Need smarter insights in your inbox? Join our weekly newsletters to get solely what issues to enterprise AI, information, and safety leaders. Subscribe Now
When a tech vendor desires to promote into a big enterprise — or when that enterprise desires to purchase software program from a tech vendor or AI mannequin supplier — all sides could also be required by the opposite to show they’ll deal with shared information responsibly within the type of obligatory surveys and questionnaires.
Laws equivalent to GDPR, the soon-to-be effected EU AI Act and a patchwork of U.S. state legal guidelines make these proofs extra advanced every year.
As a consequence, a tech vendor making an attempt to promote to a big enterprise will often be requested to finish safety questionnaires that may stall offers for weeks and value six figures in employees time.
San-Francisco-based SecurityPal was based in March 2020 by CEO Pukar Hamal to deal with all that paperwork largely robotically on behalf of the seller, utilizing the seller’s distinctive product data and inside information.
The AI Impression Sequence Returns to San Francisco – August 5
The following section of AI is right here – are you prepared? Be a part of leaders from Block, GSK, and SAP for an unique take a look at how autonomous brokers are reshaping enterprise workflows – from real-time decision-making to end-to-end automation.
Safe your spot now – house is proscribed: https://bit.ly/3GuuPLF
SecurityPal combines an AI engine with a 240-person analyst group in Kathmandu, Nepal, to draft, confirm and package deal the solutions distributors and patrons want.
“It’s like Palantir for safety evaluations — professional people and AI working collectively to speed up enterprise safety assessments,” Hamal mentioned on a latest unique video name with VentureBeat.
Hamal labels the class “safety assurance”: a workflow that sits between conventional compliance software program and the sales-ops stack.
The corporate simply introduced a fleet of updates in its Q2 weblog put up this week, together with smarter fallback responses from its AI Copilot, a totally brandable White Label Package deal for Belief Facilities, and a brand new Customized HTML Block for embedding wealthy media in assurance profile, all geared towards making its AI interactions extra skilled and informative, even when information is proscribed.
The agency has additionally added Salesforce Auto-Approval, which allows real-time, criteria-based approvals utilizing dwell Salesforce information; International Search throughout the total SecurityPal platform; and shortly, a Customized Duties function that ought to let clients handle workflows with personalised fields and kinds.
“We’re on a mission to speed up GDP development by fixing advanced safety assurance challenges for patrons and sellers,” Hamal added, additional providing that, “my thesis after we raised cash was that there can be $10 trillion firms, and we’re looking at market caps within the lots of of billions or extra. That calls for a radically totally different capital technique.”
How the service works
SecurityPal ingests a buyer’s current controls — insurance policies, cloud configurations, attestations — and maps them to a proprietary corpus of roughly 2.5 million beforehand answered safety questions it has assembled from clients and filtered net information.
The corporate makes use of a mix of cutting-edge third-party AI fashions, amongst them, these from OpenAI, Google’s Gemini household, and open-source alternate options.
However Hamal emphasised that the true worth lies in how these fashions are utilized, explaining: “AI alone shouldn’t be sufficient. With AI, you get pace, however you sacrifice high quality, judgment, and context.”
To deal with this, SecurityPal integrates AI with professional human analysts in a tightly interlaced workflow, making certain accuracy and nuance in each safety assessment. Whereas the fashions are extensively out there, the corporate’s proprietary information, deep buyer relationships, and human-in-the-loop design kind a important moat that makes their answer way over simply automation.
The AI engine takes the primary go; human analysts carry out a second go and ultimate QA to catch hallucinations or lacking context. Hamal likens the impact to having an examination key upfront: “It’s virtually like SecurityPal is aware of the solutions to the take a look at earlier than the take a look at reveals up.”
As a result of the platform maintains a residing mannequin of every buyer’s posture, new questionnaires not often require handbook digging.
“Our common SLA [service-level agreement] time is 24 hours, however actually, our clients are happening to same-day turnaround,” Hamal says.
The corporate says vendor clients can flip round most safety questionnaires from potential patrons as much as 87 instances quicker than they might with handbook workflows.
Second, by letting its platform deal with third-party-risk evaluations begin to end, patrons report as a lot as 125 instances quicker vendor assessments.
Third, the aggregated assurance information the system collects turns into a dwell dashboard that chief information-security and income officers can mine for board-level perception fairly than spreadsheet trivia.
AI plus folks, not AI as an alternative of individuals
Hamal is fast to emphasize that SecurityPal’s analysts stay central to the product.
“AI alone shouldn’t be sufficient…you want professional people layered on prime of the expertise,” he advised VentureBeat, describing the inner workflow as a “centaur” mannequin the place machine and human passes alternate all through the pipeline.
The human layer additionally feeds a network-effect moat. Every new engagement expands the corpus of accepted solutions, which the AI reuses (with recent proof) for different clients.
SecurityPal claims protection of “a lot of the Fortune 1000” query units, giving it early information of rising considerations—for instance, the shift from cloud fundamentals to LLM-specific controls famous in latest federal questionnaires.
Traction and enterprise mannequin
SecurityPal bootstrapped to roughly $1 million in annual recurring income earlier than David Sacks’ Craft Ventures pre-empted the corporate’s first funding spherical; the $21 million seed deal was signed on a literal serviette, with no slide deck concerned.
The shopper roster now consists of OpenAI, Airtable, Figma, Snap, a top-three U.S. airline and a top-five U.S. well being insurer, amongst different Fortune-class accounts.
SecurityPal doesn’t disclose pricing publicly, but it surely sells the service as an annual subscription whose value undercuts the inner headcount many firms dedicate to the duty.
Internally, Hamal operates on two continents. Income, product and go-to-market groups sit in San Francisco and New York, whereas the analyst group kinds the kernel of what he calls “Silicon Peaks” — a tech hub 100 miles from Mount Everest that faucets Nepal’s deep pool of STEM graduates.
Why patrons care
For distributors, quicker questionnaire turnarounds shorten gross sales cycles and cut back the danger of stalled offers.
For patrons, automated evaluations make it possible to judge each provider as an alternative of sampling a dangerous few.
The end result, Hamal argues, is alignment between income and safety groups which have traditionally been at odds: “There are only a few instruments which are the favourite software of the CRO and the CISO. We’re it.”
Aggressive panorama
Begin-ups equivalent to Vanta, Drata and Secureframe additionally goal compliance ache factors, however they concentrate on proof assortment and audit preparation.
SecurityPal’s differentiator is doing the precise writing and response work—one thing Hamal believes will show more durable for pure-software rivals to automate as a result of it nonetheless requires judgment and area experience.
The Kathmandu middle of excellence offers SecurityPal a value base low sufficient to maintain people within the loop whereas staying price-competitive.
What’s subsequent?
SecurityPal’s near-term aim is to assist 5,000 world enterprises tame their most advanced assurance challenges inside 5 years.
Long term, Hamal sees the service as infrastructure for an financial system the place each important transaction carries a safety or privateness attestation.
“It’s referred to as SecurityPal, but it surely’s far more than simply about safety,” he mentioned, including “I look to Salesforce—it’s far more than simply gross sales. Similar for us. It’s all about satisfying necessities and accelerating offers.”
If that forecast is appropriate, the corporate’s mixture of AI scale and human nuance might change into a typical a part of enterprise procurement, whether or not or not anybody notices the “vibe coding” origin story alongside the best way.
