Mandiant Founder's New Startup Armadin Hits $2.5B Valuation With Agent Swarm Security

Kevin Mandia, the cybersecurity veteran who founded incident response firm Mandiant, is back with a new company, and investors are backing it heavily. Armadin has raised $255.5 million at a valuation of $2.5 billion, according to reports on the round.

The startup's pitch centers on what it calls agent swarms: groups of AI agents that work together to probe an enterprise's systems the way an attacker would, and then help defend them. Rather than relying on a single model or a periodic human-led penetration test, the approach aims to keep testing running continuously and at scale.

The timing reflects a broader shift in the security industry. Attackers are increasingly using automation and AI to find weaknesses faster, and defenders are under pressure to match that pace. Armadin is betting that the best answer to machine-speed offense is machine-speed testing and response, coordinated across many specialized agents instead of one general-purpose tool.

Mandia carries unusual credibility into the effort. Mandiant became one of the best-known names in breach investigation, handling high-profile intrusions for governments and large companies. It was later acquired by Google, which folded it into its cloud security business. His track record in incident response gives Armadin a ready audience among the security leaders who once called on his teams in a crisis.

A valuation of $2.5 billion for a company at this early stage is a sign of how much capital is flowing into AI-driven security. Investors appear convinced that agentic systems will reshape how enterprises find and fix vulnerabilities, and that a founder with Mandia's pedigree is well placed to lead that category.

Many questions remain. Autonomous agents that attack networks, even for defensive purposes, raise concerns about control, safety and false positives, and customers will want clear guardrails on what the swarms can do inside live environments. How Armadin handles those concerns, and how its results compare with established penetration testing and red-team services, will determine whether the funding translates into lasting adoption.