Imagine the scene: A developer at a large financial institution merged a routine code update. Nothing alarming yet, just a minor change that, on its own, meant little. But Terra Security\u2019s AI agents were watching. AI agents flagged the change, verified a potential vulnerability, and then did something a human penetration tester probably wouldn\u2019t have done. They kept looking. Eventually, they found two more vulnerabilities nearby, each individually insignificant. But they spotted a pattern and connected all three together.<\/p>\n\n\n\n
\u201c1+1+1 = 1,000,\u201d said Shahar Peled, co-founder and CEO of Terra Security. The result was a Remote Code Execution (RCE), a cybersecurity vulnerability that allows an attacker to run malicious code on a target system or server from a remote location. It is considered one of the most critical vulnerability classifications of its type.<\/p>\n\n\n\n
The customer found out from their vendor, not from an adversary.<\/p>\n\n\n\n
Founded in 2024, the Tel Aviv and New York-based startup has raised $38 million across a rapid Seed and Series A, and counts Fortune 100 enterprises among its customers. Its core product is an agentic offensive security platform where swarms of AI agents are trained to think and act like \u201cethical hackers\u201d, running continuously across a company\u2019s attack surface.<\/p>\n\n\n\n
The traditional model of penetration testing (hiring an external team once or twice a year to probe for weaknesses) was never designed to catch what Terra caught in that unnamed financial institution. \u201cUntil 2025, it happened on an annual basis mostly,\u201d Peled explained. \u201cOnce a year, you hire someone externally to work for a week or two weeks… The reason you couldn\u2019t do it continuously is that you couldn\u2019t really train software to hard-code how adversaries think and act.\u201d<\/p>\n\n\n\n