The financing was led by Cheyenne Ventures and AVP, with participation from Olive Hill Ventures and follow-on investment from Crosslink Capital and Rally Ventures. Abstract said the round valued the company at three times its previous round, though it did not disclose a specific figure. The company added roughly 40 staff over the period it reported growth.

Abstract sells what it calls a composable, streaming-first security operations platform. Rather than routing all security data into a single monolithic system, its architecture decouples data sources from destinations and runs threat detections in real time as data streams through. The founding team previously worked at ArcSight, Mandiant and Palo Alto Networks.

Traction and customer metrics

The headline metrics are unusually specific for a company at this stage. Abstract reports 380 percent growth in annual recurring revenue year on year, 264 percent net revenue retention, and a tripling of its customer base. Net revenue retention above 200 percent indicates that existing customers are expanding their spend sharply, which for a security vendor typically means moving more data sources and detections onto the platform after an initial deployment. The platform is available through the AWS, Microsoft Azure and Google Cloud marketplaces, and embeds an assistant the company calls Astro AI across security-operations workflows.

Market development: unbundling the SIEM

Abstract is targeting the security information and event management market, where cost has become a structural complaint. Traditional SIEM tools charge by volume of ingested data, which penalizes teams as log volumes grow. By separating storage from detection and processing events in a stream, Abstract argues customers can control which data they pay to retain. The pitch lands as enterprises reassess security budgets and as data volumes rise with AI-driven applications.

Analysis: what founders can take from Abstract

The opportunity is a pricing-model wedge. Abstract is not claiming to detect threats no one else can. It is attacking how incumbents charge, and its retention numbers suggest customers respond to that. The replicable lesson for founders in mature categories is that unbundling an incumbent’s pricing, rather than adding a new feature, can be the sharpest wedge, because it converts the incumbent’s largest revenue line into the challenger’s differentiator.

The risk is that pricing advantages are the easiest to copy. Established SIEM vendors can introduce tiered or decoupled pricing, and hyperscalers already sell competing security data tooling. A 380 percent growth rate on a base that has raised under 50 million dollars also implies the absolute revenue is still modest. Founders should treat a pricing wedge as a way to win the first cohort, not as a durable moat, and invest early expansion revenue into detection quality and integrations that are harder to replicate.

More information

Source and more information: Abstract Raises 25 Million Dollars (PR Newswire)
Supplementary source: Abstract Security raises 25M, recurring revenue up 380 percent (SiliconANGLE)