Bold Security makes the 2027 Fortune Cyber 60 list

Putting data protection on the endpoint

Bold Security offers a real-time data loss prevention solution, or DLP, for modern endpoints. The company says traditional DLP systems typically search for sensitive data based on patterns. This can identify personally identifiable information and payment card data, for example, but can easily miss source code, financial models or board documents.

Pattern-based rules can also trigger alerts for legitimate workflows. According to Bold Security, this floods security teams with notifications, leading organizations to frequently disable blocking. A tool designed for prevention therefore ends up functioning more like a detection system.

The company addresses this problem with an architecture in which artificial intelligence runs directly on the device. According to Bold Security, small language models on each device classify data based on its meaning, take the context of individual actions into account, and then block or provide guidance in the moment.

On-device models without a cloud connection

Bold Security says its solution does not require two-way communication with the cloud, rules based on regular expressions or a continuous network connection. The company says this means there is no coverage gap even when a device goes offline.

The company's founders believe local desktop assistants and AI agents are creating new data-handling pathways. These can operate outside the channels traditionally monitored by DLP systems, while sensitive data moves through the device.

Nati Hazut, co-founder and CEO of Bold Security, said the company views the endpoint both as a new risk surface and as the right place to address the problem. Hazut said people and AI agents are moving sensitive data across devices faster than a security team can track. In his view, being included in the Fortune Cyber 60 validates the relevance of both the problem and the company's approach.

40 million dollars after the early stage

Bold Security was founded in 2024 and emerged from its early so-called stealth development phase in early 2025. At the time, the company said it had raised 40 million dollars with participation from Bessemer Venture Partners, Picture Capital and Red Dot Capital Partners.

The company serves dozens of fast-growing businesses, including Tekion, HiBob, Cresta and Shutterfly. Bold's founders previously established two cybersecurity companies. Polyrize was acquired by Varonis, while SAM Seamless Network was acquired by Qualcomm.

Amit Karp, a partner at Bessemer Venture Partners, said most security teams understand the DLP problem, but few companies have been willing to rethink how it works. Karp said Bold's on-device AI aims to offer a different approach by understanding sensitive data and preventing leaks.

What does recognition from the Fortune Cyber 60 mean?

The Fortune Cyber 60 ranks significant, venture-backed cybersecurity startups that have not yet completed an IPO, acquisition or other major exit. Fortune compiled the 2027 list in partnership with Lightspeed Venture Partners and AWS.

According to Lightspeed, hundreds of venture-backed cybersecurity companies are evaluated based on annual recurring revenue, annual growth and verified operating data. The full list is divided into three sections, each containing 20 companies. Bold Security appears in the Emerging section, which could give the company visibility among cybersecurity startups as it continues to develop its on-device DLP approach.