AI-generated editorial illustration; not a documentary photograph.
Cybersecurity and compliance startup Comp AI announced on September 17, 2026, that it raised a $34 million Series A led by Roo Capital and Grand Ventures. The financing brings its total funding to $37.5 million and is intended to support further product expansion.
Automating compliance work
Comp AI is developing an agentic platform that handles parts of the security and compliance workload faced by software companies. Its AI agents can draft security policies, gather evidence for audits and continuously check whether an organization is meeting its compliance controls.
The company also offers AI-powered penetration testing designed to examine codebases and infrastructure for vulnerabilities. Comp AI argues that continuous monitoring is increasingly important as businesses deploy AI agents that may access customer data, modify permissions or introduce changes after a formal audit has been completed.
Humans remain in the process
The platform does not replace an independent audit or remove human review from compliance decisions. People onboard the AI, support controls and maintain workflows; policies drafted by an agent still require human approval. The company says safeguards and approval requirements should increase as agents take on more consequential actions.
Built from an earlier startup
Comp AI was founded in January by CEO Lewis Carhart, COO Claudio Fuentes and CTO Mariano Fuentes. The three previously worked together at LeapAI, a workflow platform that reached more than one million users before they shut it down after concluding that it lacked a sufficiently durable use case.
Their experience operating LeapAI also exposed them to the manual work involved in SOC 2 compliance, particularly when pursuing larger enterprise customers. That problem became the basis for Comp AI, with Carhart taking the CEO role because the concept originated with him.
Tracking agent activity
Comp AI is working toward controls that record what an AI agent accessed, what actions it attempted and whether it remained within assigned boundaries. Its current approach begins with permissions and accountability, while the broader planned security layer would monitor and validate agent-related risks on a continuing basis.
Source: Comp AI sets eyes on a continuously agentic future for security and compliance
SIGNAL TITANS
Leave a Reply