Exclusive: Artemis raises $70M to help fight AI-powered attacks with AI

Cybersecurity startup Artemis raised $70 million in Series A funding led by Felicis, with backing from First Round Capital, Brightmind, and other industry executives. The company says it already has several seven-figure deals, clients including Mercury, Wix, Lemonade and Abnormal AI, and is targeting multi-million dollars in ARR by the end of 2026. The launch highlights growing investor interest in AI-driven security tools as attackers increasingly use AI to automate and accelerate attacks.

Analysis

This is less about one startup and more about a re-rating of the security stack: if AI materially compresses attacker dwell time, the winning vendors are the ones that sit closest to identity, endpoint, and cloud control planes and can auto-act, not just alert. That structurally favors platform vendors with embedded distribution and rich telemetry, while increasing pressure on point tools and legacy SIEM workflows that monetize ingestion and human investigation rather than remediation.

For the named public comps, the second-order winner is likely WIX/LMND more than the security vendors themselves: both are cloud-heavy, identity-dependent, and exposed to fraud/account takeover risk, so faster autonomous defense can reduce loss ratios and incident drag over 12-24 months if adoption is real. CRWD and PANW are better positioned than CSCO because they already own operational security workflows; CSCO’s negative read-through is that “brain of SOC” narratives cap the multiple of legacy aggregation layers if buyers migrate budget to newer AI-native control planes.

The market should be careful not to extrapolate this into near-term revenue acceleration for the startups or the incumbents. Security buyers move slowly, and the real gating item is trust: auto-remediation is only adopted once false-positive rates fall enough that security teams can delegate action, which likely takes 2-4 quarters of proof and many breach postmortems. In the meantime, expect a proliferation of demos and a modest budget reallocation toward AI-native pilots, not a wholesale platform swap.

Contrarian view: the consensus is probably overestimating how quickly AI makes defense obsolete and underestimating how much it raises demand for telemetry, identity governance, and managed services. If attack automation truly lowers skill barriers, the addressable market expands for the incumbents that can package detection plus response at enterprise scale; the weak link is vendors that stop at correlation without closed-loop action.

Key Decisions for Investors

• Long CRWD / short CSCO on a 3-6 month horizon: own the platform that benefits from autonomous response and richer endpoint telemetry, fade legacy SIEM/aggregation multiple compression; target 8-12% relative outperformance if AI-native security budgets reallocate.
• Accumulate PANW on weakness over the next 1-2 quarters: the thesis is not immediate top-line upside but higher attach of cloud, identity, and SOC automation modules; use tight risk control because the market may initially treat this as narrative-only.
• Buy WIX and LMND as defensive cyber-beneficiaries over 6-12 months: both have high sensitivity to account compromise and fraud costs, so even modest reduction in incident losses can support margins; pair against a basket of high-identity-risk SaaS names if needed.
• For more tactical exposure, consider a small long-dated call spread in CRWD or PANW into the next 2 earnings cycles: the upside is a multiple re-rating if managements quantify AI-driven win rates, but avoid sizing for immediate revenue beats.
• Underweight CSCO on a 6-12 month view: the market may start discounting older ingestion-centric architectures if buyers believe the security stack is shifting toward autonomous, real-time control; use any AI product announcements as opportunities to sell into strength.