This Cyberhaven company profile covers the company's valuation, revenue, funding rounds, investors and history. Cyberhaven works in cybersecurity, with a focus on data security. It was founded in 2015 and is headquartered in Palo Alto, California, United States. Its latest valuation on record is US$1 billion (April 2025). Every figure links to a public source, and anything the company hasn't disclosed is marked as such.
Revenue
Funding history
| Date | Round | Amount | Valuation | Investors | Source |
|---|---|---|---|---|---|
| Apr 2025 | Series D | US$100M | US$1B | StepStone Group (lead); Schroders, Industry Ventures | SecurityWeek |
Cyberhaven timeline
Key dates from the sources on this page, oldest first. Metric snapshots are listed after the funding events.
- 2015 — Cyberhaven is founded in Palo Alto by Led by CEO Howard Ting.
- Apr 2025 — Series D: US$100M, valuing the company at US$1B. Investors: StepStone Group (lead); Schroders, Industry Ventures.
Investors
Overview
Cyberhaven protects sensitive company data by tracking where it comes from and where it goes. Traditional data loss prevention (DLP) tools scan content for patterns such as credit card numbers and block files that match rules, but they struggle with modern data, such as source code, designs and strategy documents, that does not follow simple patterns. Cyberhaven's approach, which it calls data lineage, follows each piece of data from its origin through every copy, edit and move, across devices, cloud apps and AI tools. By knowing a file's history, such as that it was copied from a confidential product roadmap in a company system, Cyberhaven can decide whether a transfer is risky even when the content itself looks ordinary.
The company is based in Palo Alto and led by chief executive Howard Ting, a former executive at Nutanix, Palo Alto Networks and Redis. In April 2025 it raised a US$100 million Series D led by StepStone Group, with Schroders and Industry Ventures, at a US$1 billion valuation, according to SecurityWeek. The company said the valuation was roughly seven times higher than a year earlier and that the round brought its total funding to about US$250 million.
Products
- Data detection and response: monitoring and controlling movement of sensitive data across endpoints, browsers, email and cloud applications.
- Data lineage: tracing each piece of data's history to classify it automatically.
- Insider risk management: detecting risky behaviour such as employees taking data before leaving.
- AI data security: visibility and controls over data shared with generative AI tools.
- Data security posture management: discovering where sensitive data is stored.
Funding
Cyberhaven raised several venture rounds before 2025 as demand for data security increased. Its April 2025 Series D of US$100 million was led by StepStone Group, with Schroders and Industry Ventures, at US$1 billion. The company said it would invest in product development, market expansion and targeted acquisitions.
Business model
Cyberhaven sells annual subscriptions, typically priced per user or endpoint, to mid-sized and large enterprises. Customers often replace legacy DLP tools, which can be expensive to run because of the time needed to tune rules and investigate false positives.
Competition
Cyberhaven competes with legacy DLP vendors such as Broadcom (Symantec), Forcepoint and Trellix; with security platforms from Microsoft, Palo Alto Networks, Netskope and Zscaler; with data security companies such as Cyera; and with insider risk specialists. Enterprise browsers such as Island also offer data controls. Cyberhaven's differentiation is data lineage.
Cyberhaven at a glance
Cyberhaven is a Palo Alto data security company led by CEO Howard Ting. It uses data lineage to track sensitive data across devices, cloud apps and AI tools and to stop leaks. It raised a US$100 million Series D led by StepStone Group at a US$1 billion valuation in April 2025.
Timeline
- Mid-2010s: founded.
- 2020: Howard Ting becomes CEO.
- 2021–2024: raises growth funding as data security demand grows.
- April 2025: raises US$100 million at US$1 billion.
Why traditional DLP struggles
Legacy DLP was designed when sensitive data meant structured information such as social security numbers. Rules looked for patterns and keywords. Today's most valuable data is often unstructured: source code, product plans, contracts and customer lists. It moves through cloud apps, messaging tools and AI assistants. Rule-based tools generate many false positives, overwhelming security teams, while missing data that does not match rules. Many organisations deploy DLP in monitoring mode only, because blocking based on unreliable rules disrupts work.
Generative AI and data leaks
Employees increasingly paste company information into AI chatbots and coding assistants to get work done faster. This can expose confidential data to third-party services. Organisations want to allow productive AI use while preventing sensitive data from leaking. Cyberhaven tracks data shared with AI tools and can block or warn when confidential information is involved, a capability that has driven demand.
Who funds Cyberhaven
Cyberhaven's investors include StepStone Group, which led its Series D, along with Schroders and Industry Ventures, plus earlier venture investors.
Valuation context
A sevenfold valuation increase in one year reflects demand for data security in the AI era. Our guide to cybersecurity unicorns compares Cyberhaven with peers.
Risks
- Platform competition: Microsoft and security platform vendors bundle data protection.
- Crowded market: many startups target data security and AI governance.
- Endpoint agents: customers may resist deploying additional agents.
Questions for buyers
- Which data types are most important to protect?
- How many false positives does your current DLP generate?
- Which channels, including AI tools, need coverage?
- How will alerts be investigated?
A typical detection
A product manager copies text from a confidential roadmap document stored in a company cloud drive, pastes it into a personal note app, and later attempts to upload a file containing that text to a personal email account. A content-scanning tool might not recognise the text as sensitive. Cyberhaven, having tracked the text's origin in the confidential document, flags the upload, warns the user and blocks it according to policy, while giving the security team a full history of how the data moved.
Insider risk and departing employees
One of the most common causes of data loss is not external hackers but insiders: employees who take customer lists, source code or plans when they leave for a competitor, or who mishandle data accidentally. Detecting this is difficult because employees legitimately access sensitive data every day. Cyberhaven looks at context, such as whether data is moving to personal accounts or unusual destinations, especially around the time an employee resigns, to flag genuinely risky behaviour without blocking normal work. Investigations are easier because the security team can see the full history of what data moved where.
Balancing security with privacy and trust is important. Monitoring employees raises concerns, and organisations need clear policies, transparency and legal review, particularly in regions with strong privacy laws such as the European Union. Tools that focus on data movements rather than reading personal communications can help strike that balance.
Replacing legacy DLP
Many large organisations have used traditional DLP tools for years and are frustrated with false positives and maintenance effort. Replacing them is a significant project: policies must be migrated, endpoints updated and staff trained. Cyberhaven's growth depends partly on convincing these organisations that a new approach will be worth the switch. Proof-of-concept deployments, where Cyberhaven runs alongside existing tools to show what it detects, are a common way to make this case.
What to watch
Watch AI data security adoption, acquisitions, enterprise wins and competition from platform vendors.
Takeaways
Security teams can protect unstructured data using its history rather than patterns. Founders can see how a new technical approach can disrupt an old category. Investors should watch platform competition.
Sources
Every figure on this page comes from the public sources below. Where sources disagreed, we used the company's own announcement or a primary news report. Private-company data changes; check the date beside each figure.
Frequently asked questions
What does Cyberhaven do?
Cyberhaven is a cybersecurity / data security company headquartered in Palo Alto, California, United States. It was founded in 2015.
What is Cyberhaven's valuation?
Cyberhaven was valued at US$1 billion as of April 2025, according to SecurityWeek. Private company valuations are set at funding rounds or share sales and can change significantly between them.
How much revenue does Cyberhaven make?
Cyberhaven is a private company and has not publicly disclosed its revenue. Figures on third-party sites are usually modelled estimates rather than numbers reported by the company.
What was Cyberhaven's latest funding round?
The most recent financing we have verified is a series d in Apr 2025: US$100M, at a valuation of US$1B. Source: SecurityWeek.
Who are Cyberhaven's investors?
Investors named in public announcements include StepStone Group, Schroders and Industry Ventures.
Who founded Cyberhaven?
Cyberhaven was founded in 2015 by Led by CEO Howard Ting.
Is Cyberhaven a public company?
No. Cyberhaven is a private company (private, venture backed), so its shares are not traded on a stock exchange and it isn't required to publish its financial results.
Where is Cyberhaven headquartered?
Cyberhaven is headquartered in Palo Alto, California, United States.