Investing in Cyber: How to Raise Money for a Cyber Startup

### Overview At RSA Conference, an expert panel of cybersecurity venture and strategic investors gathered to discuss raising capital for cybersecurity startups. Moderated by Katie Gray (In-Q-Tel), the panel featured Sid Trivedi (Foundation Capital), Andrew McClure (Forgepoint Capital), and Rashmi Gopinath (B Capital). Together representing firms that have backed over 160 cyber startups with over $1 billion in capital, the panelists examined funding stages from seed to growth, macroeconomic shifts in venture capital, evaluation criteria, and practical guidance for founders seeking investment.

### Key Topics - **Funding Stages and Investor Focus:** Early-stage firms like Foundation Capital (seed/Series A) often invest pre-revenue (80%) and pre-product (65%), concentrating heavily on team credentials and sub-market potential. Growth-oriented specialist firms like Forgepoint look for product-market fit and defensibility, while multi-stage growth firms like B Capital (Series B and beyond) prioritize execution, path to an IPO, or significant acquisition scale. - **Macroeconomic Climate and Market Dynamics:** Panelists highlighted a tightening market, noting a 50% drop in deployed venture capital in Q1 year-over-year. Andrew McClure noted proprietary tracking of 950 cybersecurity companies revealing that 32% had headcount reductions in the preceding year and another third instituted hiring freezes, suggesting tech layoff trackers significantly underestimate cybersecurity job cuts. Consequently, investors have shifted focus away from "growth at all costs" back toward business fundamentals, cash-flow breakeven, and the Rule of 40. - **Specialist vs. Generalist vs. Strategic Investors:** Generalist firms evaluate cyber opportunities against competing high-growth sectors (such as generative AI or FinTech) and typically demand category-defining potential ($3B+ TAM to support a $300M ARR company). Specialists like Forgepoint can construct portfolios that accommodate point solutions or smaller tuck-in acquisitions ($200M–$500M range). Strategic investors, including corporate venture arms (Microsoft, Intel) and government-backed strategic entities like In-Q-Tel, prioritize partnership alignment, synergy, and mission capability over pure financial exits. - **Alternative Funding Paths:** Startups can self-fund via tech-enabled services and consulting before productizing (as seen with companies like Tenable in its early years, or Thinkst Canary). Government grant mechanisms and procurement channels—such as SBIR grants, OTA agreements, DIU, DARPA, and service innovation hubs—offer non-dilutive or non-traditional avenues to commercialize technology.

### Technical Details & Metrics - **Growth-Stage Financial Metrics:** At Series B and beyond, key metrics evaluated include LTV:CAC (targeting 3x or higher), Net Dollar Retention (NDR) (targeting 120–130% so 20–30% of annual growth is driven purely by existing customers), and Rule of 40 compliance. - **IPO vs. Tuck-in Economics:** Panelists noted that cybersecurity has fewer than two dozen public companies against roughly 90 private unicorns. Approximately nine out of ten successful cybersecurity exits occur via M&A under $500 million (with 80% under $100 million), making point-solution exits common when acquirers can plug niche products into global sales forces to capture distribution synergies.

### Takeaways - **Conduct Disciplined Outreach:** Avoid mass, impersonal email blasts or copying multiple funds on a single pitch. Founders should conduct targeted research on an investor's focus areas, portfolio companies, and thesis, keeping initial outreach messages concise. - **Know What Type of Capital You Need:** Determine whether your venture fits the mold of a massive venture-scale platform, a targeted strategic tuck-in, a productized services firm, or a government use-case solution before pursuing outside capital. - **Maintain Grit in a Contracting Market:** With capital scarcer and diligence stricter, warm introductions via trusted founders, customers, or co-investors significantly raise conviction, but founders must be prepared to navigate dozens of rejections to find the right partner.