Samsung Next Invests In Mitiga, Brings Total Funding to $45M

Financing Will Help Support Increasing Customer Demand While Continuing to Transform Incident Response for Cloud and SaaS Environments.

NEW YORK, March 14, 2023 – Mitiga, the cloud and SaaS incident response leader, today announced the completion of a Series A Round bringing total funding to $45 million led by ClearSky Security, with participation from Samsung Next and existing investors Blackstone, Atlantic Bridge and DNX. This news comes on the heels of Mandiant’s former President/COO, John Watters, joining Mitiga as an independent board member.

“When we founded Mitiga, we had one goal in mind—to help organizations accelerate their responses to the rising tide of cloud and SaaS attacks,” stated Tal Mozes, co-founder and CEO, Mitiga. “We knew we could do it better than traditional incident response (IR) solutions because they’re reactive by nature, and tremendously time-consuming. Our proactive and automated approach enables organizations that experience cloud and SaaS breaches to respond immediately and recover faster than any other solution on the market. We are thrilled to include Samsung Next as one of our investors and look forward to our next growth phase in 2023 and beyond.”

Mitiga will use the investment to accelerate its growth, helping to meet the high demand for cloud incident response services from the overwhelming number of organizations that now rely on cloud and SaaS environments—because today's harsh reality is that cloud attacks are inevitable. Mitiga’s modern approach offers cloud-driven companies a new level of cyber and organizational resilience. By enabling ongoing readiness and compressing the investigation time from weeks or months to hours, Migita's solution reduces incident-related damage and gets customers back to business fast.

“As more and more companies are advancing their cloud journeys, they're beginning to understand that growing their cyber resiliency is a vital part of that transformation” stated Tal Achituv, CTO, Samsung Next. “Mitiga’s modern incident response solution combined with the team’s deep cloud forensics expertise enables companies to prepare for cloud breaches before they happen—so they get back to business immediately. It's an important capability and we're happy to be supporting Mitiga to enable it.”

LAST UPDATED:

October 17, 2023

Don't miss these stories:

From Rogue OAuth App to Cloud Infrastructure Takeover

How a rogue OAuth app led to a full AWS environment takeover. And the key steps security leaders can take to prevent similar cloud breaches.

CORSLeak: Abusing IAP for Stealthy Data Exfiltration

When people talk about “highly restricted” cloud environments, they usually mean environments with no public IPs, no outbound internet, and strict VPC Service Controls locking everything down.

Defending SaaS & Cloud Workflows: Supply Chain Security Insights with Idan Cohen

From GitHub Actions to SaaS platforms, supply chain threats are growing. Hear Mitiga’s Idan Cohen and Field CISO Brian Contos explore real-world compromises, detection tips, and strategies to strengthen your cloud security.

Inside Mitiga’s Forensic Data Lake: Built for Real-World Cloud Investigations

Most security tools weren’t designed for the scale or complexity of cloud investigations. Mitiga’s Forensic Data Lake was.

Measurements That Matter: What 80% MITRE Cloud ATT&CK Coverage Looks Like

Security vendors often promote “100% MITRE ATT&CK coverage.” The reality is most of those claims reflect endpoint-centric testing, not the attack surfaces organizations rely on most today: Cloud, SaaS, AI, and Identity.

How Threat Actors Used Salesforce Data Loader for Covert API Exfiltration

In recent weeks, a sophisticated threat group has targeted companies using Salesforce’s SaaS platform with a campaign focused on abusing legitimate tools for illicit data theft. Mitiga’s Threat Hunting & Incident Response team, part of Mitiga Labs, investigated one such case and discovered that a compromised Salesforce account was used in conjunction with a “Salesforce Data Loader” application, a legitimate bulk data tool, to facilitate large-scale data exfiltration of sensitive customer data.