Comp AI sets eyes on a continuously agentic future for security and compliance — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Comp AI raised a $34 million Series A led by Roo Capital and Grand Ventures, bringing total funding to $37.5 million, with plans to expand its agentic compliance product.
- Lewis Carhart (CEO), Claudio Fuentes (COO), and Mariano Fuentes (CTO) founded Comp AI last January after shutting down their previous startup LeapAI, which grew to over a million users but lacked a 'sticky enough use case.'
- The platform uses AI agents to draft security policies, collect audit evidence, and run AI-powered penetration testing against codebases and infrastructure for vulnerabilities.
- The founders stressed that agents do not replace independent auditors or human reviewers — workers still onboard the AI, support controls, and approve agent-drafted policies, with safeguards scaling as agents take more consequential actions.
- Carhart argued static audits are insufficient in the agentic era, noting a company could complete a SOC 2 audit and two weeks later deploy an AI agent that accesses customer data or changes permissions — an exposure the audit wasn't designed to catch in real time.
Why it matters: Comp AI enters a crowded field alongside Vanta and Drata but pitches a current gap: continuous, real-time monitoring as companies deploy AI agents that can autonomously access data and change permissions. For software companies where SOC 2 reports are tied to closing deals, the founders argue the old point-in-time audit model leaves a window where new agent deployments go unmonitored until the next review cycle.
Ask SkimNews
