SarangNot too long ago, cybersecurity was largely about building stronger walls to keep attackers out. Today, that approach is no longer enough. As AI accelerates the speed and sophistication of cyberattacks, organisations are realising that resilience is just as important as prevention. This shift is reshaping how companies approach cybersecurity, compliance, and cyber insurance, creating demand for platforms that bring these capabilities together instead of treating them as separate functions.
Against this backdrop, Mitigata has closed a $15 million Series B funding round led by Bessemer Venture Partners, with participation from Nexus Venture Partners, Titan Capital, and WEH Ventures. The round strengthens Mitigata’s position as it builds India’s AI-native cyber resilience platform, one that brings cyber insurance, security operations, and compliance automation into a single system instead of three disconnected ones.
Mitigata was founded in 2023 by Mohit Anand, Sarthak Dubey, Mayank Morya, and Akshit Kaushik on a simple conviction: cybersecurity could no longer stop at prevention. As attacks grow more sophisticated and increasingly AI-driven, enterprises need more than detection alone. They need the ability to withstand an attack, respond to it in real time, and recover from it without lasting damage to the business.
Series B at a Glance
The following table summarises the key highlights of Mitigata’s Series B funding round.
| Detail | Information |
|---|---|
| Amount raised | $15 million |
| Lead investor | Bessemer Venture Partners |
| Participating investors | Nexus Venture Partners, Titan Capital, WEH Ventures |
| Company founded | 2023 |
Why Cyber Resilience Matters More Than Ever
Cyberattacks today look very different from the opportunistic break-ins of a decade ago. Attackers now use AI to draft convincing phishing emails, automate reconnaissance, and adjust their approach mid-attack. Security teams that once focused mainly on keeping intruders out are learning that prevention alone cannot account for every scenario.
This is why cybersecurity insurance and structured incident response now sit alongside firewalls and endpoint protection as core parts of a security program. Detection, response, recovery, and ongoing risk management have become just as important as prevention. A single serious breach can disrupt operations for weeks, invite regulatory scrutiny, and dent customer trust long after the affected systems are back online.
That shift explains why cyber resilience has moved from an IT concern to a boardroom priority. An outage at a bank, hospital, or logistics company rarely stays contained to that one organisation; it can ripple through supply chains, partners, and customers. Cybersecurity and insurance are increasingly discussed alongside business continuity and, in some sectors, national infrastructure planning.
“Security, insurance, and compliance should work as one, so when something happens, the response doesn’t have to start with three phone calls.”
– Akshit Kaushik, Co-Founder & CBO, Mitigata
Attackers Evolved. So Did We.
Mitigata unifies security, compliance, and insurance to stay ahead of modern threats.
The Journey So Far: Building India’s First AI-Native Cyber Resilience Platform
Mitigata built its platform on a different premise: insurance and security operations work better together than apart. Its operating framework, “Insure. Detect. Defend. Recover.”, combines AI-powered security operations, cyber risk intelligence, compliance automation, digital forensics, incident response, and cyber insurance within one environment.
Gordon AI, Mitigata’s compliance and cyber resilience platform, sits at the centre of that framework. It automates much of the work that once required manual audits and spreadsheets, spanning 30+ pre-mapped compliance frameworks and cutting manual compliance effort by roughly 80% for the organisations using it. Just as importantly, it connects that visibility directly to the insurance and incident response side of the business, rather than leaving each function to operate in isolation.
“We almost didn’t make it. More than once. What the Series B tells me isn’t that we were right all along. It’s that we kept going long enough to prove it.”
– Sarthak Dubey, Co-Founder & COO, Mitigata
Impact That Powers Progress
Our journey is defined by measurable outcomes that strengthen cyber resilience for organisations across industries
Supporting 800+ organisations
Mitigata now works with more than 800 organisations across BFSI, healthcare, manufacturing, automotive, technology, retail, and e-commerce. That range matters. A bank, a hospital, and a manufacturing plant each face different threats and compliance obligations, and serving all three well requires a platform built to adapt rather than a single rigid product.
One Million Security Incidents Triaged
Mitigata’s security operations centre has triaged more than one million security incidents to date. At that scale, manual triage stops being realistic, which is exactly why AI-driven automation sits at the core of how the SOC runs. Every incident processed sharpens the models that help the platform recognise patterns faster the next time around.
12x Year-on-Year Growth
Mitigata’s business has grown 12 times year on year, a pace that reflects rising demand for corporate cyber insurance and growing enterprise trust in a platform that combines coverage with active security operations. That growth spans company sizes, from SMEs buying their first cyber risk insurance policy to large enterprises consolidating fragmented vendor relationships into one resilience partner.
Impact by the Numbers
The following figures illustrate how Mitigata has grown while helping organisations strengthen their cyber resilience.
| Metric | Figure |
|---|---|
| Organisations supported | 800+ |
| Security incidents triaged | 1,000,000+ |
| Year-on-year growth | 12× |
| Compliance frameworks mapped | 30+ |
| Reduction in manual compliance work | 80% |
Cyber Risk Never Stands Still
Neither does Mitigata’s AI-powered cyber resilience platform.
What Makes Mitigata Different?
AI-Powered Security Operations
At the centre of Mitigata’s platform is a 24×7 AI-powered security operations centre, supported by Gordon AI as an intelligent security co-pilot. Rather than replacing analysts, Gordon AI helps them work faster by flagging genuine threats, cutting through noise, and giving teams the context they need to respond without switching between multiple dashboards.Unified Cyber Resilience
Most companies buy detection tools, risk intelligence, incident response, and insurance from separate vendors that rarely talk to one another. Mitigata brings these functions into a single operating framework, so a risk flagged during monitoring can inform incident response and insurance coverage without weeks of back-and-forth between providers.Cyber Insurance Built Into Security
Mitigata operates as India’s first IRDAI-regulated cyber insurance broker built specifically around cyber risk. This lets the company align insurance coverage with a customer’s actual risk profile in something close to real time, rather than relying on a static questionnaire filled out once a year. As threats evolve, the relevance of the policy evolves with them, which is a meaningful departure from how cyber liability insurance has traditionally been sold and managed in India.“The integration problem is not a UX problem. It is a structural one. And structural problems do not get fixed by dashboards.”
– Mayank Morya, Co-Founder & CTO, Mitigata
What the Series B Funding Will Accelerate
Expanding AI-Native Technologies
A share of the new capital will go directly into Gordon AI’s underlying models, improving detection accuracy and reducing the time it takes to triage and respond to incidents.Scaling One of India’s Largest AI-Powered SOCs
Mitigata plans to expand its security operations centre further, adding capacity to support more organisations without stretching response times.Growing Our Engineering and AI Teams
The company intends to grow its engineering and AI talent pool, a necessary step for a platform that depends on continuously improving models rather than static software.Accelerating International Expansion
Beyond India, Mitigata is looking to extend its cyber resilience and insurance model to new markets, building on lessons learned from serving 800+ organisations domestically.Voices Behind the Vision
Mohit Anand, Mitigata’s co-founder, has spoken about the opportunity to build sovereign, AI-native cyber resilience infrastructure from India, one that reflects local regulatory needs such as the DPDP Act while holding up against global security standards.“India needs cyber resilience infrastructure that understands its regulatory landscape as well as it understands the threat landscape. This funding lets us build both at once.”
Why Juggle Three Platforms?
Manage security, compliance, and insurance from one ecosystem.
Looking Ahead
Mitigata’s long-term goal is to build sovereign AI-powered cyber resilience infrastructure from India, at a time when AI is reshaping both the tools attackers use and the tools defenders need. That means continued investment in detection and response capabilities that keep pace with how threats evolve, while keeping the insurance side of the business closely tied to what is actually happening on the ground.
The company views India’s fast-digitising economy, spanning fintech, healthcare, and manufacturing, as fertile ground for this model, with plans to extend the same approach to markets outside India over time.
Closing Note
Mitigata’s team extended thanks to its customers, partners, investors, and employees for their part in reaching this milestone. The company reaffirmed its commitment to helping organisations identify, manage, mitigate, and transfer cyber risk, whether that means a mid-sized manufacturer buying its first cyber insurance policy or a large financial institution running its compliance workflows through Gordon AI.
Frequently Asked Questions
1. How much did Mitigata raise in its Series B round?
Mitigata raised $15 million in a Series B round led by Bessemer Venture Partners, with participation from Nexus Venture Partners, Titan Capital, and WEH Ventures.
2. What does Mitigata’s cyber resilience platform include?
The platform combines AI-powered security operations, cyber risk intelligence, compliance automation, digital forensics, incident response, and cyber insurance within one operating framework, built around the idea of insuring, detecting, defending, and recovering.
3. What is Gordon AI?
Gordon AI is Mitigata’s compliance and cyber resilience platform. It automates policy approval and audit work across 30+ pre-mapped compliance frameworks and acts as a security co-pilot within Mitigata’s 24×7 SOC.
4. Is Mitigata a regulated cyber insurance provider in India?
Yes. Mitigata operates as India’s first IRDAI-regulated cyber insurance broker built specifically around cyber risk, allowing it to align coverage with a customer’s real-time risk profile.
5. How will Mitigata use the new funding?
The funding will go toward expanding Gordon AI’s underlying models, scaling the security operations centre, growing the engineering and AI teams, and accelerating international expansion.
deepthi s
akshit k