Crogl Secures $30M to Launch AI 'Iron Man Suit' for Security Analysts

# splunk # crogl

On Thursday, a startup named Crogl unveiled its latest innovation in the IT world: an autonomous assistant designed to aid cybersecurity researchers in sifting through daily network alerts to identify and resolve security incidents. Crogl's CEO and co-founder, Monzy Merza, describes this tool as an "Iron Man suit" for researchers, enhancing their capabilities significantly. This assistant has already been deployed among several large enterprises and organizations. Alongside its official launch from private beta, Crogl announced securing $30 million in funding, split into a $25 million Series A round led by Menlo Ventures and a $5 million seed round led by Tola Capital. Based in Albuquerque, New Mexico, Crogl plans to use these funds to further develop its product and expand its customer base. In today's market, enterprises have access to numerous security tools designed to manage and address alerts from security software. However, Crogl stands out, largely due to the unique background of its founder. Merza, who worked in security at the U.S. government's Sandia atomic research lab and later built Splunk's security research business before moving to Databricks, brings a wealth of experience to the table. Before launching Crogl, Merza spent time at HSBC to gain insights into end-user challenges, which informed the development of Crogl. He then partnered with former Splunk colleague David Dorsey, now Crogl's CTO, to bring this vision to life. The company spent the last year building its customer base through a private beta. The name "Crogl" combines elements from Cronus (the leader of the titans and god of time), gnosis (knowledge or awareness), and logic, reflecting the startup's mission to enhance security operations through advanced analysis and understanding. Merza points out a critical issue in cybersecurity: security analysts can handle about two dozen alerts a day, yet they might receive up to 4,500. Existing tools often fail to evaluate alerts as effectively as humans because they approach the problem incorrectly. Merza and Dorsey noted that security leaders appreciate high volumes of alerts as they provide more learning opportunities for their teams through reinforcement learning. However, managing such volumes is unsustainable. Merza suggests rethinking the approach: instead of reducing alerts, what if each alert could enhance the team's capabilities, making them 'anti-fragile'? This is the core of what Crogl aims to achieve. By leveraging big data and the principles behind large language models, Crogl has developed a "knowledge engine" or "Large Security Model." This platform not only flags suspicious activity but also learns to identify potential threats more accurately. Moreover, it allows researchers to query all alerts using natural language to uncover and understand trends. Looking ahead, Crogl could expand beyond just handling alerts into areas like remediation, according to Tim Tully, the partner at Menlo Ventures who led the investment. Tully's long-standing relationship with Crogl's founding team, including Brad Lovering, a former chief architect at Splunk, gave him confidence in their capabilities. After initially missing the chance to invest at the seed stage, Tully was convinced to join after witnessing a demo in Albuquerque, describing the product as a reflection of Merza's approach to solving security challenges.

Related article

Comments (70)