Comp AI Raises $34M Series A to Automate Security Compliance
Comp AI, a cybersecurity startup, announced a $34 million Series A led by Roo Capital and Grand Ventures. The company, founded by Lewis Carhart, Claudio Fuentes, and Mariano Fuentes, is developing an agentic platform that automates policy drafting, evidence collection, and continuous compliance mon…
By Felo News Desk · Published
Comp AI, a cybersecurity and compliance startup, announced that it has raised a $34 million Series A round on Thursday. The round was led by Roo Capital and Grand Ventures, bringing the company’s total funding to $37.5 million. The capital will help expand the platform’s product suite and accelerate its go‑to‑market strategy.
Founders’ Journey from LeapAI to Comp AI
The company was founded last January by Lewis Carhart, CEO; Claudio Fuentes, COO; and his brother, Mariano Fuentes, CTO. The trio had spent nearly a decade building startups together before meeting Carhart a few years earlier. They invited him to join LeapAI, a workflow platform they were developing. At LeapAI, Claudio served as CEO and co‑founder, Carhart led growth, and Mariano was a senior full‑stack engineer. The startup grew to over a million users in two years but ultimately shut down because it couldn’t identify a “sticky enough use case” to justify continued investment.
That experience taught the founders valuable lessons. They learned how to build with large language models (LLMs) and the importance of targeting a specific use case. They also discovered how tedious the SOC 2 compliance process can be, especially when scaling to larger enterprise clients. “It’s a very obscure process,” Claudio said. “It took us a couple of months of doing things by hand, and the whole time it meant taking our eyes off building the product.” This realization sparked the idea for Comp AI.
What Comp AI Is Building
Comp AI is developing an agentic platform that tackles repetitive security and compliance work. AI agents can draft company security policies, collect evidence for audits, and continuously monitor whether a company meets its compliance controls. The platform also offers AI‑powered penetration testing, proactively scanning codebases and infrastructure for vulnerabilities.
According to Carhart, the software helps companies meet and maintain security requirements but does not replace independent audit reviews or human oversight. Human workers onboard the AI, support controls, and maintain the agentic workflow. “An agent might draft a policy, for example, but a person still reviews and approves it,” Carhart said. “As agents take on more consequential actions over time, we believe the level of safeguards and human approval should increase accordingly.”
Why Automation Matters in the Agentic Era
Carhart explained that for many software companies, security and compliance are directly tied to revenue. A potential customer may request a SOC 2 report before closing a deal. Comp AI automates much of the work traditionally required for that process, freeing teams to focus on product development.
The founders also highlighted the growing need for continuous, autonomous security and compliance platforms as companies adopt more AI. “Imagine a company completes its SOC 2 audit and two weeks later deploys a new AI agent that can access customer data, change permissions across an internal system, or introduce a new vulnerability through code deployment,” Carhart said. “The audit didn’t become invalid; it simply wasn’t designed to tell you in real time what changed afterward.”
Mariano emphasized the importance of permissions and accountability. “We’re building toward a security layer that can monitor and validate those kinds of risk more continuously as these systems evolve,” he said. By tracking what an agent accessed, what it tried to do, and whether it stayed within defined boundaries, Comp AI aims to provide real‑time assurance that AI deployments remain compliant.
Funding Context and Market Landscape
The Series A round comes amid a wave of AI‑security and compliance startups such as Vanta and Drata. Investors are increasingly interested in solutions that address the unique risks posed by autonomous agents. Roo Capital and Grand Ventures saw the potential in Comp AI’s agentic approach and backed the company with $34 million.
With the new capital, Comp AI plans to expand its product line, hire additional talent, and deepen its customer base. The company’s goal is to become a leading provider of continuous compliance solutions that keep pace with the rapid evolution of AI in the enterprise.
Next Steps and Unresolved Questions
Comp AI will use the Series A funds to accelerate product development and broaden its market reach. While the company has already secured significant investment, it remains to be seen how quickly it can scale its platform and achieve widespread adoption among mid‑size and large enterprises. The founders are also navigating regulatory challenges and ensuring that their AI agents meet the stringent standards required for SOC 2 and other compliance frameworks.
As the agentic era unfolds, businesses will need to balance the benefits of AI automation with the necessity of human oversight and robust security controls. Comp AI’s approach offers a promising path forward, but the industry will continue to watch how effectively these solutions can adapt to evolving threats and compliance demands.
Key facts
- Comp AI raised $34 million Series A led by Roo Capital and Grand Ventures
- Founders bring experience from a previous startup that scaled to over a million users
- The platform uses AI agents to draft policies, collect audit evidence, and monitor compliance continuously
- Human oversight remains essential; AI drafts but humans approve critical actions
- The company also offers AI‑powered penetration testing and real‑time risk monitoring
- Funding will support product expansion and deeper market penetration
Why it matters
By automating repetitive compliance tasks, Comp AI helps companies reduce the time and cost associated with security audits, enabling faster product launches and stronger customer trust.
Frequently asked questions
What does Comp AI’s platform do?
It automates policy drafting, evidence collection for audits, continuous compliance monitoring, and offers AI‑powered penetration testing.
Will Comp AI replace human auditors?
No. The platform assists auditors but does not replace independent audit reviews or human approval of critical actions.
Who led the Series A funding?
The round was led by Roo Capital and Grand Ventures.
What industries can benefit from Comp AI?
Any organization that requires SOC 2 or similar compliance, especially those adopting AI agents in their operations.
Sources
- [1] techcrunch.com — originally reported as “Comp AI sets eyes on a continuously agentic future for security and compliance”
