Gambit Security Lands $61M to Bolster Enterprise Resilience
Tel Aviv-based Gambit Security has raised $61 million in a Series A round led by Spark Capital and Kleiner Perkins, aiming to move enterprises beyond periodic drills and into an era of continuous resilience validation. The startup’s platform targets the gaps that turn disruptions into downtime—by monitoring, testing, and orchestrating remediation in real time across hybrid environments.
From Tabletop Drills to Continuous Assurance
Resilience has long been synonymous with backups, recovery tests and tabletop exercises. Gambit’s pitch is that those controls, while necessary, are no longer sufficient on their own. Co-founder and CEO Alon Gromakov—formerly director of cybersecurity operations in Israel’s Unit 8200 and later head of data detection and response at Sentra—argues that modern enterprises need a living, continuously validated resilience posture that keeps pace with rapid changes in cloud-first architectures.
Founded in September 2024 with seed backing from Israeli incubator Cyberstarts, Gambit is building a platform that shifts resilience from periodic checklists to a constantly measured and tuned state. The company’s thesis: when business services, dependencies and infrastructure are in flux, resilience can’t be a once-a-quarter exercise.
What Gambit Says It Will Deliver
The Series A funding will accelerate development of the platform’s core capabilities—expanding infrastructure coverage, deepening backup integrations, and automating remediation where appropriate. According to Gromakov, the system focuses on practical outcomes: reducing the risk of material downtime by finding and fixing weak links before a crisis.
- Real-time mapping of applications to infrastructure resources, capturing changing dependencies and critical paths.
- Assessment of redundancy and high-availability configurations to identify single points of failure.
- Verification of backup coverage, retention and immutability, pinpointing gaps and policy drift.
- Validation of failover and recovery processes, including cross-region replication and multi-zone readiness.
- Proactive orchestration and remediation workflows designed to standardize and accelerate fixes.
The emphasis is not on any single control (such as backups) but on whether the organization is truly recoverable end-to-end. That means correlating configuration data, application criticality and service-level objectives to recommend changes that materially reduce downtime risk.
AI-Augmented Today, Autonomous Tomorrow
Gambit envisions AI-driven agents that continuously re-tune resilience controls—adjusting backup frequency, retention periods, immutability settings and replication strategies based on business context. When an application’s importance or SLA shifts, the system should evolve policies in step. In dynamic cloud environments, humans struggle to track every change; AI can help close that gap by surfacing drift early and proposing (or eventually executing) corrective actions.
That journey, Gromakov says, will be gradual: start with suggestions and low-risk, reversible tasks to build trust, then progress toward more autonomous execution as customers gain confidence in the guardrails.
Designed for the Hybrid Reality
Gambit began by focusing on public cloud, where APIs make discovery and validation more tractable. But large enterprises still run mission-critical workloads on-premises, and resilience breaks down if it’s managed in silos. The company is therefore building for hybrid visibility—spanning cloud-native stacks and traditional data centers—to reflect how Fortune-scale organizations actually operate.
Whether a payroll service runs in a legacy cluster or a modern container platform, the platform’s job is the same: illuminate dependencies, validate recoverability and ensure there’s no single point whose failure would cascade into an outage.
A Horizontal Cut in a Vertical Market
The resilience market remains fragmented. Backup vendors tend to focus on data protection alone. Cloud providers offer resilience tools that are powerful but typically confined to their ecosystems. Gambit is positioning itself as a layer that cuts horizontally across infrastructure, applications, backups and configurations to assess true recoverability.
Gromakov’s Unit 8200 background informs an adversary-aware perspective: threat actors probe for the weak spots—the misconfigured HA pair, the unprotected datastore, the replication policy that never got updated after a migration. Gambit aims to detect those weak links proactively, before they’re exploited or exposed during a benign failure.
Why It Matters for CISOs
Resilience is increasingly central to enterprise risk. Cyberattacks, service failures and operational mishaps can all trigger existential downtime if an organization can’t recover quickly. For CISOs, continuous validation provides evidence that the business can withstand disruption—turning resilience from a compliance checkbox into a strategic enabler.
With higher confidence in recoverability, leadership can move faster on initiatives that historically felt risky, such as adopting new AI services, accelerating release cycles or rationalizing tool sprawl. Conversely, without visibility into resilience gaps, CISOs struggle to quantify risk or justify investment, and outages remain a roll of the dice.
Funding, Team and Roadmap
The $61 million Series A, co-led by Spark Capital and Kleiner Perkins, gives Gambit the runway to expand integrations across leading backup, storage, cloud and observability ecosystems while maturing its orchestration engine. The company plans to strengthen cross-environment coverage—public cloud, private cloud and on-premises—and to advance AI assistance that can recommend and, over time, safely implement resilience improvements.
Gromakov, who spent more than seven years in Israel’s Unit 8200—including nearly three as director of cybersecurity operations—co-founded Gambit with the goal of operationalizing resilience as a continuous practice. Prior to Gambit, he led data detection and response at Sentra. The company’s seed funding came from Cyberstarts, the Israeli security-focused incubator and venture platform.
The Bottom Line
Enterprises don’t fail resilience tests in theory; they fail in the details—missed backups, brittle dependencies, misaligned SLAs, or a single unmonitored control that unravels in a crisis. Gambit Security is betting that continuous validation and automated remediation can close those gaps at scale. If the company delivers on its hybrid visibility and AI-driven policy tuning, CISOs may gain something they’ve long lacked: real-time proof that, when disruption hits, the business can bend without breaking.
