Mave

Mave is an agentic security operations platform that investigates alerts, hunts threats and runs approved responses by querying the security tools an enterprise already owns, without moving logs into a central SIEM. It is aimed at enterprise SOC teams and managed security service providers drowning in alerts and tool sprawl.

Mave is an AI security operations platform built by Mave Security, a Tel Aviv company founded in 2025 by CEO Raziel Oren and CTO Guy Eshel, both veterans of Israel's Unit 8200. Instead of ingesting telemetry into a central data store, Mave queries each connected identity, endpoint, cloud and application tool through its native interface, reconciles the results and builds one account of an incident. Its agents investigate alerts and return evidence-backed verdicts, hunt for activity that never alerted, flag when an alert looks like part of an active campaign, and run response actions only within rules the security team sets. The platform combines purpose-built workflows, fine-tuned small language models and frontier models, and it logs every query, correlation and conclusion. Governance defaults are conservative: integrations start read-only, permissions are scoped per platform, and destructive actions require human approval. Pricing is by protected endpoints and team size rather than data volume, across Essentials and Advanced tiers, with add-ons for managed retention (Lake), an on-premises Broker and managed services. A multi-tenant version targets MSSPs. Mave came out of stealth on October 22, 2026 with $34M in total funding: a $28M Series A led by Red Dot Capital Partners with Lumir Growth Partners, plus a $6M seed co-led by Dell Technologies Capital and Emerge Ventures. The company says it works with Fortune 50 enterprises and global MSSPs, runs in regulated finance and healthcare environments and grew ARR more than 400%, though the press coverage notes these figures are unverified.

Category

Governance & Security

Pricing

Subscription, Contact for pricing

Target Market

CISOs, SOC Managers, MSSPs, Security Engineers

Deployment

Cloud-first, Hybrid

Founded

2025

Headquarters

Tel Aviv, Israel

Team Size

11-50

• ✓
  AI SOC investigations

  Agents investigate each alert by gathering context from connected tools and return a verdict with cited evidence and an audit trail.

• ✓
  Federated data access

  Queries each tool in its native language instead of ingesting logs, so teams avoid duplicating data into a central SIEM.

• ✓
  Ask Mave

  Natural-language questions across the whole connected stack, answered with cited evidence and no query syntax to learn.

• ✓
  Agentic threat hunting

  Hunts for activity that never alerted and watches for dormant indicators reactivating, adapting tests to the customer's environment.

• ✓
  Governed response

  Verdicts or findings can trigger notify, ticket, document or remediate actions, with destructive steps behind human approval by default.

• ✓
  Least-privilege integrations

  Scoped API connections per platform start read-only on day one, which limits blast radius while the team builds trust.

• ✓
  Multi-tenant MSSP mode

  Lets managed security providers serve many clients on different stacks with the same team and without re-ingestion.

• •
  Alert triage at scale

  A SOC routes every incoming alert to Mave, which drops false positives and escalates confirmed threats with evidence attached.

• •
  Active incident containment

  During a live attack, approved playbooks isolate systems and disable compromised identities under rules the security team has set.

• •
  MSSP service delivery

  A managed security provider investigates alerts for hundreds of clients across different tool stacks from one multi-tenant console.

• •
  Detection engineering cleanup

  Teams use Mave's detection work to find noisy or broken rules and harden coverage against live threat campaigns.

• •
  Cross-tool investigation by question

  An analyst asks a plain-language question and Mave queries endpoint, identity and cloud tools together, returning one cited answer.

Mave publishes no dollar prices. Its pricing page says cost is set by the number of endpoints protected (bands from under 500 to 50,000+) and security team size, not data volume. Add-ons cover managed data retention (Lake), an on-premises Broker and managed SECTEAM services. Mave is also listed on AWS Marketplace.

This page was written from 6 sources, 4 on domains other than mave.com.

1. 1.mave.com — mave.comvendor
2. 2.mave.com — pricingvendor
3. 3.siliconangle.com — mave raises 34m to pull existing security tools into one age
4. 4.calcalistech.com — h1sq8ip2mx
5. 5.unite.ai — mave raises 28m series a 34m funding agentic secops
6. 6.cybersectools.com — mave