Brava has emerged from stealth with $15m in seed funding, as enterprises hand more security decisions to AI agents that rely on unproven detection logic.

The round was led by F2 Venture Capital and Pitango. Angel investors also took part, among them executives from Anthropic, Microsoft and Check Point. Brava says it already counts Fortune 100 firms in retail, energy and hospitality among its clients.

The company is tackling a gap that many security operations centres (SOCs) struggle to admit. Teams often have a rule written for a given attack and a dashboard showing no issues, yet nobody has watched that rule trigger against that specific threat in their own environment using current log sources. As AI agents take on a greater share of SOC work, the problem grows.

Those agents rely on logs and detection logic that most organisations cannot validate. Important logs may go uncollected, telemetry pipelines can fail without warning, and rules can miss the very threats they target. An agent may handle familiar threats intelligently while staying blind to attacks its underlying defences never detect.

Brava’s multi-agent system recreates the evidence a genuine attack would leave behind. It models attacker behaviour and produces the precise telemetry an attack would generate in a customer’s environment, without running the attack itself. The platform handles more than 2.4 trillion events daily across client environments, with thousands of detections validated each day.

That ground truth supports three functions that sit alongside a customer’s existing SIEM. For detection engineering, Brava checks each rule against its intended attack, flags those that fail to trigger, rewrites them in the SIEM’s native query language using only fields confirmed present, and verifies they now fire.

Source link