Skip to content

BULWARK

We back the teams building the defense.

A private partnership focused only on cybersecurity. We help founders ship, hire, and sell—and we invest when conviction is already there.

Security companies are built before the market is ready.

Boards fund the controls that keep them out of the headlines. Attackers raise and hire like startups. The capital that understands that pace is still rare.

204daysAverage time a serious intrusion can remain undetected.

Selected positions

Full list →
  • 2016Vectra AI
  • 2017Aqua Security
  • 2018Semperis
  • 2020Wiz
  • 2021Cyera

Why security is a different market

  • Boards fund the controls that keep them out of the headlines—even when other budgets shrink.
  • Every platform shift creates new attack surface before it creates a category winner.
  • Attackers hire and raise capital like startups. Defenders need partners who understand that pace.

Where most capital falls short

  • Generalist investors underwrite slides. Security buyers underwrite trust from people who have lived the incident.
  • The first check is common. The second—when enterprise sales and hiring get hard—is where companies are made or lost.
  • Speed without judgment burns a founder’s year. Judgment without speed burns their runway.

How we work

Clear decisions, quickly

A partner answers within two weeks—yes or no, with a reason. We do not leave founders in a slow maybe.

Help where it is hardest

Distribution and hiring end more security companies than product gaps. That is where we spend our time.

Capital follows conviction

We invest when we already understand the buyer and the wedge—not to learn the category on your capital.

Companies

A selection of positions since 2016. Full list on Companies.

View all companies
  • 2016Vectra AIDetects attackers already inside the network.
  • 2017Aqua SecuritySecures cloud-native applications from pipeline to runtime.
  • 2018SemperisProtects and recovers Active Directory under attack.
  • 2020WizAgentless visibility into cloud risk—fast enough to use daily.
  • 2021CyeraDiscovers sensitive data before policy can be written.
  • 2023Oasis SecurityGoverns machine identities that now outnumber humans.

Building something real in security? Write to us.

Lead with the problem, your wedge, and why your team. We read every note.

Contact