Comp AI, a startup focused on automating cybersecurity and compliance, today revealed it secured $34 million in Series A funding. The investment round was led by Roo Capital and Grand Ventures, bringing its total raised to $37.5 million to date. The startup was founded in January of this year by Lewis Carhart (CEO), and brothers Claudio (COO) and Mariano Fuentes (CTO). Claudio and Mariano had previously launched startups together for nearly ten years and had brought Carhart on board while building a separate AI workflow platform called LeapAI. That older platform scaled to over a million users but was shut down after investors determined the use cases weren’t sticky enough. Comp AI emerges from those lessons.
What Comp AI Does
The Company is building an “agentic” platform designed to handle time-consuming compliance and security tasks using AI agents. These agents can draft security policies, collect evidence for audits, and continuously monitor a company’s compliance posture. While the platform automates much of what’s traditionally manual in compliance workflows—for example, working toward SOC 2 standards—it is not intended to replace auditors or human oversight. Humans still onboard the agents, review the agents’ outputs, and play a central role in approving and maintaining the controls that agents execute.
Why It Matters Now
The timing for Comp AI’s entry into the market comes alongside rapid adoption of AI in many businesses, which creates new risks and regulatory demand. One issue with audits like SOC 2 is that they offer a snapshot in time: once an audit is complete, any changes—new agents, changed permissions, added access—could introduce vulnerabilities immediately after. Comp AI aims to overlap with that gap by continuously monitoring the evolving security posture of businesses and helping them stay compliant in real time.
Additionally, the startup is offering AI-powered penetration testing, probing codebases and infrastructure proactively to identify vulnerabilities before they’re exploited. The founders believe this move toward continuous oversight and automation in compliance isn’t just an efficiency play—it’s also a revenue risk management strategy for companies whose customers demand proof of compliance before signing contracts.
Carhart and the Fuentes brothers acknowledge that as AI agents gain more power and take on more consequential actions, greater human involvement and stronger safeguards will be required. The platform is designed so that agent capabilities evolve over time, but with human review and escalating oversight embedded into those workflows.
Over the next phase, the fresh capital will allow Comp AI to expand its product capabilities and scale operations. Thus far, it is positioning itself alongside other compliance-focused startups such as Vanta and Drata—but with a distinctive focus on “continuous agentic” security, not just point-in-time compliance checks. The vision is a system that not only maintains policies and evidence but also adapts as an organization’s internal agents, permissions, and systems change.
What this means in practice is that security and compliance become less of a backward-looking exercise and more of an always-on assurance. In spaces where requirements like SOC 2 are tied directly to revenue, Comp AI is aiming to shift the paradigm from episodic to persistent verification—arguably a necessary evolution if companies are to trust, scale, and use internal AI agents safely.
