Comp AI sets eyes on a continuously agentic future for security and compliance

Comp AI sets eyes on a continuously agentic future for security and compliance. 25% off tickets now Back by popular demand: Save up to $300 on Disrupt Close Image Credits:Comp AI Venture Comp AI sets eyes on a continuously agentic future for security and compliance Dominic-Madori Davis 4:00 AM PDT · September 17, 2026 Comp AI, a cybersecurity and compliance startup, announced that it has raised a $34 million Series A round.

What happened

Comp AI says it’s building an agentic platform to tackle tedious security and compliance work; that means having AI agents help write company security policies or collect evidence for security audits. There has been much conversation about the new wave of security risks in the agentic era (and with it, a wave of AI security and compliance companies like Vanta and Drata). “We’re building toward a security layer that can monitor and validate those kinds of risk more continuously as these systems evolve. ” Topics compliance, cybersecurity, Startups, Venture When you purchase through links in our articles, we may earn a small commission.

Comp AI, a cybersecurity and compliance startup, announced a $34 million Series A round led by Roo Capital and Grand Ventures. The platform also continuously monitors whether a company is meeting compliance controls. Comp AI is part of the next generation of cybersecurity startups emerging to help companies run more efficiently in the agentic era. “For a lot of software companies, security and compliance are directly tied to revenue,” Carhart told TechCrunch, citing, for example, how a customer might ask a startup for a SOC 2 report before closing a deal.

The wider picture

Carhart said what the rapid adoption and experimentation companies are doing with AI is creating a need for continuous — and perhaps autonomous — security and compliance platforms. They also learned how tedious the SOC 2 compliance process was, especially as they tried to scale the platform to work with bigger enterprise clients. “What Comp AI automates is much of the work companies traditionally have to do around that process. ” The software helps companies meet and maintain those security requirements, he continued, but doesn’t replace actual independent audit review.

The company was founded last January by Lewis Carhart (CEO), Claudio Fuentes (COO), and his brother, Mariano Fuentes (CTO). “It took us a couple of months of doing things by hand, and the whole time it meant taking our eyes off building the product. ” Alas, a startup idea was born. Human workers help onboard the AI, support controls, and maintain the agentic workflow. “As agents take on more consequential actions over time, we believe the level of safeguards and human approval should increase accordingly. ” The company also offers AI-powered penetration testing, “where the platform proactively tests codebases and infrastructures for vulnerabilities,” Carhart said.

“Imagine a company completes its SOC 2 audit and two weeks later deploys a new AI agent that can access customer data, change permissions across an internal system, or introduce a new vulnerability through code deployment,” he said.

What has been reported

“The audit didn’t become invalid; it simply wasn’t designed to tell you in real time what changed afterward. ” As companies adopt more AI, Mariano said, they also need to show what an agent accessed, what it tried to do, and whether it stayed within the boundaries given. Comp AI is tackling this by starting with permissions and accountability, he continued. Disrupt 2026: OpenAI, Anthropic, Replit, and more take over 6 industry stages. The round was led by Roo Capital and Grand Ventures.

Claudio and Mariano had been building startups together for nearly a decade, met Carhart a few years ago, and invited him to join LeapAI, a workflow platform they were building. Claudio was the CEO and co-founder, while Carhart served as head of growth and Mariano was a senior full-stack engineer. The startup ran for about two years, growing to more than a million users, but they eventually decided to shut it down after not finding a “sticky enough use case to warrant continued investment. ” That experience taught them a lot, though, they recalled.

For one, they learned how to build with LLMs and the importance of finding a specific use case for a product.

What happens next

This time, Carhart would take the lead as CEO because it was his idea, the trio said. “An agent might draft a policy, for example, but a person still reviews and approves it,” Carhart said. The team hopes this Series A capital will help with product expansion. This doesn’t affect our editorial independence. Dominic-Madori Davis Senior Reporter, Venture Dominic-Madori Davis is a senior venture capital and startup reporter at TechCrunch. You can contact or verify outreach from Dominic by emailing dominic. davis@techcrunch. com or via encrypted message at +1 646 831-7565 on Signal.

View Bio October 13 – 15 San Francisco Last day to book an exhibit table is September 18.