Scanner Raises $22M Series A Led by Sequoia to Build AI-Powered Security Data Lakes

Cybersecurity operations center with threat detection dashboards

Scanner, a cybersecurity startup that builds cloud-native security data lakes for threat hunting and detection, has raised $22 million in a Series A round led by Sequoia Capital. CRV, Mantis VC, and angel investors also participated.

The Problem: Security Teams Are Drowning in Data

Modern enterprises generate enormous volumes of security logs — from cloud infrastructure, applications, network traffic, and endpoint devices. Most security teams can barely search through last week’s data, let alone investigate threats that span months or years. Traditional SIEMs (Security Information and Event Management systems) are expensive, slow, and were designed for a pre-cloud world.

Scanner’s approach is fundamentally different. It builds cloud-native security data lakes with inverted indexes created at ingestion time, allowing security teams to run scans only on relevant data. The system scales up when running queries and scales down when idle, cutting costs dramatically.

AI Agents for Security Operations

What makes Scanner particularly interesting is its MCP (Model Context Protocol) server that connects AI agents directly to organizations’ security data lakes. This enables interactive investigations, detection engineering, and even autonomous response — essentially AI-powered SOC analysts that can hunt through years of log data in seconds.

The results speak for themselves: security teams using Scanner have reported an 84% reduction in investigation time and a 30% increase in job satisfaction. When your threat hunting tool actually works, analysts spend less time pulling their hair out.

Who’s Using It

Scanner is already deployed at security teams at Notion, Ramp, and BeyondTrust. Sequoia partner Bogomil Balkansky put it plainly: “AI is notoriously data hungry, and Scanner is the only technology on the market today that manages security data at AI scale.”

The Bottom Line

Scanner represents a new generation of security tools built from the ground up for AI and cloud. With Sequoia’s backing and customers like Notion and Ramp already on board, they’re betting that the future of cybersecurity isn’t more dashboards — it’s AI agents that can autonomously hunt threats across petabytes of log data. At $22 million, it’s a modest raise, but in security, the companies that own the data layer tend to win big.