Obsidian Security raised $85 million in a Series D round at a $1.1 billion valuation, the Palo Alto-based company announced on August 4, 2026, crossing into unicorn territory as enterprises race to govern the AI agents they are deploying across their software stacks. Crescent Cove Advisors led the round, with participation from all of the company’s existing investors, including Greylock Partners and Menlo Ventures. The raise pushes Obsidian’s total funding past $200 million.
The round arrives with revenue-scale customers attached. Obsidian reports more than 100 customers now spending over $100,000 annually on its platform, with more than 14 spending above $1 million, and counts 60 of the Fortune 500 among its base, spanning major financial institutions, social media networks, and telecom providers. The company says the new capital will fund R&D and extend its reach deeper into the Fortune 500 and Global 2000.
“AI agents gravitate toward third-party applications. That’s where the data lives, that’s where the work happens, and that’s exactly where the risk lives too,” Hasan Imam, Obsidian’s CEO, said in the announcement. “More than 70% of our customers already let agents into third-party apps, and that number is only going up.”
Crescent Cove founder and chief investment officer Jun Hong Heng framed the bet in infrastructure terms. “Obsidian recognized that shift early and is building the platform enterprises need to securely adopt AI at scale,” he said, describing the company as the kind of foundational technology his firm looks to back.
What Obsidian’s platform actually governs
Obsidian’s pitch rests on a structural imbalance inside enterprise software: the company says non-human identities outnumber human ones 144 to 1 inside third-party applications, and agents built on frontier models are widening that gap. Its runtime governance layer detects and blocks privilege escalation, excessive data access, and policy violations as agents operate, with enforcement rules aligned to OWASP risk criteria applied before an action takes effect rather than after. The platform also maintains an inventory of every MCP server connected across an organization, mapped to the specific agents invoking them, alongside a registry of the underlying models so security teams can spot when a model is switched or substituted.
The coverage spans both agent-building platforms such as Microsoft Copilot Studio, Salesforce (CRM ) Agentforce, and n8n, and autonomous developer agents. Alongside the funding, Obsidian said it is extending native governance controls to Anthropic’s Claude Code and Cowork, letting security teams restrict agent permissions around production data, manage access to sensitive files, and block unsanctioned MCP or tool usage at runtime. The announcement lands a day after Zenity raised $125 million for a neighboring bet on securing autonomous AI agents, two sizable rounds in as many days aimed at the same enterprise anxiety.
The round in numbers
- $85 million raised in Series D financing, led by Crescent Cove Advisors
- $1.1 billion post-round valuation
- More than $200 million raised in total across five rounds
- More than 100 customers spending over $100,000 annually; more than 14 above $1 million
- 60 of the Fortune 500 on the customer roster
- 144 to 1: the ratio of non-human to human identities inside third-party applications, per the company
From SaaS posture management to agent governance
The Series D marks a sharp repositioning from where Obsidian stood at its last priced round. The company, founded in 2017 by veterans of Carbon Black and Cylance, raised a $90 million Series C in April 2022 as a SaaS security posture management vendor, led by Menlo Ventures, Norwest Venture Partners, and IVP, with $119.5 million in total financing at the time. That pitch was built on misconfigurations, over-privileged accounts, and insider threats across applications like Salesforce, Workday, and Microsoft 365.
Four years on, the product thesis has swung from watching how humans use SaaS to governing what autonomous agents do inside it. The returning syndicate reflects the continuity underneath the pivot: Greylock, which led Obsidian’s earliest institutional round, and Menlo Ventures, which co-led the Series C, both participated again, joined by Norwest, IVP, Wing, and GV. A new lead writing the check at a unicorn valuation, with the full incumbent bench following on, is the shape of a round where existing backers chose concentration over dilution of their positions.
For the enterprises writing seven-figure checks to Obsidian, the calculation the company is selling is straightforward: agents are already inside their production systems, and the security budget is following them there.
