plays out. Securing AI agents is, in large part, about controlling what they can touch, and Obsidian has spent years mapping exactly that.

The timing suits the money. Agentic AI adoption has accelerated inside enterprises, and security budgets tend to follow new technology once the first breaches make the risk feel concrete.

The bigger players are buying in, too. Databricks recently acquired Panther Labs in a cybersecurity push, a sign that AI-era security is becoming a category the giants want to own rather than partner for.

Obsidian has raised from a roster of well-known investors over the years, including Greylock, Wing, GV, and Norwest, and the new valuation marks a sharp step up from its earlier rounds.

The company has been signalling the shift in its own product line, rolling out AI-agent defences and SaaS supply-chain protection as agentic adoption picks up. The funding is the market’s endorsement of that direction.

Security has been one of the few software categories where AI clearly adds demand rather than threatening it. The same automation that unnerves defenders is also creating the work that keeps companies like Obsidian growing.

Valuations in security have run hot before, and not every AI-security startup will grow into its price. The wager is that securing AI becomes as unavoidable as securing email once did.

For Obsidian, the $1.1bn tag is a bet by investors that the SaaS security problem and the AI security problem are becoming the same problem. If they are right, the company spent a decade preparing for a market that has only just arrived.