Comp AI Raises $34M Series A to Put an Agent on the Compliance Backlog
Comp AI announced a $34 million Series A on September 17, led by Roo Capital and Grand Ventures, bringing total funding to $37.5 million. Valuation was not disclosed. Founders are Lewis Carhart as CEO, Claudio Fuentes as COO, and Mariano Fuentes as CTO. The company says it has grown ARR 15x year over year since founding in January 2025 and now serves more than 1,000 customers, which are company-reported figures with no independent confirmation. Coverage at https://techcrunch.com/2026/09/17/comp-ai-sets-eyes-on-a-continiously-agentic-future-for-security-and-complaince/
The product is an agent platform for security and compliance work. It drafts security policies, collects audit evidence, and continuously monitors compliance controls, and the new money is aimed at pushing past compliance automation into actual security: real-time monitoring, control validation, and AI-driven penetration testing that proactively probes codebases and infrastructure for vulnerabilities.
Compliance is a genuinely good first home for agents and it is worth saying why, because it is not the obvious reason. It is not that the work is easy. It is that the work is enormous, tedious, evidence-shaped, and already has a human sign-off step baked into the process by regulation. Somebody has to screenshot the access control settings, attach them to a control, and file it. Nobody wants that job, the output is verifiable, and an auditor already exists to catch errors. That is about as friendly as an autonomy problem gets.
Comp AI is explicit about keeping the human in the loop: an agent might draft a policy, but a person reviews and approves it. Read that alongside the pen testing ambition, though, and the two halves of this company are on different footing. Drafting a policy a human approves is low-stakes and easily checked. An agent autonomously probing your production infrastructure for vulnerabilities is a materially different risk surface, and "a person still approves" is doing much heavier lifting on that side of the product than on the paperwork side.
Worth noting for the funding beat: this is the second agent round in a week to land in the boring-but-mandatory enterprise middle, where the buyer has a budget line, a deadline, and an auditor. That is where this money is going right now, not to consumer agents.
← Back to all articles
The product is an agent platform for security and compliance work. It drafts security policies, collects audit evidence, and continuously monitors compliance controls, and the new money is aimed at pushing past compliance automation into actual security: real-time monitoring, control validation, and AI-driven penetration testing that proactively probes codebases and infrastructure for vulnerabilities.
Compliance is a genuinely good first home for agents and it is worth saying why, because it is not the obvious reason. It is not that the work is easy. It is that the work is enormous, tedious, evidence-shaped, and already has a human sign-off step baked into the process by regulation. Somebody has to screenshot the access control settings, attach them to a control, and file it. Nobody wants that job, the output is verifiable, and an auditor already exists to catch errors. That is about as friendly as an autonomy problem gets.
Comp AI is explicit about keeping the human in the loop: an agent might draft a policy, but a person reviews and approves it. Read that alongside the pen testing ambition, though, and the two halves of this company are on different footing. Drafting a policy a human approves is low-stakes and easily checked. An agent autonomously probing your production infrastructure for vulnerabilities is a materially different risk surface, and "a person still approves" is doing much heavier lifting on that side of the product than on the paperwork side.
Worth noting for the funding beat: this is the second agent round in a week to land in the boring-but-mandatory enterprise middle, where the buyer has a budget line, a deadline, and an auditor. That is where this money is going right now, not to consumer agents.
Comments