Costanoa Ventures

Costanoa Ventures, established in 2012, is an early-stage venture capital firm based in Palo Alto, California. It specializes in seed and Series A investments, focusing on technology companies that leverage data and analytics to solve complex business problems. The firm targets sectors such as AI-enabled SaaS, cybersecurity, fintech, and other enterprise technologies. Costanoa Ventures aims to be a long-term partner, supporting startups from their early stages through to market success.

Mike Albang

CFO

Amy Cheetham

Partner

Nancy Katz

Senior Director

Martina Lauchengco

Operating Partner

Tony Liu

Partner

Michelle McHargue

Partner

Michael Parker

Associate

McKenzie Parks

Associate

Gregory Sands

Founder and Managing Director

Greg Sands

Managing Director

Nicole Seah

Associate

Mark Selcow

Partner

Past deals in Cyber Security

Cape

Series B in 2025
Cape is a technology company focused on developing privacy-enabling solutions that empower users to reclaim their privacy and security on electronic devices. The company offers a platform that provides mobile phone services prioritizing privacy protection, ensuring that sensitive information such as names, numbers, and locations are safeguarded from unauthorized access. Cape's technology promises to maintain anonymity and enhance user experience without compromising performance, delivering reliable 5G and 4G coverage. Through its innovative approach, Cape aims to help customers regain their personal digital sovereignty in an increasingly interconnected world.

System Two Security

Venture Round in 2024
System Two Security is a provider of advanced security services aimed at reducing cyber attacks. The company specializes in offering a platform that integrates AI agents and assistants to enhance detection engineering capabilities for security teams. Its technology supports the processing of intelligence, the creation of new detection protocols, and the management of detection libraries. By utilizing generative AI-powered threat hunting and auto-investigation, System Two Security enables enterprise Security Operations Centers (SOCs) and managed security service providers to proactively identify and mitigate emerging threats. The platform focuses on profiling, detecting, and containing new adversaries, thereby enhancing clients' defenses against cyber threats and ensuring a safer operational environment.

Cyberhaven

Series C in 2024
Cyberhaven, Inc., established in 2014 and headquartered in Boston, Massachusetts, specializes in enterprise cybersecurity. The company's core offering is a Data Detection and Response platform designed to safeguard intellectual property from theft and insider threats. This platform assesses internal actions across an organization, identifying risky behaviors before they result in a breach. It provides full-context data tracing to minimize false positives and negatives, and accelerates incident response investigations, enabling clients to protect their data efficiently. Cyberhaven's technology covers the protection of sensitive documents across various platforms, including Office 365, on-premise SharePoint, and Google Apps. The company operates globally with additional offices in Palo Alto, California; Lausanne, Switzerland; and Kiev, Ukraine.

RunReveal

Seed Round in 2024
RunReveal is a security data platform focused on helping organizations detect and defend against cyberattacks. The company provides a comprehensive solution that collects logs, generates alerts, and identifies security issues, thereby enabling clients to mitigate cyber threats effectively. By managing log pipelines and enhancing log processing capabilities, RunReveal aims to be the security data store of the future, addressing the evolving challenges of the digital landscape.

Cape

Series B in 2024
Cape is a technology company focused on developing privacy-enabling solutions that empower users to reclaim their privacy and security on electronic devices. The company offers a platform that provides mobile phone services prioritizing privacy protection, ensuring that sensitive information such as names, numbers, and locations are safeguarded from unauthorized access. Cape's technology promises to maintain anonymity and enhance user experience without compromising performance, delivering reliable 5G and 4G coverage. Through its innovative approach, Cape aims to help customers regain their personal digital sovereignty in an increasingly interconnected world.

Bugcrowd

Series E in 2024
Bugcrowd Inc. is a cybersecurity company that operates a crowdsourced platform connecting organizations with security researchers to enhance their digital defenses. Founded in 2011 and headquartered in San Francisco, California, with additional offices in London and Surry Hills, Bugcrowd provides a range of security testing solutions tailored to various sectors, including financial services, healthcare, retail, and technology. Its platform facilitates customized security testing programs, enabling clients to conduct penetration tests, manage bug bounty initiatives, and oversee vulnerability disclosures. Leveraging an AI-powered system, Bugcrowd matches organizations with skilled hackers from its extensive repository of vulnerabilities and hacker profiles, ensuring a scalable and adaptable approach to security. The company aims to empower organizations to proactively address security challenges and safeguard their assets against evolving threats.

Smile ID (formerly Smile Identity)

Series B in 2023
Smile Identity Inc. is a technology company based in San Francisco, California, that focuses on identity verification solutions. Founded in 2016, the company has developed an application called SmartSelfie, which allows users to create a universal biometric for authentication on Android devices. The team comprises engineers and financial services professionals from both the United States and Africa, bringing expertise in global markets with a focus on highly regulated environments. Smile Identity has developed advanced encryption, authentication, and security solutions, as well as image processing technology. The company has experience working with telecoms, lenders, banks, and startups, enabling them to understand the unique challenges faced by consumers and enterprises in Africa. With support from prominent investors in Silicon Valley and Africa, Smile Identity has established a pan-African presence, operating in countries such as South Africa, Nigeria, Kenya, Ghana, and Rwanda.

Trully

Seed Round in 2022
Trully is a digital fraud prevention and identity verification company based in Mexico, specializing in the detection of fraud and the protection of business networks. The company has developed an artificial intelligence-based platform that offers comprehensive identity and application fraud services. Trully's platform features immediate response capabilities and enriches information through various data points, making it easier for clients to implement effective fraud prevention measures. By leveraging collective intelligence, Trully creates tailored solutions to combat all types of fraud, ensuring enhanced security for its clients.

AppOmni

Series C in 2022
AppOmni Inc. is a technology company specializing in security and management solutions for Software as a Service (SaaS) applications. Founded in 2018 and headquartered in San Bruno, California, with an additional office in Carbondale, Colorado, AppOmni offers a platform that enables enterprises to safeguard their cloud data. The platform performs in-depth scans of APIs, security controls, and configuration settings to identify and rectify risky configurations, improper access controls, and potential data exposures. It provides users with a comprehensive dashboard that offers visibility into the state of their cloud applications, highlights deviations from intended business practices, and allows for verification of application functionality and security. AppOmni's innovative approach to data access management and security is supported by a leadership team with extensive experience in the SaaS and cybersecurity sectors. The company has received recognition for its contributions to cybersecurity, being named in various industry lists as a notable player in the field.

StackHawk

Series B in 2022
StackHawk, Inc. is a Denver-based company that specializes in application security solutions for the development and operations (DevOps) pipeline. Founded in 2019, StackHawk offers a Software-as-a-Service platform that enables users to identify and remediate security vulnerabilities in software development and production environments. Its technology employs Dynamic Application Security Testing (DAST) to scan applications and APIs for exploitable vulnerabilities, such as SQL injection and cross-site scripting. The platform provides developers with a comprehensive view of their application's attack surface, facilitating the triage and fixing of security bugs within the context of their coding efforts. By integrating security into the build pipeline, StackHawk helps organizations maintain continuous security while adapting to fast-paced deployment cycles.

Cyberhaven

Series B in 2021
Cyberhaven, Inc., established in 2014 and headquartered in Boston, Massachusetts, specializes in enterprise cybersecurity. The company's core offering is a Data Detection and Response platform designed to safeguard intellectual property from theft and insider threats. This platform assesses internal actions across an organization, identifying risky behaviors before they result in a breach. It provides full-context data tracing to minimize false positives and negatives, and accelerates incident response investigations, enabling clients to protect their data efficiently. Cyberhaven's technology covers the protection of sensitive documents across various platforms, including Office 365, on-premise SharePoint, and Google Apps. The company operates globally with additional offices in Palo Alto, California; Lausanne, Switzerland; and Kiev, Ukraine.

Passbase

Series A in 2021
Passbase, Inc. is a technology company that specializes in digital identity verification solutions to help businesses reduce fraud and comply with privacy regulations. Founded in 2018 and based in San Francisco, with an additional office in London, Passbase empowers users to take control of their digital identities. The company's platform facilitates the seamless onboarding of pre-verified users through a suite of tools, including facial comparison, liveness detection, and ID authenticity checks. By leveraging verified government documents, linked social media accounts, and biometric signatures, Passbase offers a self-sovereign identity platform that allows individuals to securely and privately share their credentials with companies and institutions that require them.

Smile ID (formerly Smile Identity)

Series A in 2021
Smile Identity Inc. is a technology company based in San Francisco, California, that focuses on identity verification solutions. Founded in 2016, the company has developed an application called SmartSelfie, which allows users to create a universal biometric for authentication on Android devices. The team comprises engineers and financial services professionals from both the United States and Africa, bringing expertise in global markets with a focus on highly regulated environments. Smile Identity has developed advanced encryption, authentication, and security solutions, as well as image processing technology. The company has experience working with telecoms, lenders, banks, and startups, enabling them to understand the unique challenges faced by consumers and enterprises in Africa. With support from prominent investors in Silicon Valley and Africa, Smile Identity has established a pan-African presence, operating in countries such as South Africa, Nigeria, Kenya, Ghana, and Rwanda.

Cyral

Series B in 2021
Cyral, Inc. is a cybersecurity company based in Redwood City, California, that specializes in cloud security solutions for data layer protection. Founded in 2018, Cyral offers a cloud-native service designed to monitor and enforce policies across various data endpoints utilized by services, applications, and users. Its platform provides organizations with enhanced visibility into data access, safeguards against data exfiltration, and establishes a unified privilege management layer, all without disrupting existing workflows or sacrificing agility. Cyral’s solution addresses a wide range of security threats, including database password spraying and SQL injection attacks, while ensuring compliance and facilitating efficient audits. By leveraging features such as Identity Federation and Zero Trust, Cyral enables businesses to manage data access securely across multiple repositories, identify users behind shared credentials, and enforce data segmentation to mitigate risks associated with logic and configuration errors. The platform ensures real-time monitoring of data activities, allowing organizations to respond swiftly to potential security incidents.

AppOmni

Series B in 2021
AppOmni Inc. is a technology company specializing in security and management solutions for Software as a Service (SaaS) applications. Founded in 2018 and headquartered in San Bruno, California, with an additional office in Carbondale, Colorado, AppOmni offers a platform that enables enterprises to safeguard their cloud data. The platform performs in-depth scans of APIs, security controls, and configuration settings to identify and rectify risky configurations, improper access controls, and potential data exposures. It provides users with a comprehensive dashboard that offers visibility into the state of their cloud applications, highlights deviations from intended business practices, and allows for verification of application functionality and security. AppOmni's innovative approach to data access management and security is supported by a leadership team with extensive experience in the SaaS and cybersecurity sectors. The company has received recognition for its contributions to cybersecurity, being named in various industry lists as a notable player in the field.

ZeroWall

Seed Round in 2020
ZeroWall is an AI-driven cybersecurity company that provides actionable and continuous security insights to organizations of varying sizes and complexities. The company specializes in managing cybersecurity risks through comprehensive assessments, detailed insight reports, and tailored recommendations. ZeroWall's tools are designed to help business leaders oversee their information security programs by enabling them to understand and manage security risks effectively.

StackHawk

Series A in 2020
StackHawk, Inc. is a Denver-based company that specializes in application security solutions for the development and operations (DevOps) pipeline. Founded in 2019, StackHawk offers a Software-as-a-Service platform that enables users to identify and remediate security vulnerabilities in software development and production environments. Its technology employs Dynamic Application Security Testing (DAST) to scan applications and APIs for exploitable vulnerabilities, such as SQL injection and cross-site scripting. The platform provides developers with a comprehensive view of their application's attack surface, facilitating the triage and fixing of security bugs within the context of their coding efforts. By integrating security into the build pipeline, StackHawk helps organizations maintain continuous security while adapting to fast-paced deployment cycles.

Elevate Security

Series A in 2020
Elevate Security, Inc. is a technology company that specializes in human risk management through its web-based platform designed to enhance organizational security. Founded in 2017 and headquartered in Berkeley, California, with an additional office in Quebec, Canada, the company focuses on shifting employee behavior in response to security threats to prevent breaches. Its platform identifies users who are most likely to engage in high-risk activities, such as causing ransomware attacks or data loss, and provides an interactive learning experience to help them understand the implications of their actions. By continuously tracking security behaviors and measuring changes over time, Elevate Security enables organizations to tailor security controls effectively and minimize the risk of incidents, thereby supporting enterprise growth initiatives.

StackHawk

Seed Round in 2020
StackHawk, Inc. is a Denver-based company that specializes in application security solutions for the development and operations (DevOps) pipeline. Founded in 2019, StackHawk offers a Software-as-a-Service platform that enables users to identify and remediate security vulnerabilities in software development and production environments. Its technology employs Dynamic Application Security Testing (DAST) to scan applications and APIs for exploitable vulnerabilities, such as SQL injection and cross-site scripting. The platform provides developers with a comprehensive view of their application's attack surface, facilitating the triage and fixing of security bugs within the context of their coding efforts. By integrating security into the build pipeline, StackHawk helps organizations maintain continuous security while adapting to fast-paced deployment cycles.

AppOmni

Series A in 2020
AppOmni Inc. is a technology company specializing in security and management solutions for Software as a Service (SaaS) applications. Founded in 2018 and headquartered in San Bruno, California, with an additional office in Carbondale, Colorado, AppOmni offers a platform that enables enterprises to safeguard their cloud data. The platform performs in-depth scans of APIs, security controls, and configuration settings to identify and rectify risky configurations, improper access controls, and potential data exposures. It provides users with a comprehensive dashboard that offers visibility into the state of their cloud applications, highlights deviations from intended business practices, and allows for verification of application functionality and security. AppOmni's innovative approach to data access management and security is supported by a leadership team with extensive experience in the SaaS and cybersecurity sectors. The company has received recognition for its contributions to cybersecurity, being named in various industry lists as a notable player in the field.

Cyral

Series A in 2020
Cyral, Inc. is a cybersecurity company based in Redwood City, California, that specializes in cloud security solutions for data layer protection. Founded in 2018, Cyral offers a cloud-native service designed to monitor and enforce policies across various data endpoints utilized by services, applications, and users. Its platform provides organizations with enhanced visibility into data access, safeguards against data exfiltration, and establishes a unified privilege management layer, all without disrupting existing workflows or sacrificing agility. Cyral’s solution addresses a wide range of security threats, including database password spraying and SQL injection attacks, while ensuring compliance and facilitating efficient audits. By leveraging features such as Identity Federation and Zero Trust, Cyral enables businesses to manage data access securely across multiple repositories, identify users behind shared credentials, and enforce data segmentation to mitigate risks associated with logic and configuration errors. The platform ensures real-time monitoring of data activities, allowing organizations to respond swiftly to potential security incidents.

Cyberhaven

Series A in 2019
Cyberhaven, Inc., established in 2014 and headquartered in Boston, Massachusetts, specializes in enterprise cybersecurity. The company's core offering is a Data Detection and Response platform designed to safeguard intellectual property from theft and insider threats. This platform assesses internal actions across an organization, identifying risky behaviors before they result in a breach. It provides full-context data tracing to minimize false positives and negatives, and accelerates incident response investigations, enabling clients to protect their data efficiently. Cyberhaven's technology covers the protection of sensitive documents across various platforms, including Office 365, on-premise SharePoint, and Google Apps. The company operates globally with additional offices in Palo Alto, California; Lausanne, Switzerland; and Kiev, Ukraine.

Kenna Security

Series D in 2019
Kenna Security, founded in 2009 and headquartered in San Francisco with an additional office in Chicago, is a technology company specializing in vulnerability management and risk intelligence solutions. It offers Kenna, a SaaS platform that helps organizations accurately measure and prioritize cyber risks, enabling cross-functional teams to remediate vulnerabilities effectively. Serving various sectors including finance, healthcare, and energy, Kenna's platform leverages predictive analytics to anticipate real-world exploitations, focusing security efforts on critical areas.

StackHawk

Seed Round in 2019
StackHawk, Inc. is a Denver-based company that specializes in application security solutions for the development and operations (DevOps) pipeline. Founded in 2019, StackHawk offers a Software-as-a-Service platform that enables users to identify and remediate security vulnerabilities in software development and production environments. Its technology employs Dynamic Application Security Testing (DAST) to scan applications and APIs for exploitable vulnerabilities, such as SQL injection and cross-site scripting. The platform provides developers with a comprehensive view of their application's attack surface, facilitating the triage and fixing of security bugs within the context of their coding efforts. By integrating security into the build pipeline, StackHawk helps organizations maintain continuous security while adapting to fast-paced deployment cycles.

AppOmni

Seed Round in 2019
AppOmni Inc. is a technology company specializing in security and management solutions for Software as a Service (SaaS) applications. Founded in 2018 and headquartered in San Bruno, California, with an additional office in Carbondale, Colorado, AppOmni offers a platform that enables enterprises to safeguard their cloud data. The platform performs in-depth scans of APIs, security controls, and configuration settings to identify and rectify risky configurations, improper access controls, and potential data exposures. It provides users with a comprehensive dashboard that offers visibility into the state of their cloud applications, highlights deviations from intended business practices, and allows for verification of application functionality and security. AppOmni's innovative approach to data access management and security is supported by a leadership team with extensive experience in the SaaS and cybersecurity sectors. The company has received recognition for its contributions to cybersecurity, being named in various industry lists as a notable player in the field.

Elevate Security

Series A in 2019
Elevate Security, Inc. is a technology company that specializes in human risk management through its web-based platform designed to enhance organizational security. Founded in 2017 and headquartered in Berkeley, California, with an additional office in Quebec, Canada, the company focuses on shifting employee behavior in response to security threats to prevent breaches. Its platform identifies users who are most likely to engage in high-risk activities, such as causing ransomware attacks or data loss, and provides an interactive learning experience to help them understand the implications of their actions. By continuously tracking security behaviors and measuring changes over time, Elevate Security enables organizations to tailor security controls effectively and minimize the risk of incidents, thereby supporting enterprise growth initiatives.

Kenna Security

Series C in 2018
Kenna Security, founded in 2009 and headquartered in San Francisco with an additional office in Chicago, is a technology company specializing in vulnerability management and risk intelligence solutions. It offers Kenna, a SaaS platform that helps organizations accurately measure and prioritize cyber risks, enabling cross-functional teams to remediate vulnerabilities effectively. Serving various sectors including finance, healthcare, and energy, Kenna's platform leverages predictive analytics to anticipate real-world exploitations, focusing security efforts on critical areas.

Bugcrowd

Series C in 2018
Bugcrowd Inc. is a cybersecurity company that operates a crowdsourced platform connecting organizations with security researchers to enhance their digital defenses. Founded in 2011 and headquartered in San Francisco, California, with additional offices in London and Surry Hills, Bugcrowd provides a range of security testing solutions tailored to various sectors, including financial services, healthcare, retail, and technology. Its platform facilitates customized security testing programs, enabling clients to conduct penetration tests, manage bug bounty initiatives, and oversee vulnerability disclosures. Leveraging an AI-powered system, Bugcrowd matches organizations with skilled hackers from its extensive repository of vulnerabilities and hacker profiles, ensuring a scalable and adaptable approach to security. The company aims to empower organizations to proactively address security challenges and safeguard their assets against evolving threats.

Elevate Security

Seed Round in 2017
Elevate Security, Inc. is a technology company that specializes in human risk management through its web-based platform designed to enhance organizational security. Founded in 2017 and headquartered in Berkeley, California, with an additional office in Quebec, Canada, the company focuses on shifting employee behavior in response to security threats to prevent breaches. Its platform identifies users who are most likely to engage in high-risk activities, such as causing ransomware attacks or data loss, and provides an interactive learning experience to help them understand the implications of their actions. By continuously tracking security behaviors and measuring changes over time, Elevate Security enables organizations to tailor security controls effectively and minimize the risk of incidents, thereby supporting enterprise growth initiatives.

Kenna Security

Series B in 2016
Kenna Security, founded in 2009 and headquartered in San Francisco with an additional office in Chicago, is a technology company specializing in vulnerability management and risk intelligence solutions. It offers Kenna, a SaaS platform that helps organizations accurately measure and prioritize cyber risks, enabling cross-functional teams to remediate vulnerabilities effectively. Serving various sectors including finance, healthcare, and energy, Kenna's platform leverages predictive analytics to anticipate real-world exploitations, focusing security efforts on critical areas.

Bugcrowd

Series B in 2016
Bugcrowd Inc. is a cybersecurity company that operates a crowdsourced platform connecting organizations with security researchers to enhance their digital defenses. Founded in 2011 and headquartered in San Francisco, California, with additional offices in London and Surry Hills, Bugcrowd provides a range of security testing solutions tailored to various sectors, including financial services, healthcare, retail, and technology. Its platform facilitates customized security testing programs, enabling clients to conduct penetration tests, manage bug bounty initiatives, and oversee vulnerability disclosures. Leveraging an AI-powered system, Bugcrowd matches organizations with skilled hackers from its extensive repository of vulnerabilities and hacker profiles, ensuring a scalable and adaptable approach to security. The company aims to empower organizations to proactively address security challenges and safeguard their assets against evolving threats.

Bugcrowd

Series A in 2015
Bugcrowd Inc. is a cybersecurity company that operates a crowdsourced platform connecting organizations with security researchers to enhance their digital defenses. Founded in 2011 and headquartered in San Francisco, California, with additional offices in London and Surry Hills, Bugcrowd provides a range of security testing solutions tailored to various sectors, including financial services, healthcare, retail, and technology. Its platform facilitates customized security testing programs, enabling clients to conduct penetration tests, manage bug bounty initiatives, and oversee vulnerability disclosures. Leveraging an AI-powered system, Bugcrowd matches organizations with skilled hackers from its extensive repository of vulnerabilities and hacker profiles, ensuring a scalable and adaptable approach to security. The company aims to empower organizations to proactively address security challenges and safeguard their assets against evolving threats.

Kenna Security

Series A in 2014
Kenna Security, founded in 2009 and headquartered in San Francisco with an additional office in Chicago, is a technology company specializing in vulnerability management and risk intelligence solutions. It offers Kenna, a SaaS platform that helps organizations accurately measure and prioritize cyber risks, enabling cross-functional teams to remediate vulnerabilities effectively. Serving various sectors including finance, healthcare, and energy, Kenna's platform leverages predictive analytics to anticipate real-world exploitations, focusing security efforts on critical areas.

Kenna Security

Series A in 2012
Kenna Security, founded in 2009 and headquartered in San Francisco with an additional office in Chicago, is a technology company specializing in vulnerability management and risk intelligence solutions. It offers Kenna, a SaaS platform that helps organizations accurately measure and prioritize cyber risks, enabling cross-functional teams to remediate vulnerabilities effectively. Serving various sectors including finance, healthcare, and energy, Kenna's platform leverages predictive analytics to anticipate real-world exploitations, focusing security efforts on critical areas.

Guardian Analytics

Venture Round in 2012
Guardian Analytics, Inc. is a pioneer in the development of behavior-based fraud prevention solutions tailored for the financial sector. Founded in 2005 and headquartered in Mountain View, California, the company specializes in protecting financial institutions, consumers, and businesses from online and mobile banking fraud. Its comprehensive offerings include omni-channel fraud prevention, visual analytics, and integrated risk databases, as well as fraud detection and analytics tools that address various payment types such as ACH and wire transfers. Guardian Analytics also provides a managed service called FraudDESK, which minimizes staffing impact while delivering robust fraud protection. With a client base exceeding 400 financial institutions, the company leverages advanced machine learning and behavioral analytics to help its clients mitigate fraud risk, comply with anti-money laundering regulations, and enhance overall customer experience.

StackHawk

StackHawk, Inc. is a Denver-based company that specializes in application security solutions for the development and operations (DevOps) pipeline. Founded in 2019, StackHawk offers a Software-as-a-Service platform that enables users to identify and remediate security vulnerabilities in software development and production environments. Its technology employs Dynamic Application Security Testing (DAST) to scan applications and APIs for exploitable vulnerabilities, such as SQL injection and cross-site scripting. The platform provides developers with a comprehensive view of their application's attack surface, facilitating the triage and fixing of security bugs within the context of their coding efforts. By integrating security into the build pipeline, StackHawk helps organizations maintain continuous security while adapting to fast-paced deployment cycles.
Spot something off? Help us improve by flagging any incorrect or outdated information. Just email us at support@teaserclub.com. Your feedback is most welcome.