Empirical Security Raises $25M to Bring Predictive Intelligence to Vulnerability Management.

As cyber threats become faster, more sophisticated, and increasingly AI-driven, security teams are realizing that traditional vulnerability management is no longer enough. The recent $25 million Series A funding raised by Empirical Security marks an important milestone in the evolution of predictive cybersecurity.

Congratulations to Ed Bellis, Michael Roytman, Jay Jacobs, and the entire Empirical Security team on this achievement.

Led by Brightmind Partners, with participation from Costanoa Ventures and Hyde Park Angels, the round brings the company's total funding to $37 million, reflecting strong investor confidence in the future of predictive vulnerability management.

Why This Funding Matters

Every year, thousands of new Common Vulnerabilities and Exposures (CVEs) are disclosed, leaving security teams with an overwhelming number of risks to evaluate. Despite advances in vulnerability management, many organizations still rely on reactive approaches, patching known vulnerabilities and hoping they've prioritized the right ones.

As AI enables attackers to move faster and exploit weaknesses more efficiently, this approach is becoming increasingly difficult to sustain.

Empirical Security believes vulnerability management should be predictive rather than reactive, helping organizations understand which threats are actually likely to impact their environment before attackers strike.

Building the Next Generation of Vulnerability Intelligence

Empirical is developing two complementary platforms designed to improve vulnerability prioritization.

Foundation is a global predictive model that continuously monitors more than 18,000 exploited CVEs to identify emerging attack patterns and forecast future exploitation trends.

Radiant builds on that intelligence by tailoring predictions to an individual organization's environment, allowing security teams to focus on vulnerabilities that present the greatest real-world risk to their business.

Together, these platforms aim to reduce alert fatigue and help security teams make faster, more informed remediation decisions.

Built by Leaders Who Shaped the Industry

One of Empirical Security's greatest strengths is its leadership team.

The founders previously helped pioneer risk-based vulnerability management at Kenna Security, fundamentally changing how organizations prioritize vulnerabilities based on real-world exploitability rather than severity scores alone.

Equally significant is the involvement of Jay Jacobs, co-creator of the Exploit Prediction Scoring System (EPSS). EPSS has become one of the industry's most influential frameworks for estimating the likelihood that a vulnerability will be exploited, helping security teams make smarter prioritization decisions.

That experience gives Empirical a strong foundation as it pushes vulnerability management toward its next evolution.

What This Signals for Cybersecurity

Empirical's funding reflects a broader shift across enterprise cybersecurity. Organizations are moving beyond simply identifying vulnerabilities toward understanding which ones actually matter. Instead of asking, "What vulnerabilities do we have?", security leaders increasingly want to know, "Which vulnerabilities are most likely to be exploited in our specific environment?"

Predictive intelligence is becoming a critical capability as security teams face growing volumes of CVEs, limited resources, and AI-powered adversaries that can exploit weaknesses faster than ever.

For CISOs, this represents a transition from reactive patch management to intelligence-driven risk reduction.

Looking Ahead

As AI continues to reshape both cyberattacks and cyber defense, predictive vulnerability management is poised to become a core component of modern security programs.

With $25 million in new funding, Empirical Security is well positioned to advance this vision and help enterprises prioritize the threats that truly matter.

The company's approach highlights an important industry shift: the future of vulnerability management isn't simply identifying more risks; it's predicting which ones attackers are most likely to exploit before they do.

Execweb congratulates Empirical Security on this funding milestone. The $25M Series A reflects growing confidence in predictive vulnerability intelligence and the industry's move toward smarter, AI-driven approaches to cyber risk management.