Mandia’s Armadin Hits $255.5M Series B at >$2.5B for Agentic Offense
Kevin Mandia’s Armadin raised a $255.5 million Series B co-led by a16z and Accel at a valuation over $2.5 billion — about $445 million total funding roughly seven months after public launch — to scale autonomous offensive-security swarms for Fortune 500 and government customers.
Offense just got another nine-figure check — while the desk’s defender-access stories stay in their own lanes.
Armadin, the AI-native cybersecurity company led by Mandiant founder Kevin Mandia, announced a $255.5 million Series B co-led by Andreessen Horowitz (a16z) and Accel that values the company at over $2.5 billion. Per the company release on PR Newswire (October 1, 06:00 ET) and SecurityWeek, the round brings total funding to about $445 million roughly seven months after public launch. New money: Bain Capital Ventures and Redpoint. Returning: 8VC, Ballistic Ventures, GV (Google Ventures in the release), In-Q-Tel, Kleiner Perkins, and Menlo Ventures. SecurityWeek places the prior March 2026 raise at $189.9 million and notes an earlier late-2025 seed of $24 million.
What the money buys
Product frame, company-stated: autonomous swarms of specialized agents that chain individually low-severity findings into validated kill chains — from unauthenticated perimeter RCE through lateral movement to cloud compromise — for Fortune 500 and government customers already running agentic attack campaigns in production. Thesis: frontier models compress vulnerability-to-exploit time; periodic pen tests and isolated scanner scores cannot keep pace. Proceeds: scale the agentic platform, research and training, and go-to-market.
Investor lines in the release lean hard on the dual-use pitch — Accel’s Ping Li: “best defense is a great offense powered by AI”; a16z’s David George calls Armadin a defining security company of the AI era. Those are press-release quotes, not diligence.
Exercise metrics — company-reported
SecurityWeek recounts an August live exercise with TENEX.ai: 1,300 attacks, about 26,000 agents, roughly 17 million offensive actions against more than 25,000 services, producing 238 findings (98 “significant”) chained into 38 validated attack paths, under a safety-model control layer and without privileged credentials or source access — all company-described. Treat as demonstration narrative, not an independent audit.
Co-founders named by SecurityWeek: CTO Travis Lanham, chief offensive security officer Evan Peña, chief architect David Slater.
Limits
- Financing figures ($255.5M, >$2.5B valuation, ~$445M total, co-leads, investor list) rest on Armadin’s PR Newswire release, corroborated by SecurityWeek. Reuters transactional coverage was not retrieved this run.
- March 2026 $189.9M and seed $24M figures are from SecurityWeek’s recount of prior raises, not re-verified from those primaries here.
- Production F500/gov deployment and TENEX exercise metrics are company-reported.
- Dual-use offense narrative sits beside — and does not rehash — the desk’s shipped Argon defender-access coverage.