What Neon Cyber does

Neon Cyber, Inc. is a Delaware-incorporated, Texas-headquartered cybersecurity vendor founded in 2024 by Cody Pierce (CEO) and Mark St. John (COO), both repeat founders who previously built and twice-sold AlphaWave in External Attack Surface Management. The company emerged from stealth in September 2025 after closing a seed round from Silverton Partners (April 2025) and now markets the Workforce Cybersecurity Platform (WCP), an AI-native browser security solution delivered as a lightweight browser extension for Chrome, Edge, and other Chromium-based browsers (including AI-native browsers such as OpenAI Atlas and Perplexity Comet). The platform is built around a proprietary Small Language Model (SLM) embedded in every browser session that analyzes page intent, form behavior, and natural-language data movement (prompts, pastes, uploads) in real time, after TLS decryption but before data leaves the browser, to detect shadow AI use, AI-enhanced phishing, and AI-driven data leakage that EDR/XDR, DLP, and SASE tools cannot see.

The product is organized into six integrated solution modules — Browser Observability for SecOps & GRC, AI & Shadow SaaS Visibility and Control, Authentication & Identity Hygiene, AI Data Leakage & Insider Risk, AI Guardrails & Real-time User Guidance, and AI-Powered Phishing & Social Engineering Defense — and is sold in three subscription tiers (Observability, Detect & Control, Enterprise) on a quote-based, annual billing model, with all deployments orchestrated through existing enterprise IT management infrastructure (Microsoft Group Policy, Intune, Google Admin). The company targets VP/Director-level security leaders and CISOs at mid-market and enterprise organizations (1,000+ employees), with explicit go-to-market emphasis on Financial Services, Healthcare, Technology, and government buyers, and runs a direct enterprise sales motion complemented by content marketing, research reports, PR (Forbes, SecurityWeek, SC Media, MSSP Alert), and event presence at RSAC 2026 and Black Hat 2026.

Neon generates revenue exclusively through direct SaaS subscriptions with no public per-seat pricing disclosed, supplemented by a strategic distribution partnership with Elastic (native SIEM/SOAR integration announced November 2025) and a data partnership with SpyCloud (identity breach data integration announced March 2026). The customer base as publicly disclosed consists of two anchor references — the City of Danville (municipal government, approximately 1,000–2,000 endpoints deployed via Group Policy) and SecOpsBP Energy (energy sector) — alongside the company's own primary research (n=227 US knowledge workers) used as a thought-leadership and demand-generation asset. Headcount is reported in the 11–50 range, and the company remains pre-Series A.

Name

Neon Cyber

Legal name

Neon Cyber Inc.

Website

https://www.neoncyber.com

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

Neon Cyber provides an AI-native browser security platform for mid-market and enterprise organizations, deploying a proprietary Small Language Model via a lightweight browser extension to detect shadow AI, phishing, and data leakage directly inside Chrome, Edge, and AI-native browsers.

Ownership category

akta.pro rank

Product category

Browser Security Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Browser & Web Isolation Security (HDADAEAK)

akta.pro secondary industry

Fraud, Cybercrime Investigations & Brand/Dark Web Monitoring (BPAKAHAO)

Keywords

• Browser security
• Shadow AI governance
• AI data leakage prevention
• Phishing defense
• Identity hygiene monitoring

Headquarters

HQ city

Fort Worth

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Others

Revenue model

1. Browser Security SaaS Subscriptions: Neon Cyber operates on a subscription-based SaaS model with three named tiers (Observability, Detect & Control, Enterprise) sold on a per-seat or enterprise-license basis. Billing is annual, and all tiers are sold via direct sales with quote-based pricing. Upsell dynamics exist from Observability (entry) to Detect & Control (enforcement) to Enterprise (custom compliance, SIEM/SOAR, dedicated support). No public per-seat pricing is disclosed; all sales require a quote.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels8 records

Core offering

Neon Cyber sells an AI-native browser security platform (the Workforce Cybersecurity Platform, or WCP) delivered as a lightweight browser extension that operates inside Chrome, Edge, and other Chromium-based browsers. The platform monitors every browser session in real time to discover shadow AI and SaaS usage, prevent AI-driven data leakage, detect phishing and social engineering attacks, monitor authentication and identity hygiene, and deliver in-browser user coaching — sold as a subscription across three quote-based tiers (Observability, Detect & Control, Enterprise).

Product overview

Neon Cyber offers the Workforce Cybersecurity Platform (WCP), an AI-native browser security solution comprising three pricing tiers built around a single lightweight browser extension that operates natively inside Chrome, Edge, and other Chromium-based browsers. The Observability tier provides discovery and visibility into every AI tool, SaaS app, and browser session. The Detect & Control tier adds DLP, phishing defense, and user guidance capabilities. The Enterprise tier adds SIEM/SOAR integration, API access, and custom compliance frameworks (FedRAMP, CMMC, HIPAA, PCI). The platform is organized around six integrated solution modules: Browser Observability for SecOps & GRC (full-session telemetry, SIEM-ready event integration, audit-ready forensic timelines); AI & Shadow SaaS Visibility and Control (application inventory, identity mapping, usage intelligence); Authentication & Identity Hygiene (authentication monitoring, identity risk scoring, credential protection); AI Data Leakage & Insider Risk (in-browser context, point-of-action enforcement, risk-aware coaching); AI Guardrails & Real-time User Guidance (contextual nudges, behavior-based policies, measurable culture change); and AI-Powered Phishing & Social Engineering Defense (real-time page analysis, enterprise herd immunity, zero-delay blocking).

Differentiator

Problem solved

Functional benefit

Products and services

• Workforce Cybersecurity Platform (WCP) An AI-native browser security platform delivered as a lightweight browser extension inside Chrome, Edge, and other Chromium-based browsers. It monitors every browser session in real time, capturing which AI and SaaS applications employees access, whether they use corporate or personal credentials, and what data is entered, uploaded, or downloaded — combining visibility, protection, user guidance, and governance into a single solution for enterprise security, IT, and risk teams.
• Browser Observability for SecOps & GRC Module providing full-session browser telemetry that delivers a complete, contextual story of every browser session, including what happened, in what order, with what data, on what site. It exposes detection-ready signals for SIEM integration and audit-ready reporting for forensic timelines and compliance demonstrations, targeting SecOps and GRC teams.
• AI & Shadow SaaS Visibility and Control Discovers all AI tools and SaaS apps used by the workforce — sanctioned or not — in real time. Provides 100% browser activity capture, complete AI and SaaS discovery, application inventory with vendor compliance data, identity mapping outside SSO, and usage intelligence for adoption trends and risk concentration.
• Authentication & Identity Hygiene Extends the identity perimeter beyond SSO. Monitors authentication events across every browser session, tracks every login, signup, and authentication event across browser-based apps, flags accounts created outside SSO, weak authentication methods, and MFA gaps, and includes identity risk scoring and credential protection against reuse and phishing sites.
• AI Data Leakage & Insider Risk Intent-aware data loss prevention that monitors every prompt, paste, and upload into any AI tool. Detects sensitive data movement at the point of action — the click, the paste, the upload — before data leaves the browser. SLM-powered intent analysis correlates data movement with identities and SaaS/AI applications and captures audit-ready evidence trails for compliance reviews.
• AI Guardrails & Real-time User Guidance Replaces static blocklists with real-time, context-aware coaching that educates users at the moment of risk. Delivers contextual nudges explaining what's at risk, why it matters, and what to do instead. Behavior-based policies trigger based on data sensitivity, app risk, and user context, with measurable behavior-change tracking for security culture improvement.
• AI-Powered Phishing & Social Engineering Defense AI-native phishing protection that uses a proprietary Small Language Model to analyze page content, form behavior, and submission targets in real time. Provides in-flight attack interception, enterprise herd immunity that propagates detections across the workforce, zero-day phishing detection without dependency on domain reputation, and zero-delay blocking before credentials are submitted.

Quantifiable outcome

• Enterprise-wide deployment in under 15 minutes
• +5 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability5 records

Feature8 records

Partnerships

Two partnerships are on record, tiered core.

• SpyCloudcoreTechnology or Integration · 20 March 2026Neon Cyber announced a strategic partnership with SpyCloud to merge threat intelligence with SpyCloud's recaptured identity data repository — the world's largest of its kind. The partnership enables Neon Cyber customers to quickly determine if identities have been compromised in breaches, phishing attacks, or malware infections, with visualized context for when corporate or personal accounts have been exposed. No customer action is required to activate the capability. The partnership addresses credential stuffing vulnerabilities driven by stolen or misused credentials, which drive 22% of initial access breaches, with approximately 70% of users continuing to practice password reuse.
• ElasticcoreTechnology or Integration · 25 November 2025Neon Cyber partnered with Elastic to integrate its browser and SaaS security features into Elastic Security, enhancing protection against identity-based threats through comprehensive browser and SaaS security. The collaboration offers enterprise-wide detection and response capabilities for modern cyber threats targeting browsers and SaaS applications. For customers already using Elastic Security, this integration strengthens XDR operations without changing workflows or deploying a separate browser. Browser telemetry from Neon is available as structured log data that maps cleanly into existing SIEM schemas. SOAR integration enables automated response workflows triggered by Neon detections.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Netskope: SSE/SASE leader with cloud and SaaS security, DLP, and increasingly AI-tool governance. Competes with Neon for the same buyer around SaaS/AI visibility and data-leakage prevention, but as part of a broader cloud-security platform.
• Zscaler: SASE and zero-trust leader with browser and SaaS security capabilities (e.g., Zscaler Browser Isolation, SaaS Security Posture Management) embedded in a much larger networking and security platform. Represents the incumbent alternative for CISOs consolidating browser security into a broader stack.
• CrowdStrike: Endpoint and XDR market leader with expanding identity, SaaS, and browser telemetry capabilities via Falcon platform. Represents the largest incumbent threat to Neon's endpoint/browser-layer visibility narrative and has the field-sales reach to out-execute.

Direct peers

• Island: Enterprise browser company offering a managed Chromium-based browser with embedded security, DLP, and governance controls. Directly competes for the same buyer (CISO at mid-market and enterprise) and addresses the same browser-layer gap, but via a separate browser rather than an extension.
• Menlo Security: Browser isolation and web security vendor that isolates browsing sessions to prevent phishing and data leakage. Competes with Neon in the browser-security category, though its primary mechanism (isolation) differs from Neon's in-browser extension approach.
• LayerX Security: Browser-layer security platform providing in-browser DLP, phishing defense, and SaaS governance via a lightweight extension. Closely comparable to Neon's approach of operating inside the browser session to capture visibility and enforce policy where EDR/XDR and SASE lose sight.
• Seraphic Security: Enterprise browser security solution that secures sanctioned browsers against phishing, data leakage, and shadow SaaS without requiring a separate isolated browser. Competes head-to-head with Neon on the same browser-extension delivery model and enterprise use cases.

Emerging players

• Nudge Security: SaaS security posture and shadow IT discovery vendor focused on detecting unsanctioned SaaS accounts via browser and email signals. Closely comparable to Neon's "see beyond your SSO limits" SaaS discovery and identity-mapping capabilities.
• Reco: SaaS security platform that discovers and governs shadow SaaS, AI tools, and identities across the workforce. Comparable to Neon's AI & Shadow SaaS Visibility module and the broader AI-governance narrative.
• Guardio: Browser-extension-based security focused on phishing, malicious sites, and identity protection, with growing SMB and prosumer reach. Overlaps with Neon's extension-based delivery model and phishing-defense value proposition, though more consumer-tilted today.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/neon-cyber

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Neon Cyber