Cisco backs Zafran’s exposure management strategy

Zafran Security has received a strategic investment from Cisco Investments, adding to the $130 million the company previously raised. Cisco joins investors including Sequoia Capital, Cyberstarts, Menlo Ventures, PSP Growth, Vintage Investment Partners, and Amex Ventures. The companies did not disclose the size of the new investment.

Zafran is building a continuous threat exposure management platform that helps enterprises identify which vulnerabilities are most likely to be used as part of an attack path. The platform brings together data from endpoint, firewall, cloud, identity, and vulnerability management tools to show how an attacker could move through an environment.

The company’s Exposure Graph identifies points where several attack paths converge and helps security teams decide where remediation or mitigation will reduce the most risk. Zafran can also use existing security controls to apply validated changes, giving enterprises a way to act on exposure data without adding another separate enforcement layer.

Cisco’s investment reflects growing demand for platforms that connect vulnerability discovery with remediation. As attackers use automation to combine weaknesses and move faster through enterprise systems, security teams need clearer ways to prioritize action across the tools they already own. Zafran is positioning its platform as the coordination layer for that work.