Michael Coates

We are a VC firm designed to deliver sweat equity. That means our team of engineers, recruiters, designers, sales leaders, writers and product thinkers is trusted to embed into the companies we partner with. It also means were on the hook to deliver great work.

Enhanced security in minutes and get immediately unparalleled protection. Our AI platform detects AI-driven and complex attacks missed by traditional tools, offering superior protection without complicated setup.

DevArmor is building AI agents that automate manual security reviews and threat modeling. Just as Vanta streamlined slow and costly compliance management, DevArmor automates security reviews. DevArmor seamlessly integrates real-time, high-fidelity security reviews informed by threat models into development workflows. While other solutions focus on known code vulnerabilities, DevArmor extracts business logic and security patterns before any code is written. By integrating with developer platforms such as Jira, Notion, Vanta, Drata, AWS, and Terraform, DevArmor processes design docs, policy docs, and compliance requirements to generate structured threat modeling. It also validates design implementation by integrating with source code management platforms like GitHub and GitLab. Through workflow integration, real-time feedback, and enforcement, DevArmor: - Reduces security backlog by 80% - Saves security teams 30% of their time - Accelerates software releases by 3 months

Kenzo Security is the first Agentic Security Platform that modernizes all functions of your security operations teams - from investigations to detection engineering to threat hunting and more.

Noma Security is the agentic AI security platform giving enterprise organizations the confidence to rapidly build AI applications and adopt AI agents at scale. Noma Security uniquely provides cybersecurity teams with control of AI risk through continuous AI discovery and inventory, AI supply chain security, AI red teaming, and AI runtime protection to ensure compliance and risk mitigation. Backed by Ballistic Ventures, Glilot Capital, Cyber Club London, Databricks Ventures and SVCI, Noma Security is widely adopted by Fortune 500 customers and has been recognized by Gartner as a leading AI TRiSM solution.

Workload identity reimagined

Radically simplifying Web and API Security Testing Developers can use NightVision to identify ✨exploitable✨ vulnerabilities in 5 minutes in CI/CD 🚀

Did you know that less than 5% of cyber threats are actually relevant to you? The challenge is what 5%? Get them in Fletch. Fletchs AI engine analyzes the threats coming after companies like yours with the same tech, industries, and geographies. You can finally save time and live ahead of your threats whether it’s traditional vulnerabilities or Ransomware and phishing campaigns.

Resourcely enables platform, security, and DevOps engineering teams to offer simple self-service to their developers. Self-service allows developers to move at the speed of the cloud while ensuring that best practices are met. Resourcely guardrails ensure infrastructure is set up correctly the first time, reducing fix campaigns and vulnerability management toil.

Lucidum is the asset discovery company that eliminates blind spots across cloud, security and IT operations. Fortune 500 companies rely on the Lucidum platform and its patent-pending machine learning to discover, triangulate and identify all assets – even previously unknown unknowns – delivering visibility essential to truly secure, manage, and transform your enterprise. Backed by GGV Capital and Silicon Valley CISO Investors (SVCI), Lucidum is based in San Jose, California.

ProjectDiscovery is an open-source, cybersecurity company that builds a range of software for security engineers and developers. Our user base is among the largest in the InfoSec community, and we are used by security and developer teams at top internet companies such as Fastly, Microsoft, CloudFlare, GitLab, Facebook, IBM, and many others. → github.com/projectdiscovery

Engineering teams today move fast, and security teams need to rethink the way they work with dev teams. It’s time to revolutionize the way Security, Dev and DevOps teams work together to supercharge security at the speed of engineering

The Vendor Security Alliance (VSA) is a coalition of companies committed to improving Internet security. Every day, industries across the globe depend on each other to embrace sound cybersecurity practices: yet in the past companies have not had a standardized way to assess the security of their peers. The VSA was formed to solve these issues and streamline vendor security compliance. In collaboration with the VSA, top security experts and experienced compliance officers will release a yearly questionnaire to benchmark their risk. Companies can leverage this questionnaire to qualify vendors and ensure the appropriate controls are in place to improve security for everyone. We have two free questionnaires: The VSA FULL: An in-depth cybersecurity practices questionnaire. The VSA CORE: Essential cybersecurity practices plus privacy (CCPA & GDPR)

We are a VC firm designed to deliver sweat equity. That means our team of engineers, recruiters, designers, sales leaders, writers and product thinkers is trusted to embed into the companies we partner with. It also means were on the hook to deliver great work.

Enhanced security in minutes and get immediately unparalleled protection. Our AI platform detects AI-driven and complex attacks missed by traditional tools, offering superior protection without complicated setup.

Focused Expertise | Early Stage Cybersecurity Venture Capital Founded by a seasoned cybersecurity leader, 3x CISO, and former founder, Seven Hill Ventures brings unparalleled expertise and a founders perspective to its portfolio companies.

DevArmor is building AI agents that automate manual security reviews and threat modeling. Just as Vanta streamlined slow and costly compliance management, DevArmor automates security reviews. DevArmor seamlessly integrates real-time, high-fidelity security reviews informed by threat models into development workflows. While other solutions focus on known code vulnerabilities, DevArmor extracts business logic and security patterns before any code is written. By integrating with developer platforms such as Jira, Notion, Vanta, Drata, AWS, and Terraform, DevArmor processes design docs, policy docs, and compliance requirements to generate structured threat modeling. It also validates design implementation by integrating with source code management platforms like GitHub and GitLab. Through workflow integration, real-time feedback, and enforcement, DevArmor: - Reduces security backlog by 80% - Saves security teams 30% of their time - Accelerates software releases by 3 months

Kenzo Security is the first Agentic Security Platform that modernizes all functions of your security operations teams - from investigations to detection engineering to threat hunting and more.