Ross Hosman

Runlayer, the Enterprise MCP Platform, is the secure way to connect AI to your tools and systems. With custom threat detection, fine-grained permissions, and complete observability built in, Runlayer gives organizations full control over MCP while enabling teams to move fast.

Socket is a cybersecurity platform that protects companies from software supply chain attacks. Companies use Socket to protect their software applications and critical services from malware and security threats originating in open source code.

Beacon is the security data management platform that helps modern security teams escape the tradeoff between coverage, context, and cost. With Beacon, you can seamlessly collect, reduce, enrich, and route your security data – so analysts and AI agents have the context and visibility to focus on security, not data wrangling. The result: cleaner data, faster investigations, and smarter security at scale.

Gem delivers a centralized approach to tackle cloud native threats, from incident readiness, through real-time threat detection, investigation and response at the speed of cloud.

Hi, were Descope! Our no / low code workflows, SDKs, and APIs help organizations create and customize identity journeys for their customers, partners, AI agents, and MCP servers. Organizations like GoFundMe, Databricks, GoodRx, Navan, and You.com use Descope to reduce user friction, stop account takeover attacks, and get a 360 degree view of their customer and agentic identities.

Co-headquartered in Dublin and Boston, Tines’ workflow and AI orchestration platform enables businesses to operate more effectively, mitigate risk, reduce tech debt, and do the work that matters most. Tines brings an impact-first approach to all teams, securely running thousands of mission-critical workflows per day across a diverse range of customers, including Canva, Databricks, Elastic, Kayak, Intercom, and McKesson.

Opal is a modern, data-centric identity security platform. Our platform offers consolidated view and control of your whole ecosystem from on-prem to cloud and SaaS. Opal is backed by Greylock, Battery Ventures, and some of the top security experts around the world, including Silicon Valley CISO Investments (SVCI).

We are pleased to announce that Harmonize has been acquired by Drata! Harmonize is a purpose-built platform that streamlines the employee lifecycle across HR, IT, Finance, and all other business applications. We are dedicated to empowering companies of all sizes to make intelligent, secure, and automated decisions with their employee lifecycle data.

What if the enterprise had complete control over the browser? What would it mean for security, for productivity, for work itself? Introducing Island, the Enterprise Browser - the ideal enterprise workplace, where work flows freely while remaining fundamentally secure. With the core needs of the enterprise naturally embedded in the browser itself, Island gives organizations complete control, visibility, and governance over the last mile, while delivering the same smooth Chromium-based browser experience users expect. Led by experienced leaders in enterprise security and browser technology and backed by leading venture funds -- Insight Partners, Sequoia Capital, Cyberstarts and Stripes Capital -- Island is redefining the future of work for some of the largest, most respected enterprises in the world. Welcome to work as it should be. www.island.io

In aerospace, nothing launches without verification. Drata applies that same mission-grade discipline to business trust—so it’s always ready before the moment of launch.

Lucidum is the asset discovery company that eliminates blind spots across cloud, security and IT operations. Fortune 500 companies rely on the Lucidum platform and its patent-pending machine learning to discover, triangulate and identify all assets – even previously unknown unknowns – delivering visibility essential to truly secure, manage, and transform your enterprise. Backed by GGV Capital and Silicon Valley CISO Investors (SVCI), Lucidum is based in San Jose, California.

Silicon Valley CISO Investments (“SVCI”) is a group of Chief Information Security Officers (“CISO”) that operate as an angel investor syndicate. Founded in 2019, SVCI is already successfully pursuing its mission of fuelling the next generation of cybersecurity innovation. The group identifies promising startups, invests in them and leverages its members’ unmatched industry expertise to help the companies thrive.

Runlayer, the Enterprise MCP Platform, is the secure way to connect AI to your tools and systems. With custom threat detection, fine-grained permissions, and complete observability built in, Runlayer gives organizations full control over MCP while enabling teams to move fast.

Socket is a cybersecurity platform that protects companies from software supply chain attacks. Companies use Socket to protect their software applications and critical services from malware and security threats originating in open source code.

Beacon is the security data management platform that helps modern security teams escape the tradeoff between coverage, context, and cost. With Beacon, you can seamlessly collect, reduce, enrich, and route your security data – so analysts and AI agents have the context and visibility to focus on security, not data wrangling. The result: cleaner data, faster investigations, and smarter security at scale.

BCV helps founders build iconic businesses that transform the way we live and work. We invest in B2B software startups from seed to growth across our four domains of Fintech, Commerce, Apps, and Infra. For over 20 years and with over $10B under management, BCV has helped launch and commercialize more than 400 companies, including Attentive, Bloomreach, Clari, Docusign, Flywire, LinkedIn, Moveworks, Rapid7, and Redis. BCV has offices in San Francisco, Palo Alto, New York, and Boston, and you can follow us on Twitter @BainCapVC.

Gem delivers a centralized approach to tackle cloud native threats, from incident readiness, through real-time threat detection, investigation and response at the speed of cloud.