Cybersecurity Funding Hits $6.8B as AI Identity Security Dominates Q3

Global cybersecurity and privacy startups pulled in $6.8 billion during the third quarter of 2026, a roughly 50% jump from the prior quarter and one of the strongest quarterly totals in years. The surge, however, came from bigger checks rather than more deals.

Bigger Checks, Fewer Deals

The funding bump was due to larger rounds, not more of them. Round counts actually declined sequentially across all stages last quarter, Crunchbase data shows.

That pattern suggests investors are concentrating capital into a smaller number of perceived winners rather than spreading bets across a broad field of early-stage companies. The dynamic mirrors a broader venture trend in which late-stage megafunds increasingly dominate deal flow.

AI Identity Security Leads the Pack

AI startups accounted for the overwhelming majority of cybersecurity funding, with a particular focus on identity security. Overall, at least 18 companies at the intersection of artificial intelligence and cybersecurity closed rounds of $100 million or more this past quarter.

The largest funding recipient by far was enterprise identity security provider Keyfactor, which picked up $1 billion in a July growth round led by Summit Partners. Founded in 2001, the Ohio company is not exactly a startup, but it has attracted the bulk of its venture funding in the past 10 years and its pivot to AI is also of a more recent vintage.

Dallas-based Island tied for second place with a $400 million September Series F led by Evolution Equity Partners. The startup, which offers tools for enterprises to see and govern how people and AI agents interact with applications and data, also secured a post-money valuation of $6.4 billion.

Cyera, operator of an enterprise data security platform focused on AI agents, also announced a fresh $400 million Goldman Sachs Growth Equity-led investment in September, just three months after raising $600 million. The latest infusion set a $12 billion valuation for the New York startup.

Exits Signal Strategic Appetite

We also saw some good-sized acquisitions of cybersecurity startups this past quarter, even as the IPO market was fairly sluggish.

Visa led the M&A pack with its $2.4 billion purchase of anti-fraud technology provider BioCatch in August. The acquisition is part of a broader effort by Visa to beef up its fraud detection and prevention capabilities for the AI age.

Among private unicorns, meanwhile, Cyera proved it can find a way to spend a good chunk of the capital it raised. It acquired Oasis Security, an enterprise access management platform built for AI agents, in a deal reportedly valued around $1 billion.

As for public offerings, Aura, which offers digital security services to consumers, was the lone sizable venture-backed market debut. The Boston-based startup completed an acquisition of an Australian public company, Qoria, in July, and then renamed the combined company Aura.

Why This Matters

The concentration of capital into fewer, larger rounds signals that investors are betting on a narrow set of platforms capable of securing AI-driven enterprise infrastructure. That shift has direct consequences for smaller cybersecurity startups, which may find it harder to attract funding as megafunds gravitate toward proven players.

For enterprises, the funding surge suggests that identity security and AI agent governance will become core procurement categories in the coming year. The Visa-BioCatch deal, in particular, points to how payments and financial services firms are moving to acquire fraud prevention capabilities rather than build them in-house.

What You Need to Know

Crunchbase data shows global cybersecurity and privacy startup funding reached $6.8 billion in Q3 2026, up about 50% from the prior quarter. The increase was driven by larger individual rounds, not a higher number of deals, as round counts declined sequentially across all stages.

At least 18 companies at the intersection of AI and cybersecurity closed rounds of $100 million or more. The quarter also produced notable exits, including Visa's $2.4 billion acquisition of BioCatch.

Overall, an Upbeat Quarter

Overall, Crunchbase funding data points to an upbeat environment for cybersecurity startup funding. This does not seem particularly surprising given the steady drumbeat of worrisome news about the risks posed by rapidly advancing AI technology.

It is not an especially reassuring time for most of us. For cybersecurity founders, however, there is certainly an ever-expanding array of hazards to keep at bay. We will keep watching in the current quarter to see if investment momentum continues to build.