Sweet Security
Sweet Security is an Israeli cloud-security company that sells a Runtime CNAPP and AI Security Platform for protecting cloud workloads and agentic AI applications in enterprise environments. It serves security leaders at large enterprises via a sales-led model with quote-based annual subscriptions and AWS Marketplace distribution.
- Company typePrivate
- Founded2022
- HeadquartersTel Aviv, Israel
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Sweet Security does
Sweet Security Ltd. is an Israeli cloud security company founded in Tel Aviv in 2022 by former Israeli military cyber chiefs, including the former CISO of the IDF. The company sells a unified Runtime Cloud-Native Application Protection Platform (CNAPP) that combines a Rust-based runtime sensor with an LLM-powered detection engine and a dedicated AI Security Platform for discovering and monitoring AI models and agents operating in enterprise cloud environments. Its product portfolio centers on real-time threat detection and response across AWS, Azure, GCP, and Kubernetes (including Windows workloads), with additional capabilities for vulnerability management, identity threat detection, API security, cloud security posture management, and entitlements analysis.
The company's proprietary technology stack includes a patent-pending LLM-powered detection engine that reduces cloud detection noise to 0.04%, a granted U.S. patent for detecting threats in logs, and the SweetX autonomous investigation agent that resolves incidents in 2–5 minutes MTTR. Sweet Attack, an AI red-team agent launched in May 2026, uses production runtime telemetry to identify exploitable attack paths before adversaries can weaponize them. Sweet Entitlements surfaces the gap between granted and actually-used access across human and non-human identities.
Sweet Security operates an enterprise sales-led go-to-market motion with a "Get a Demo" CTA, inside sales for mid-market accounts, and distribution via the AWS Marketplace. Pricing is quote-based annual subscription. The company serves security teams at named enterprise customers including Fireblocks, ShipStation, Lemonade, Hippo, Kaltura, SafeBreach, Tripledot, Firebolt, Phoenix, and Cast & Crew. As of November 2025 Sweet Security had raised $120 million cumulative, led by Evolution Equity Partners with Munich Re Ventures, Glilot Capital Partners, and Key1 Capital, and reported a sixfold year-over-year ARR increase and tenfold increase in enterprise customers.
Sweet Security firmographics
Firmographics- Name
- Sweet Security
- Legal name
- Sweet Security Ltd.
- Website
- https://sweet.security
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Sweet Security is an Israeli cloud-security company that sells a Runtime CNAPP and AI Security Platform for protecting cloud workloads and agentic AI applications in enterprise environments. It serves security leaders at large enterprises via a sales-led model with quote-based annual subscriptions and AWS Marketplace distribution.
- Ownership category
- akta.pro rank
Sweet Security industry classification
Industry- Product category
- Cloud Security Platform
- NAICS
- Security Systems Services (56162)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Security Analytics & Detection Engineering (HDADAGAE)
- akta.pro secondary industries
- Identity Threat Detection & Response (ITDR) (HDAEAJAH), Secure Model Deployment & Runtime Protection (sandboxing, isolation) (HDAAAKAH), Identity, Access & Secrets Management for AI Systems (IAM for agents/models) (HDAAAKAJ)
Keywords
Where Sweet Security is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
Sweet Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription-based SaaS: Annual or multi-year subscription model for access to Runtime CNAPP and AI Security platform capabilities, with pricing based on enterprise scale and deployment scope.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with quote-based pricing |
Go-to-market motion4 records
Distribution channels3 records
Marketing channels8 records
Sweet Security product offering
Product offeringCore offering
Sweet Security provides a Runtime Cloud-Native Application Protection Platform (CNAPP) with AI Security capabilities for protecting cloud workloads and AI applications. The platform delivers real-time threat detection, behavioral analysis, automated incident investigation, vulnerability prioritization, identity threat detection, API security, and an AI red-team agent for proactive adversarial validation across multi-cloud environments (AWS, Azure, GCP, Kubernetes, Windows).
Product overview
Sweet Security offers a unified Runtime CNAPP platform with specialized AI Security capabilities for the modern cloud and AI era. The platform consists of a core Runtime CNAPP product providing cloud-native application protection combined with a dedicated AI Security Platform for discovering and assessing AI models, agents, and risks. The portfolio includes modular add-on capabilities: Cloud Application Detection & Response (CADR) for threat detection, Cloud Visibility for environment mapping, Vulnerability Management for prioritization, Identity Threat Detection and Response (ITDR) for identity security, Cloud Security Posture Management (CSPM), and API Security. Advanced capabilities include Sweet Attack (AI red-team agent for adversarial validation), Sweet Investigator (unified search across cloud and runtime events), Sweet Entitlements (permission usage analysis), SweetX (autonomous investigation agent), and a patent-pending LLM-Powered Detection Engine. The platform supports AWS, Azure, GCP, Kubernetes environments including GKE Autopilot, and Windows workloads.
Differentiator
Problem solved
Functional benefit
Brands
- Sweet Attack: AI red team agent that proactively identifies exploitable attack paths in enterprise production environments using runtime intelligence and validated attack paths.
- Sweet Entitlements
- Sweet Investigator
- SweetX
- CandyStore
Products and services
- Runtime CNAPP Cloud-Native Application Protection Platform providing runtime context combined with AI intelligence to protect cloud workloads and applications across multi-cloud environments. Core product for enterprise cloud security posture and runtime protection.
- AI Security Platform (AISP) Dedicated platform for discovering and assessing AI models, agents, and potential risks within organizations. Provides visualization and monitoring of AI agents, models, and services deployed in enterprise systems with real-time guardrails for autonomous AI.
- Sweet Attack AI red-team agent that proactively identifies exploitable attack paths in enterprise production environments using live runtime intelligence and validated attack paths. Operates with Mythos-grade models and continuous adversarial validation at AI speed. Available to all Sweet customers as a standalone product.
- Cloud Application Detection & Response (CADR) Detection and response capability for cloud applications providing real-time threat detection and incident response across cloud workloads and applications.
- Cloud Visibility Complete visibility across every cloud workload and every environment, continuously mapping entire cloud environments including traditional cloud and AI applications.
- Vulnerability Management Prioritizes and remediates vulnerabilities by eliminating 99% of noise to focus on what is exploitable right now in the environment, including intelligent risk prioritization correlating vulnerabilities with runtime execution.
- Identity Threat Detection and Response (ITDR) Proactive identity security covering discovery of human and non-human identities, real-time threat detection through anomaly detection and UEBA, and identity risk mitigation with policy-based evaluation.
- Cloud Security Posture Management (CSPM) Identifies and fixes cloud misconfigurations, vulnerabilities, and risks before attackers do. Combines posture management with runtime context for more accurate prioritization.
- API Security Security for APIs including context-aware API security detecting and correlating API risks with real-world attack vectors beyond static OWASP API Top 10 alerts.
Quantifiable outcome
- 30-second threat detection with full attack story
- +5 more outcomes
Companies that use Sweet Security
Customer profileNamed customers10 records
Segments4 records
Ideal customer profiles3 records
Sweet Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability7 records
Feature8 records
Sweet Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Legit SecuritycoreStrategic partnership to deliver end-to-end security for AI-driven development, combining Legit's agentic AppSec platform (including VibeGuard) with Sweet's runtime cloud security platform. Addresses the security gap between code creation and cloud runtime, enabling organizations to continuously manage and remediate risk across the full software development lifecycle.
Scale indicators8 records
Recent moves6 records
Expansion highlights7 records
Sweet Security competitors and assessment
Company assessmentMarket position
Strengths4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Sweet Security social profiles
Digital presenceSweet Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Sweet Security leadership team
Management profileNumber of profiles
Profiles1 record
Sweet Security funding detail
Funding detailFunding overview
Funding rounds3 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Sweet Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Sweet Security
What does Sweet Security do?
Sweet Security provides a Runtime Cloud-Native Application Protection Platform (CNAPP) with AI Security capabilities for protecting cloud workloads and AI applications. The platform delivers real-time threat detection, behavioral analysis, automated incident investigation, vulnerability prioritization, identity threat detection, API security, and an AI red-team agent for proactive adversarial validation across multi-cloud environments (AWS, Azure, GCP, Kubernetes, Windows).
Is Sweet Security a public or private company?
Sweet Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Sweet Security founded?
Sweet Security was founded in 2022. It employs 51 to 100 people.
Where is Sweet Security based?
Sweet Security is headquartered in Tel Aviv, Israel, in the Middle East region.
How does Sweet Security make money?
One revenue line is on record: subscription-based SaaS.
Does Sweet Security have an API?
No public API is recorded for Sweet Security.
What industry is Sweet Security in?
Sweet Security's product category is Cloud Security Platform. Its primary akta.pro industry code is HDADAGAE, Security Analytics & Detection Engineering, with a secondary code of HDAEAJAH, Identity Threat Detection & Response (ITDR). Its NAICS code is 56162 and its SIC code is 7372.