We’re living in a time of explosive technological acceleration. The pace at which artificial intelligence, data, and cloud-native technologies are evolving is nothing short of transformational. But as the possibilities expand, so too do the risks. Every leap forward in innovation brings new threats.
That’s why cybersecurity is no longer just a priority—it’s foundational.
At Microsoft for Startups, we work to partner with startups that push the boundaries of what’s possible in security, all while remaining committed to trust, resilience, and responsibility. We rely on these companies to help our customers rapidly unlock the full potential of AI—with safety and security at the core.
We’re proud to provide the cloud foundation, go-to-market muscle, and enterprise pathways that help these startups scale faster and more securely as they meet the needs of our customers. From endpoints to identities to AI, our Pegasus startups are right there with us, solving the hardest problems from supply chain integrity to AI model protection and secure DevSecOps.
RSA Conference 2025 is where this all comes to life. It’s the gathering place for the global cybersecurity community. This year, Microsoft for Startups is proud to be alongside a curated group of Pegasus Program startups who are redefining what’s possible in security. These founders are solving some of the most complex challenges in the industry from securing AI pipelines to automating compliance and modernizing identity.
We’ll be there on the ground in San Francisco, California, at the Moscone Center, April 28 to May 1, 2025, with these innovators. Whether you’re looking for your next strategic partner, exploring investment opportunities, or simply want to see what the future of cybersecurity looks like, we’d love to introduce you. Come meet the startups building the secure future of AI and more.
Meet the Pegasus startups at RSA 2025
Cerby is an identity security automation platform purpose-built to secure disconnected applications—those beyond the reach of traditional identity providers. By integrating seamlessly with identity providers like Okta and Microsoft Entra, Cerby enables single sign-on (SSO), multifactor authentication (MFA), and lifecycle management for any application—no APIs or identity standards required. IT and Security teams rely on Cerby to centralize access controls, automate repetitive security tasks, and extend governance across their entire application ecosystem. The result: reduced risk, lower operational costs, and stronger compliance.
Cranium AI focuses on AI-driven cybersecurity solutions designed to detect and mitigate threats in real-time. Their advanced machine learning algorithms analyze vast amounts of data to identify patterns and anomalies that may indicate a cyber attack. Cranium AI’s platform provides organizations with actionable insights and automated responses to neutralize threats before they can cause significant damage. Their technology is particularly effective in protecting against sophisticated attacks that traditional security measures may miss.
Cyera offers comprehensive data security solutions that protect sensitive information across various platforms. Their platform provides real-time monitoring and automated compliance checks to ensure that data is secure and meets regulatory requirements. Cyera’s solutions help organizations manage data security risks by providing visibility into data usage and access patterns, enabling them to take proactive measures to protect their information.
Devicie provides automated device management and security solutions that help organizations ensure compliance and reduce risks. Their platform automates the deployment, configuration, and management of devices, ensuring that they are secure and up-to-date with the latest security patches. Devicie’s solutions help organizations streamline their device management processes, reduce the risk of security breaches, and improve overall operational efficiency.
Endor Labs delivers advanced cyberthreat detection and response capabilities to safeguard the software supply chain. Their platform uses machine learning and behavioral analysis to identify and respond to cyberthreats in real-time. Endor Labs’ solutions provide organizations with comprehensive visibility into their security posture, enabling them to detect and respond to threats quickly and effectively.
HiddenLayer is a leading provider of AI security. Its security platform helps enterprises safeguard the machine learning models behind their most important products. HiddenLayer offers turnkey security for AI that does not add unnecessary complexity to models and does not require access to raw data and algorithms. Founded by a team with deep roots in security and ML, HiddenLayer aims to protect enterprises’ AI from inference, bypass, extraction attacks, and model theft. The company is backed by a group of strategic investors, including M12, Microsoft’s Venture Fund, Moore Strategic Ventures, Booz Allen Ventures, IBM Ventures, and Capital One Ventures.
RegScale simplifies regulatory compliance with automated tools and real-time monitoring. Their platform provides organizations with the ability to manage compliance requirements across various regulations and standards. RegScale’s solutions help organizations reduce the complexity and cost of compliance by automating compliance checks and providing real-time visibility into their compliance status.
Seemplicity Security tackles any remediation backlog, streamlining security operations by automating vulnerability management and incident response. Their platform provides organizations with a centralized view of their security posture, enabling them to prioritize and address vulnerabilities quickly and effectively. Seemplicity Security’s solutions help organizations improve their security operations and reduce the risk of security breaches.
SGNL’s modern Privileged Identity Management system eliminates standing access to critical systems, granting and revoking contextual access in real-time, drastically reducing the blast radius of a possible breach. Regardless of how an identity breach infiltrates your workforce, SGNL brings in context-based intelligence to achieve Zero Standing Privilege across cloud applications, as well as on-premises enterprise systems.
Start Left Security links security, quality, and delivery risks to provide DevSecOps visibility and velocity. Their platform provides developers with tools and guidance to incorporate security measures into their code from the beginning. Start Left Security’s solutions help organizations reduce the risk of security vulnerabilities in their software by ensuring that security is a priority throughout the development process.
For more on each of these startups, make sure to follow Kevin Magee, Global Director of Cybersecurity Startups at Microsoft for Startups, as he provides deeper insights into these cybersecurity startups at RSAC and more.
And if you want to meet and engage additional startups, investors, and Microsoft folks at the premier Microsoft developer event, please consider joining us for Microsoft Build 2025, taking place May 19 to 22, 2025, in Seattle, Washington, and online.
Learn more about Microsoft for Startups today
Categories: AI, Events, Featured
