Hirundo

Cybersecurity Dual-Use Technology Priority Signal Founded 2023

Last updated: Jul 31, 2026

Hirundo develops a machine-unlearning platform that evaluates trained AI models and selectively removes unwanted data traces or behaviors without requiring full retraining. Its product targets model builders and enterprises that need measurable remediation for privacy, safety, security, and data-quality failures.

Visit Website

Company Overview

Hirundo is building infrastructure for machine unlearning: the post-training modification of a model so that specified data, concepts, or behaviors have materially less influence, while retained capabilities are tested for regression. Its public product positioning spans two related workflows. LLM unlearning addresses behaviors such as jailbreak susceptibility, bias, hallucination tendencies, and memorized personally identifiable information; data-quality tooling addresses mislabels, outliers, and other defects in vision, radar, LiDAR, time-series, speech-to-text, and NLP datasets and models. The company describes a workflow that detects or evaluates a risk, targets the relevant model parameters or representations, applies a modular edit, and measures both forget performance and retained utility.

The customer problem is credible but technically demanding. Model teams currently choose among guardrails, filtering, fine-tuning, or full retraining when a deployed model contains a privacy problem, an unsafe behavior, poisoned data, or a quality defect. Hirundo’s proposed advantage is shortening that remediation loop from a large retraining project to an evaluated edit that can run on standard GPU infrastructure. The company advertises up to 85% fewer successful prompt injections, up to 70% lower bias on stated benchmarks, and complete removal of fine-tuned PII in particular evaluations; these are company-reported results and should be independently reproduced across architectures, datasets, attack suites, and operating conditions before being treated as general performance guarantees. Its public materials also describe SaaS, VPC, Kubernetes, S3-compatible, and air-gapped deployment options, which are relevant to regulated and security-sensitive buyers.

Commercially, Hirundo sits at the intersection of AI security, model governance, data quality, and post-training infrastructure. Its stated buyers include AI and product teams, security and privacy teams, and frontier-model or AI research labs. Public evidence includes a reported $8 million seed round in June 2025 led by Maverick Ventures Israel, public testimonials from Intel Ignite and Taranis, model and dataset artifacts on Hugging Face, and references to work on open-weight models including Liquid AI and Gemma. LinkedIn lists the company as a privately held Tel Aviv software company founded in 2023 with an 11–50 employee range. These signals indicate meaningful technical and ecosystem activity, but they do not establish recurring revenue, production scale, customer concentration, or the durability of the claimed benchmark improvements.

The competitive field includes model-monitoring and AI-security vendors that detect risks, guardrail and firewall products that block problematic outputs, internal MLOps and evaluation teams, and the continuing substitute of fine-tuning or retraining. Hirundo’s differentiation depends on turning detection into a model-level remediation artifact that is auditable, reversible, and cheap enough to repeat. The defensibility question is whether its influence analysis and weight-editing methods retain precision on larger and changing model families, including cases where knowledge is distributed or behavior is entangled with useful capabilities. A strong enterprise position would require reproducible evaluations, provenance and rollback controls, secure deployment, and evidence that an edited checkpoint remains safe under adaptive red-teaming rather than only on a fixed benchmark.

The defense and national-security relevance is substantive but should be framed as an enabling control, not as evidence of defense contracts. Model unlearning could help sanitize sensitive or export-controlled artifacts before a model is transferred, reduce exploitable behaviors in mission-support systems, remediate data contamination, and support lifecycle governance in disconnected or air-gapped environments. The same capability could also be misused to conceal provenance, remove audit-relevant evidence, or create a false sense that a model is safe because one measured behavior improved. Strategic diligence should therefore focus on cryptographic provenance, change logs, independent validation, authorization boundaries, and the difference between reducing model behavior and proving that information is mathematically or operationally unrecoverable.

Dual-Use Assessment

Military & Commercial Applications

Hirundo's model-level remediation technology has credible commercial and security applicability. It can help organizations reduce memorized sensitive data, harden open-weight models against prompt-injection or other unsafe behaviors, and prepare models for controlled sharing or deployment in regulated and air-gapped environments. The defense case is an enabling governance and hardening capability rather than a demonstrated weapons system or confirmed government program. Auditability is essential because selective editing could also obscure provenance or create unjustified confidence in a model's safety.

Strategic Fit Assessment

Research priority signal

Priority signal means this entry may be worth researching within the Claw & Talon thesis. It does not mean investable, suitable, endorsed, available, or likely to produce returns.

Hirundo addresses a narrow but increasingly important control point in the AI lifecycle: remediation after a model has already been trained. The reported seed financing, active public model artifacts, research-oriented founding team, and enterprise deployment claims support meaningful technical momentum. The priority signal is strategic rather than an investment recommendation. The central diligence tests are independent replication of reported results, performance on larger and changing architectures, evidence of paid production adoption, protection of proprietary methods, and whether model vendors or internal platform teams can reproduce the workflow as a feature.

Strategic Value to U.S.-Israel Alliance

Hirundo could provide an allied AI supply-chain control for inspecting, hardening, and selectively remediating models before deployment or transfer. Its value is highest where retraining is slow, compute-constrained, operationally disruptive, or incompatible with air-gapped environments. Strategic value remains conditional on proving that edits are reversible, provenance-preserving, resistant to adaptive attacks, and useful beyond the company's chosen benchmarks.

Key Technologies

  • Machine-unlearning methods for targeted data and behavior removal
  • Data-influence analysis and parameter-level weight editing
  • Behavior vectors and modular LoRA-style remediation adapters
  • Model evaluation, red-team testing, and forget-versus-retain benchmarks
  • Data-quality diagnosis for mislabeled, anomalous, and under-sampled training data
  • Secure API and platform deployment across SaaS, VPC, Kubernetes, and air-gapped environments

Use Cases & Applications

  • Removing memorized PII, copyrighted material, leaked records, or poisoned examples from trained models
  • Reducing jailbreak and prompt-injection susceptibility in open-weight or enterprise LLMs
  • Correcting measured bias, hallucination tendencies, or other localized model behaviors
  • Finding mislabeled and anomalous examples that limit computer-vision, radar, LiDAR, speech, or NLP accuracy
  • Remediating a model before controlled sharing, export, or deployment in a disconnected environment
  • Producing repeatable risk, utility, rollback, and provenance evidence for AI governance teams
  • Hardening mission-support or other high-consequence models after red-team findings without a full retrain

Sources and verification

This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work.

This record lists 7 public references used for company identity, status, positioning, or material-claim review.

Public sources

The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.

  • hirundo.io Public source used for profile verification.
  • hirundo.io Public source used for profile verification.
  • hirundo.io Public source used for profile verification.
  • hirundo.io Public source used for profile verification.
  • LinkedIn company page Public source used for profile verification.
  • huggingface.co Public source used for profile verification.
  • Company announcement Public source used for profile verification.
  • Profile update timestamp Last updated in the Claw & Talon database on Jul 31, 2026.

Investor Lens

What this entry is

Private startup

Why it may matter

Hirundo may matter as a Cybersecurity entry with not currently an investable standalone company for Israeli technology research.

How an independent investor should read this

Not currently an investable standalone company. Read this profile as a starting point for independent verification, not as a recommendation or suitability assessment.

Evidence to verify

  • Verify current status
  • Verify traction
  • Verify cap table/funding
  • Verify technical claims
  • Verify regulatory/export-control issues
  • Verify customer concentration

Main investor questions

  • Is the company currently active, independently financeable, and raising or not raising on terms you can verify?
  • What customer, revenue, product, and technical evidence supports the company story?
  • What valuation, cap table, rights, and follow-on assumptions would govern any private exposure?
  • Does the dual-use claim map to actual commercial and government/defense/resilience buyer evidence?
  • What evidence would change the thesis or show that the profile is stale?

What not to infer

  • Inclusion does not imply endorsement.
  • Inclusion does not imply allocation availability or current fundraising.
  • Scores do not indicate investment suitability or expected returns.
  • Strategic importance does not automatically imply venture return potential.

Diligence questions

  • What evidence verifies Hirundo's current customer traction, deployment status, and revenue concentration?
  • Which technical claims are independently demonstrable today, and which remain roadmap or pilot-stage assertions?
  • Where does the product create real defense, intelligence, critical-infrastructure, or emergency-response value beyond ordinary commercial adoption?
  • How does the platform integrate into existing SOC, cloud, identity, or compliance workflows without adding operational burden?
  • What would disconfirm the priority signal: weak customer references, thin technical differentiation, poor capital efficiency, or limited allied-market access?

Related sector

See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.

Need a diligence readout?

Use the profile and related checklists as a starting point. If the decision needs more context, request a company screen, founder-call prep, diligence memo, or sector readout.