Runtime Ventures
Runtime Ventures is a seed-stage venture capital firm investing exclusively in early-stage cybersecurity startups globally. Founded in 2022 by former cybersecurity founders and operators, the firm writes $250k-$2m checks and provides hands-on mentorship, with a 14+ company portfolio and two disclosed exits.
- Company typePrivate
- Founded2022
- HeadquartersArlington, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Runtime Ventures does
Runtime Ventures is a seed-stage venture capital firm headquartered in San Francisco, founded in 2022 by David Endler and Michael Sutton, both former cybersecurity founders and operators. The firm invests exclusively in early-stage B2B cybersecurity startups, writing pre-seed checks of $250,000 to $1,000,000 and seed checks of $750,000 to $2,000,000 with no stated geographic restrictions. Its core differentiator is the operating background of its general partners: Endler co-founded SpyCloud and Jumpshot (acquired by Avast in 2013), and Sutton served as CISO at Zscaler and previously ran StoneMill Ventures, which backed over 40 cybersecurity companies. The firm is staffed by a four-person core team of two General Partners, one Operating Partner (Ruoting Sun, currently CMO at GreyNoise), and one Analyst.
The firm's "product" is capital plus hands-on mentorship. Beyond funding, Runtime provides strategic support on product development, recruitment, fundraising, and board governance, often taking board seats when leading rounds. Deal flow is sourced through direct founder outreach, referrals within the cybersecurity community, and a public Typeform pitch submission form. The portfolio spans 14+ disclosed companies across AI-native security operations (AiStrike), detection engineering (Detections.AII), AI code analysis (Flux), browser security (Keep Aware), application detection and response (Miggo Security), application observability (Prequel), SIEM alternatives (RunReveal), AI compliance (SolidCore.ai), AI application pentesting (SPLX), CI/CD security (StepSecurity), and continuous threat exposure management (ThreatMate). Two portfolio companies have been acquired as of late 2025: Dodgeball by Spreedly (January 2025) and SPLX by Zscaler (November 2025).
The business model is standard emerging-manager VC: equity ownership in portfolio companies in exchange for capital, with returns realized through exits and subsequent funding rounds. The firm is structured as Runtime Ventures, LLC with no disclosed parent company or institutional LP control. Revenue (management fees plus any realized carried interest) is not publicly disclosed. An affiliated entity, Runtime Cyber Defense, announced a strategic partnership with Radian Compliance in February 2026 for GRC and security control services, suggesting early ecosystem buildout beyond the core investment vehicle.
Runtime Ventures firmographics
Firmographics- Name
- Runtime Ventures
- Legal name
- Runtime Ventures, LLC
- Website
- https://runtime.vc
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Runtime Ventures is a seed-stage venture capital firm investing exclusively in early-stage cybersecurity startups globally. Founded in 2022 by former cybersecurity founders and operators, the firm writes $250k-$2m checks and provides hands-on mentorship, with a 14+ company portfolio and two disclosed exits.
- Ownership category
- akta.pro rank
Runtime Ventures industry classification
Industry- Product category
- Venture Capital
- NAICS
- Other Financial Vehicles (525990)
- SIC
- Investment Advice (6282)
- akta.pro primary industry
- Early-Stage Venture Capital (Pre-Seed/Seed) (FSANAAAA)
Keywords
Where Runtime Ventures is headquartered
LocationHeadquarters
- HQ city
- Arlington
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Runtime Ventures business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D
Revenue model
- Investment Returns / Fund Performance: Runtime Ventures generates returns through equity ownership in portfolio companies. As a venture capital fund, they take equity stakes in early-stage cybersecurity startups and realize returns through exits (acquisitions, IPOs) or subsequent funding rounds. The firm provides capital to founders in exchange for ownership stakes.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Pre-Seed Investments: $250k to $1m |
| Other | Multi-year contract | Seed Investments: $750k to $2m |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
Runtime Ventures product offering
Product offeringCore offering
Runtime Ventures is an early-stage venture capital firm that invests exclusively in B2B cybersecurity startups. The firm provides pre-seed ($250k-$1m) and seed ($750k-$2m) investment capital along with hands-on operational mentorship and network access to founders of early-stage cybersecurity companies.
Product overview
Runtime Ventures is a seed-stage venture capital firm focused exclusively on cybersecurity startups. The firm provides investment capital (pre-seed $250k-$1m, seed $750k-$2m) and operational mentorship to early-stage cybersecurity entrepreneurs. Rather than a unified product platform, Runtime Ventures operates as a services business supporting portfolio companies. Their portfolio includes 14+ investments spanning AI-powered security operations (AiStrike), detection platforms (Detections.AII), code analysis (Flux), browser security (Keep Aware), application detection and response (Miggo Security), observability (Prequel), SIEM alternatives (RunReveal), AI compliance (SolidCore.ai), application pentesting (SPLX), CI/CD security (StepSecurity), and threat exposure management (ThreatMate), with two acquisitions (Dodgeball acquired by Spreedly, SPLX acquired by Zscaler).
Differentiator
Problem solved
Functional benefit
Products and services
- Cybersecurity Investment Services Seed and pre-seed investment capital paired with operational mentorship, network access, and strategic advisory services provided to founders of early-stage B2B cybersecurity startups.
Quantifiable outcome
- Both founders have multiple successful exits and 20+ years of operating experience in cybersecurity
- +1 more outcomes
Companies that use Runtime Ventures
Customer profileNamed customers1 record
Segments1 record
Ideal customer profiles1 record
Runtime Ventures technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Runtime Ventures partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights5 records
Runtime Ventures competitors and assessment
Company assessmentDirect peers
- Ballistic Ventures: Operator-led, cybersecurity-exclusive seed-stage venture fund. Closely comparable to Runtime Ventures in stage focus, vertical specialization, and founder-led thesis investing in early-stage cyber startups.
- Cyberstarts: Cybersecurity-focused early-stage venture fund investing in seed and pre-seed rounds from cyber founders. Directly comparable mandate and check-size range to Runtime Ventures.
- Forgepoint Capital: One of the longest-tenured cybersecurity-dedicated venture firms, investing across seed through growth stages. Comparable vertical focus, though typically with larger fund sizes and broader stage range.
- YL Ventures: Cybersecurity-focused seed-stage venture firm with deep ties to the Israeli cybersecurity ecosystem. Similar early-stage mandate and operator-driven value-add model.
- SYN Ventures: Cybersecurity-focused venture fund investing in seed through growth stages. Directly comparable in vertical specialization and investor profile (former cyber operators).
- Ten Eleven Ventures: Cybersecurity-dedicated venture firm that invests across stages with a focus on early and growth. Comparable vertical focus and operator-investor model.
- NightDragon: Cybersecurity, safety, security and privacy-focused investment firm. Comparable in vertical focus and operator-led approach to early and growth-stage cyber investing.
- Team8: Cybersecurity-focused venture firm that builds and backs companies, with strong operator/investor model. Comparable in cyber-vertical specialization and hands-on portfolio company building.
Broad incumbents
- Bessemer Venture Partners: Large generalist venture firm with a longstanding, dedicated cybersecurity practice. Overlaps with Runtime Ventures on many of the same cyber startups but as part of a much broader portfolio.
- Accel: Major generalist venture firm with a deep security portfolio (including early investments in category leaders). Competes with Runtime Ventures for cyber seed deals but as part of a much broader investment platform.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Runtime Ventures social profiles
Digital presenceRuntime Ventures financial estimates
Financial estimateRevenue estimate
Valuation estimate
Runtime Ventures leadership team
Management profileNumber of profiles
Profiles4 records
Runtime Ventures funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Runtime Ventures M&A and investment
M&A and investmentM&A
Investments14 records
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Runtime Ventures
What does Runtime Ventures do?
Runtime Ventures is an early-stage venture capital firm that invests exclusively in B2B cybersecurity startups. The firm provides pre-seed ($250k-$1m) and seed ($750k-$2m) investment capital along with hands-on operational mentorship and network access to founders of early-stage cybersecurity companies.
Is Runtime Ventures a public or private company?
Runtime Ventures is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Runtime Ventures founded?
Runtime Ventures was founded in 2022. It employs 1 to 10 people.
Where is Runtime Ventures based?
Runtime Ventures is headquartered in Arlington, United States, in the North America region.
How does Runtime Ventures make money?
One revenue line is on record: investment Returns / Fund Performance.
Who are Runtime Ventures's main competitors?
Direct peers on record are Ballistic Ventures, Cyberstarts, Forgepoint Capital, YL Ventures, SYN Ventures, Ten Eleven Ventures, NightDragon and Team8. Broad incumbents are Bessemer Venture Partners and Accel.
Does Runtime Ventures have an API?
No public API is recorded for Runtime Ventures.
What industry is Runtime Ventures in?
Runtime Ventures's product category is Venture Capital. Its primary akta.pro industry code is FSANAAAA, Early-Stage Venture Capital (Pre-Seed/Seed). Its NAICS code is 525990 and its SIC code is 6282.