Fig Security Emerges from Stealth with $38 Million to Track Security Stack Drift

Fig Security has launched from stealth with $38 million in combined seed and Series A funding led by Team8 and Ten Eleven Ventures, building a platform that continuously traces data flows across an organization's security stack and alerts teams when infrastructure changes break detection and response capabilities.

The Problem

Enterprise security stacks typically include dozens of tools — SIEMs, EDR platforms, firewalls, identity providers, cloud security posture managers — that depend on data flowing correctly between them. When an infrastructure change occurs — a cloud migration, a vendor switch, a configuration update — it can silently break the data pipelines that security tools rely on, creating blind spots where threats go undetected. Fig Security calls this "security stack drift": the gradual degradation of security capabilities as the underlying infrastructure changes faster than the security team can track.

How It Works

Fig's platform maps the data flows between every component in the security stack, creating a real-time dependency graph. When any change occurs — a new cloud account is provisioned, a log source is modified, a detection rule is updated — Fig automatically evaluates the downstream impact on detection and response capabilities. If a change breaks a critical data flow (for example, if a cloud migration causes firewall logs to stop flowing to the SIEM), Fig alerts the security team with the specific impact: which detection rules are now blind, which response playbooks will fail, and what steps are needed to restore coverage.

Team and Traction

Fig's founding team includes CEO Gal Shafir, who led Google Cloud Security's global architecture and previously led Siemplify (acquired by Google for $500 million). All co-founders are veterans of Israel's Unit 8200 intelligence unit. The company reports that it is already deployed at Fortune 100 companies, having built customer relationships during an extended stealth period. The $38 million funding will be used to expand the engineering team and invest in automated remediation capabilities that can fix broken data flows without manual intervention.