Tel Aviv cybersecurity startup Mave has announced a $28 million Series A and its public launch, betting that AI can help security teams investigate incidents across the tools they already operate. The announcement was made on October 22, 2026.
Mave’s funding announcement names Red Dot Capital Partners as the round’s lead investor, with participation from Lumir Growth Partners. Including an earlier $6 million seed round led by Dell Technologies Capital and Emerge Ventures, the company has raised $34 million overall. That cumulative figure is separate from the size of the new Series A.
The company lists Tel Aviv as its headquarters. Its company-issued release, datelined Tel Aviv-Yafo, was published at 9:30 a.m. Eastern Time on October 22.
Connecting evidence across security tools
The problem behind the launch extends beyond one startup. In a June 11 release describing its 2026 SOC Survey, SANS Institute said 24% of surveyed senior security leaders identified inadequate enterprise-wide visibility as their biggest barrier to effective security operations. The research included 444 practitioner responses and a separate survey of 69 senior executives. That is earlier industry context, rather than a new finding announced alongside Mave’s financing.
Mave’s proposed answer is an AI layer that gathers evidence across existing security and IT systems. According to its platform documentation, teams can ask questions in ordinary language and use the system for investigations, threat hunting, detection work and responses governed by organizational rules. Integrations use APIs and begin with read-only access, with permissions scoped to what the customer grants.
Consider a hypothetical suspicious login: deciding whether it represents a compromise could require checking an identity system, an endpoint tool and information about the affected asset. The value of connecting those sources would be the analyst’s ability to examine their relationship. Whether an AI system reaches the right conclusion still depends on the evidence it can retrieve and how its interpretation is checked.
Data access and authority are separate questions
Mave says customers do not have to migrate their telemetry into a new centralized database before using the platform. That architectural proposition does not mean the service operates without accessing or processing security information. Its tools must retrieve evidence to investigate it.
The company’s launch description says it records the queries, evidence, reasoning and actions behind findings. Customers decide which actions may run automatically and which require human approval. Those are stated product controls; their effectiveness in a particular deployment would need to be evaluated against that organization’s systems and policies.
There is also an optional retention product. Mave’s pricing page lists Mave Lake, which offers searchable storage with hot and cold tiers, alongside an on-premises broker for reaching internal tools. The core service’s lack of a mandatory data migration should therefore be distinguished from a promise that data can never be retained.
The same page says pricing depends on protected endpoint counts and team size, rather than data volume, and directs prospective customers to a custom quote. It separates an Essentials package for search, hunting and workflows from an Advanced package that adds automated alert investigations, responses and detection capabilities. Public dollar prices are not provided.
A Tel Aviv company moves into its next stage
CTech’s October 22 report by Meir Orbach independently corroborates the financing and identifies CEO Raziel Oren and CTO Guy Eshel as the founders, who established Mave in 2025. Oren previously led go-to-market operations at Wing Security; Eshel was Alterya’s first employee and later its vice president of research and development.
In CTech’s interview, Oren argued that differentiation requires more than placing a product on top of an existing AI model. The report says Mave plans to more than double its team, concentrating hiring on AI research and go-to-market work, while keeping its Israeli development center central to the expansion. Those are plans following the round, rather than completed hiring commitments.
In its launch announcement, Mave says it is already operating in more than 200 security operations centers. That company-reported deployment count does not establish 200 separate paying customers, and the launch materials do not provide an independent accuracy benchmark for its investigations.
For Tel Aviv’s technology economy, the immediate development is a funded local company preparing to expand its research and commercial operations. The next evidence to watch is operational: how consistently investigations identify the right facts, how analysts review disputed conclusions, and whether permissions constrain responses as intended. The financing gives Mave resources to pursue that work; it does not, by itself, demonstrate the results.
