Brava Security has come out of stealth with $15M in seed funding led by F2 Venture Capital and Pitango VC, with angel investors participating.
The Tel Aviv company was founded in 2024 by Idan Basre, chief executive, and Itay Gabbay, chief technology officer, both alumni of Israeli intelligence units. Its product models adversary behavior and simulates attacks, then examines the telemetry that simulation produces.
Detections are not the hard part
The pitch rests on a specific claim about where security programs fail: teams can write detection rules, but they cannot reliably predict how a given technique will appear inside their own log estate, across every source, before it happens.
Brava says its platform uses business context to show how an attack would manifest in a specific environment, identifies what current defenses would miss, and rewrites SIEM detections accordingly. Analysts can then investigate the results rather than chase a generic finding.
A crowded but well funded lane
Exposure validation and adversary emulation have drawn steady venture money as buyers tire of point-in-time pentests. The differentiator vendors now compete on is coverage: whether the simulation touches enough of the log pipeline that a gap in one obscure source does not hide a real weakness.
For security leaders evaluating the category, the questions that separate products are concrete. Does the platform generate its own telemetry, or replay canned traffic? Can it prove a rewritten detection actually fires on the same technique later? And does it model the identity and cloud paths that most intrusions now use, not just endpoint activity?
Brava’s funding is small relative to established competitors. That makes the next year’s customer references more important than the announcement.
