Reach Security, a San Francisco cybersecurity company, has raised more than $50m in a Series B round announced on 13 October 2026.
Top Tier Capital Partners led the round. Ballistic Ventures, In-Q-Tel, Microsoft's venture fund M12 and existing investors also took part. The company did not disclose a valuation or its total funding to date.
The round follows a $20m Series A led by Ballistic Ventures in March 2024, FinTech Global reported at the time.
“A compensating control that cannot be verified is not a mitigation. It's an assumption.”Colt Blackmore, Co-founder and CTO, Reach Security
What Reach Security does
Large companies run many security products, and their protection depends on how each one is set up. Reach's platform reads the live configuration of the products an enterprise already owns and works out whether a given exploit path is blocked or still reachable. It identifies the security rule responsible and, where protection fails, can fix the setting automatically.
Alongside the funding, the company launched Reach Everywhere, which makes its security-control data available through an API, an MCP server and integrations with other technology vendors.
Co-founder and chief technology officer Colt Blackmore said in the announcement that a compensating control that cannot be verified amounts to an assumption rather than a mitigation. Chief executive and co-founder Garrett Hamilton said AI has given attackers better economics and a lower barrier to entry, but has also given defenders an opening.
Blackmore's point concerns compensating controls, the protections security teams rely on when a vulnerability cannot be patched straight away. Reach aims to show whether those protections actually hold, and Hamilton said this is why a source of truth for security controls matters.
Customers
Reach says its customer base doubled over the past 12 months. Named customers include Autodesk, Insurity, MPS and Ensemble Health Partners. Sebastian Goodwin, chief trust officer at Autodesk, said in the release that trust is built on evidence, not assumptions.
The company also cited an independent analysis by TAG Infosphere, which found that customers saved more than 160 hours a week and calculated a 156% return on investment. Reach did not disclose revenue or headcount.
Who invested
Garth Timoll, general partner and chief executive of Top Tier Capital Partners, said Reach was creating a trusted source of truth for security controls. Ballistic Ventures, which led the Series A, returned for this round, and the addition of In-Q-Tel comes as Reach targets the US federal market.
The 2024 Series A also included Artisanal Ventures, former Palo Alto Networks chief executive Mark McLaughlin and Snowflake chief marketing officer Denise Persson, with existing investors Webb Investment Network, Ridge Ventures and TechOperators taking part, according to FinTech Global.
What the money is for
Reach plans to spend the new capital on product development, more integration partnerships, international expansion and growth among US enterprise and federal customers. The company has not said how many people it plans to hire or which countries it will enter first.
Because the platform works by reading the settings of products made by other vendors, integration partnerships are central to how it extends to new tools and customers.
Company website: reach.security