Comp AI sets eyes on a continuously agentic future for security and compliance

0:00This is TechCrunch. This episode is brought to you by Framer. Listen, your wardrobe is not the only thing that should be changing with the season. Now is the perfect time to start thinking about updating and refreshing your website with new content. And Framer makes that easy to do, even easier than trying to plan out your next outfit. Framer has everything you need to build and run a website, a Canvas tool for design, hosting, a built-in CMS, and AI agents that work alongside you to help bring your vision to the screen. And it's all in one place, so you can stop skipping around to a hundred different apps. You can update your site and have it go live in a few minutes, or build a new one from scratch. Now I love Framer's powerful SEO tools that have really helped me zero in on my target audience. I can track my traffic through their analytics and I can optimize my site so that it works across any device.

1:00Plus, there's Enterprise Great Security to protect all my info. Learn how you can get more out of your site from a Framer specialist, or get started building for free today at framer.com slash TC Startups for 30% off a Framer Pro Annual Plan. That's framer.com slash TC Startups for 30% off. Framer.com slash TC Startups rules and restrictions may apply. Comp AI is a cybersecurity and compliance startup, and the company announced that it has raised a $34 million series A round. The round was led by Ru Capital and Grand Ventures. The company was founded last January by Lewis Carhartt, who is the CEO. Claudio Fuentes, who is the COO and his brother Mariano Fuentes, who is the CTO. Claudio and Mariano had been building startups together for nearly a decade. Met Carhartt a few years ago and invited him to join Leap AI, a workflow platform they

2:01were building. Claudio was the CEO and co-founder, while Carhartt served as Head of Growth and Mariano was a senior full stack engineer. The startup ran for about two years, growing to more than a million users, but they eventually decided to shut it down after not finding a sticky enough use case to warrant continued investment. That experience taught them a lot, though. For one, they learned how to build with LLMs and the importance of finding a specific use case for a product. They also learned how tedious the SOC to compliance process was, especially as they tried to scale the platform to work with bigger enterprise clients. Claudio said, It's a very obscure process. It took us a couple of months of doing things by hand, and the whole time it meant taking our eyes off building the product. Alas, a startup idea was born. This time, Carhartt would take the lead as CEO because it was his idea. Comp AI says it's building an agentic platform to tackle tedious security and compliance

3:07work. It means having AI agents help write company security policies or collect evidence for security audits. The platform also continuously monitors whether a company is meeting compliance controls. Comp AI is part of the next gen of cybersecurity startups emerging to help companies run more efficiently in the agentic era. Carhartt told TechCrunch, You know, for a lot of software companies, security and compliance are directly tied to revenue. But Comp AI automates is much of the work companies traditionally have to do around that process. The software helps companies meet and maintain those security requirements, but does not replace actual independent audit review. It also doesn't replace humans, the trio said. Human workers help onboard the AI, support the controls, and maintain the agentic workflow. Carhartt said, an agent might draft a policy, for example, but a person still reviews and

4:09approves it as agents take on more consequential actions over time. We believe the level of safeguards and human approval should increase accordingly. The company also offers AI-powered penetration testing, where the platform proactively tests code bases and infrastructure for vulnerabilities. The team hopes this series, a capital, will help with product expansion. It has raised $37.5 million in funding today. There has been much conversation about the new wave of security risks in the agentic era, and with it, a wave of AI security and compliance companies like Vanta and Drauta. Carhartt said what the rapid adoption and experimentation companies are doing with AI is creating a need for continuous and perhaps autonomous security and compliance platforms. He said, imagine a company completes its SOC2 audit and two weeks later, deploys a new AI agent that can access customer data, change permissions across an internal system, or

5:12introduce a new vulnerability through code deployment. The audit did not become invalid. It simply wasn't designed to tell you in real time what changed afterward. These companies adopt more AI. Mariano said they also need to show what an agent accessed, what it tried to do, and whether it stayed within the boundaries given. Comp AI is tackling this by starting with permissions and accountability. We're building toward a security layer, he said, that can monitor and validate those kinds of risk more continuously as these systems evolve. That's all for now. For the latest in tech news, go to techcrutch.com.