AI Agents That Map Attack Paths and Close Exposure Gaps Automatically

Founded in 2023 by security practitioners who had spent years inside enterprise security teams, Breeze Security builds a preemptive, agentic exposure management platform aimed at large organizations, including those with more than 50,000 employees and over a million managed entities. The founding premise was that analysts drown in severity-ranked scanner output while the exposures that actually lead to breaches sit unnoticed in the gaps between tools. Yagel Sheli serves as chief executive and Dolev Elbaz as chief technology officer, with operations in Tel Aviv and New York.

The platform is organized around the five stages of continuous threat exposure management: scoping, discovery, prioritization, validation, and mobilization. Read-only API integrations connect to existing cloud, EDR, SIEM, identity, ticketing, and SaaS tooling, with no agents installed and no infrastructure changes, while AI agents enumerate assets, CVEs, misconfigurations, and both human and non-human identities. Findings are scored by reachability, blast radius, and asset criticality, validated for real exploitability, then pushed into ServiceNow or Jira as owner-assigned tickets tracked through to closure.

What separates the approach from conventional scanning is the weight placed on validation: exposures already neutralized by compensating controls, or unreachable from any realistic entry point, are filtered out, leaving a short remediation queue instead of tens of thousands of ranked findings. Published use cases span SaaS and security misconfiguration, identity overprivilege covering service accounts and API keys, exposure prioritization, and zero-day blast-radius assessment. Investors include F2 Venture Capital and Elron Ventures, and customers named on the site include Lemonade, Pagaya, Coralogix, and HiBob.