Personal blog of Yzmir Ramirez

Even in these trying economic times, there are some services that companies can’t do without. Having good security tools is one of them. Expel, a 4-year old startup that offers security operations as a service, announced a $50 million Series D financing today.

CapitalG led the round with participation from existing investors Battery Ventures, Greycroft, Index Ventures, Paladin Capital Group and Scale Venture Partners. The company has now raised almost $117 million, according to Pitchbook data.

It’s never easy finding quality security talent to help protect a large organization. The idea behind Expel is to give customers a set of tools to help use automation to reduce the number of people required to keep an organization safe.

Most companies struggle to find experienced security employees, so it’s using automation to solve a real pain point for them. While co-founder and CEO Dave Merkel says you still need to staff the security operations center, you can do it with fewer people with his platform.

“You may have a 24×7 Security Operations Center, but you don’t need the number of people everybody else does to protect your customers because Workbench does all of the heavy lifting for you. So instead of a SOC with 100 people, maybe you’ve got one with 15 people, and that gives tremendous leverage through this platform, and the platform ensures that you can provide high quality security without having to continually grow headcount,” Merkel explained.

Merkel sees the same economy everyone else does, but he believes that companies will continue to invest in security because they have to.

“Security tends to be a need as opposed to a want in many organizations, and so we still do see business happening. We will be using some of the money to continue to invest smartly in sales and marketing, but we’ll just need to be deliberate to make sure that we’re picking the right things that are still effective right now,” he said.

One thing that’s remarkable about this round is that Expel didn’t go looking for this new money. In fact, CapitalG came knocking, according to CapitalG general partner Gene Frantz.

“We sought out Expel, first and foremost. It wasn’t that Expel sought out to raise money and they called a bunch of people. We called them, and that was in response to a bunch of thematic work that we continually do in the security space,” Frantz told TechCrunch.

That work involved three main areas, where Expel happened to check all the boxes. The first was the threat landscape becoming ever more treacherous. The second was information overload from a variety of security products, and finally the dearth of experienced security personnel to deal with the first two problems.

“And so our bet is that this is the company in the space that actually will take on and address these challenges,” Frantz said.

Merkel describes having a company like CapitalG come to him as a humbling experience for him and his co-founders, especially under the current circumstances.

“It’s tremendous validation, but it is also humbling. We’re pretty thankful to be in that position, and we want to make sure that we do the right things to continue to honor the opportunity that we see in front of us.”

Sumo Logic, a mature security event management startup with a valuation over $1 billion, announced today that it has acquired JASK, a security operations startup that raised almost $40 million. The companies did not share the terms of the deal.

Sumo’s CEO Ramin Sayar says the combined companies give customers a complete security solution. Sumo offers what’s known in industry parlance as a security information and event management (SIEM) tool, while JASK provides a security operations center or SOC (pronounced “sock“). Both are focused on securing workloads in a cloud native environment and can work in tandem.

Sayar says that as companies shift workloads to the cloud they need to reevaluate their security tools. “The interesting thing about the market today is that the traditional enterprises are much more aggressively taking a security-first posture as they start to plan for new workloads in the cloud, let alone workloads that they are migrating. Part of that requires them to evaluate their tools, teams and, more importantly, a lot of their processes that they’ve built in and around their legacy systems as well as their SOC,” he said.

He says that combining the two organizations helps customers moving to the cloud automate a lot of their security requirements, something that’s increasingly important due to the lack of highly skilled security personnel. That means the more that software can do, the better.

“We see a lot of dysfunction in the marketplace and the whole movement towards automation really complements and supplements the gap that we have in the workforce, particularly in terms of security folks. This is what JASK has been trying to do for four-plus years, and it’s what Sumo has been trying to do for nearly 10 years in terms of using various algorithms and machine learning techniques to suppress a lot of false alerts, triage the process and help drive efficiency and more automation,” he said.

JASK CEO and co-founder Greg Martin says the shift to the cloud has also precipitated two major changes in the security space that have driven this growing need for security automation. “The perimeter is disappearing and that fundamentally changes how we have to perform cybersecurity. The second is that the footprint of threats and data are so large now that security operations is no longer a human scalable problem,” he said. Echoing Sayar, he says that requires a much higher level of automation.

JASK was founded in 2015, raising $39 million, according to Crunchbase data. Investors included Battery Ventures, Dell Technologies Capital, TenEleven Ventures and Kleiner Perkins. Its last round was a $25 million Series B led by Kleiner in June 2018.

Deepak Jeevankumar, managing director at Dell Technologies Capital, whose company was part of JASK’s Series A investment and who invests frequently in security startups, sees the two companies joining forces as a strong combination.

“Sumo Logic and JASK have the same mission to disrupt today’s security industry, which suffers from legacy security tools, siloed teams and alert fatigue. Both companies are pioneers in cloud-native security and share the same maniacal customer focus. Sumo Logic is therefore a great culture and product fit for JASK to continue its journey,” Jeevankumer told TechCrunch.

Sumo has raised $345 million, according to the company. It was valued at over $1 billion in its most recent funding round last May, when it raised $110 million.

CRN first reported this deal was in the works in an article on October 22.

 Okta and fellow cloud company ServiceNow got together to build an app that helps ServiceNow customers using their security operations tools find security issues related to identity and take action immediately.
The company launched the Okta Identity Cloud for Security Operations app today. It’s available in the ServiceNow app store and has been designed for customers who are using both… Read More