Mandiant founder Kevin Mandia returns with AI cybersecurity startup Armadin, raises $190M in funding

Kevin Mandia helped shape modern cybersecurity. Four years after selling his company, Mandiant, to Google for $5.4 billion, he’s building again. This time, the focus is on artificial intelligence.

Mandia’s new AI cybersecurity startup, Armadin, revealed on Tuesday that it has secured nearly $190 million in funding. Accel led the round, with participation from Google Ventures, Kleiner Perkins, Menlo Ventures, and Ballistic Ventures—the security-focused firm Mandia helped launch.

The raise marks a quick start for a company that has existed for only a few months. Armadin launched quietly in September and has already recruited more than 60 employees. Several Fortune 100 companies have begun working with the startup as early customers.

Kevin Mandia Is Back: Mandiant Founder Raises $190M for AI Cybersecurity Startup Armadin

Mandia sees a major shift unfolding across cybersecurity. Artificial intelligence, particularly autonomous software agents, is beginning to change how organizations detect and respond to attacks.

“I wasn’t going to sit on the sidelines watching another shift change in cybersecurity without leveraging 30 years in the industry to do something,” Mandia told CNBC in an interview.

Armadin builds AI agents that continuously scan enterprise environments, searching for signs of compromise. These systems perform investigative work that typically takes hours or days for security teams. Logs, alerts, and network signals can be analyzed within minutes, giving companies a faster way to identify threats moving inside their systems.

That speed matters more than ever. Cyberattacks continue to grow in frequency and sophistication, pushing companies to rethink how they defend their infrastructure. Security teams face an endless stream of alerts, many of which require manual analysis before a real threat can be confirmed.

Automation has become a priority across the industry. Major cloud providers and enterprise software companies have begun embedding AI into security products to detect breaches earlier and reduce analysts’ workload.

Mandia believes autonomous agents will become a central part of that shift.

His track record helps explain why investors moved quickly. Mandia founded Mandiant in 2004 and built the company into one of the most trusted names in incident response and threat intelligence. Governments and Fortune 500 companies relied on the firm during major cyber investigations long before Google acquired it in 2022.

Armadin’s name came from an unexpected source. Mandia says the idea struck him late at night as he recalled an eighth-grade history lesson about the Spanish Armada.

“Somehow my brain remembered eighth-grade history,” he said.

The historical reference reflects the company’s concept: fleets of automated defenders working together to protect digital infrastructure.

With $190 million in fresh capital and a founder known across the security industry, Armadin enters the market at a moment when AI is beginning to reshape cyber defense. Investors appear convinced the next phase of cybersecurity will rely less on human analysts alone and more on software agents that patrol networks around the clock.

For Mandia, it marks another chapter in a career built on confronting evolving cyber threats.

And this time, the defenders are autonomous.