Novee Security

Novee Security is an Israeli startup founded in May 2025 by Ido Geffen (CEO), Gon Chalamish (Chief Product Officer), and Omer Ninburg (Chief Technology Officer), all veterans of Israel's elite cyber units. The company emerged from stealth in January 2026 after raising $51.5 million across seed and Series A rounds led by YL Ventures and Canaan Partners, with participation from Zeev Ventures. Novee operates from Tel Aviv and is focused on solving the fundamental challenge facing modern security teams: the gap between the speed and sophistication of machine-powered attackers and the slowness and cost of manual or generic-AI-driven security validation.

The core product is a continuous, automated penetration testing platform powered by proprietary AI models trained specifically on real-world attacker tradecraft and tactics. Unlike general-purpose large language models or traditional dynamic application security testing (DAST) tools, Novee's AI is engineered from the ground up to simulate how real attackers think, plan, and execute intrusions. The platform operates in black-box, gray-box, and white-box modes without requiring source code access or agent installation, enabling it to map live application environments and identify exposed endpoints continuously rather than on fixed testing cycles. This continuous approach directly addresses a critical market pain point: enterprises conduct annual or semi-annual penetration tests, leaving gaps of months or years where new vulnerabilities, misconfigurations, or logic flaws accumulate undetected.

Novee's technical differentiation centers on several capabilities that demonstrate superiority over both signature-based vulnerability scanners and general AI approaches. The platform specializes in finding complex, chained vulnerabilities including business logic flaws, SSRF attacks, and multi-step exploitation paths that standard tools consistently miss. Early performance data shows the proprietary AI achieving approximately 90% accuracy on relevant web exploitation challenges versus 65% for leading frontier models like Gemini 2.5 Pro or Claude 4 Sonnet, reflecting domain-specific training and optimization for offensive security work. Each finding is automatically validated with step-by-step exploitation reproduction to eliminate false positives and provide clear attack chains; remediation guidance is personalized to each organization's unique architecture and technology stack; and the platform automatically re-tests after fixes to confirm resilience, creating a feedback loop that transforms pentesting from episodic activity to continuous validation.

The company's early market traction has been substantial given its recent launch. Novee has already deployed its platform with customers including K Health, HiBob, Reco, Cresta, Telit, and JB Poindexter across technology and fintech sectors. The rapid adoption combined with $51.5 million raised within just eight months of founding reflects strong investor confidence in the category thesis: as attackers increasingly deploy AI to accelerate reconnaissance, vulnerability discovery, and exploitation, defenders must move from quarterly or annual testing to machine-speed, continuous validation. Novee is positioned at the center of that shift.

Dual-use relevance and strategic value are credible. The core penetration testing and vulnerability discovery mission serves commercial enterprises exposed to common web-based attacks, but it equally applies to government, defense, critical infrastructure, and high-security environments where application exploitation is a key attack vector. Organizations with sensitive missions—whether in finance, healthcare, government, or critical systems—depend on the same continuous, AI-driven offense simulation that Novee is developing for the commercial market. The platform's ability to work in black-box mode without agent installation or source-code access also maps well to scenarios where security teams must validate third-party applications or systems where full transparency is not available. The founding team's elite cyber background, rapid funding, and early traction position Novee as likely to influence Israeli and global standards for how organizations approach application security validation at scale.