Just two years ago, venture capital investment in cybersecurity was in full swing, with more than $23 billion pouring into the field. In 2023, only about one-third of that amount will be raised in online startups, with total venture capital investment falling to its lowest point since 2018. Security companies raised $8.2 billion across 692 venture capital deals last year, compared with $16.3 billion across 941 deals in 2022, according to Crunchbase data.
Fourth-quarter data exacerbated the decline, with startups locking in $1.6 billion in funding, the lowest quarter since the third quarter of 2018, when dot-com companies raised just $1.3 billion. Only three web startups have raised more than $100 million:
Managed detection and response startup BlueVoyant has completed more than $140 million in Series E funding led by Liberty Strategic Capital.
Island, a Dallas-based cybersecurity startup, announced it has received $100 million in Series C funding led by Prysm Capital, valuing it at $1.5 billion.
San Mateo, California-based Verkada has completed a $100 million round of financing led by Alkeon Capital.
Ofer Schreiber, senior partner and head of the Israel office at venture capital firm YLVentures, said: "What we are seeing in cybersecurity funding in 2023 is the aftermath of the extraordinary surge in 2021, with inflated valuations, larger-than-expected funding rounds, and investor wariness amid market conditions."
new reality
In fact, most investors agree that poor decision-making and misjudgment from just a few years ago still plague an industry charged with protecting people from bad actors across networks, clouds and devices.
A few years ago, capital was cheap and it was easy for startups and venture capital firms in most industries to raise capital.
Schreiber added that startups that have completed funding in 2021 will have no choice but to raise follow-on rounds this year or try to sell themselves as their runway is coming to an end. "Still, startups have woken up to the fact that they now need to lay the foundation more responsibly given investor preferences and market conditions," he said. "Investors are still interested in funding breakthrough cybersecurity startups, especially in the early stages, and the data supports this trend."
still meaningful
Few in the industry doubt investors will abandon the industry. Cybersecurity remains a top concern for nearly every company and government, and attack vectors and tensions are only increasing.
Gili Raanan, founder and partner at Cyberstarts, said: "The widespread use of generative AI technology, coupled with recent geopolitical conflicts such as the Russia-Ukraine war and the Israel-Gaza war, has led to an escalation in the frequency and sophistication of cyber attacks. The economic crisis has further contributed to this situation, as hackers often take advantage of market downturns to carry out malicious attacks. These challenges are likely to strengthen cyber spending."
"Despite macroeconomic challenges, the need for digital transformation in the cyber sector remains," said Nadav Zafrir, co-founder and managing partner of Team8, an Israeli incubator and investment firm specializing in the security sector. "As global conflicts continue and intensify, the threat of cyberattacks remains high, so the need to strengthen cybersecurity measures through technology investments remains critical."
Umesh Padval, a venture capital partner at Thomvest Ventures who specializes in networking, cloud computing and artificial intelligence infrastructure, also believes that new attack vectors need to be constantly blocked.
"Artificial intelligence will make it worse, war will make it worse. Areas like DevOpsSec (incorporating security into software development) and cloud security will grow. There have been some bad behaviors over the past few years. This level of investment is appropriate for the region," Padval said.