# above-security

Source: https://startwithidentity.com/vendors/itdr/above-security/
Last updated: 2026-08-06
License: content by Start with Identity. Cite the source URL.

---

## Overview

Above Security is an AI-native insider risk platform founded in 2025 by two veterans of Israeli intelligence Unit 8200, built around what it calls the Arbiter Engine, a fleet of continuously reasoning AI agents that investigate insider risk rather than just flagging anomalies for a human analyst to triage. It raised $50 million in March 2026 (Ballistic Ventures, Merlin Ventures, Norwest) and, in August 2026, took a [strategic investment from the CrowdStrike Falcon Fund](https://startwithidentity.com/blog/2026-08-04-above-security-lands-crowdstrike-falcon-fund-investment-for-insider-risk/) alongside a Falcon platform integration.

## What it is good at

The differentiator is investigation depth over alert volume. Specialized agents, covering shadow IT and SaaS sprawl, data exfiltration intent, flight-risk signals, and communications tone, correlate identity, application, endpoint, HR, and communications data into a single case with a behavioral timeline and stated reasoning behind each risk classification, rather than a stack of disconnected alerts a human has to piece together. Customers reportedly deploy without writing policies, rules, or configuration, a meaningfully lower setup cost than traditional UEBA tooling. The CrowdStrike integration extends this to Falcon Next-Gen SIEM telemetry, letting existing CrowdStrike customers add insider-risk investigation without a separate data pipeline.

## Where it falls short

This is a young company: eight months from founding to its first funding round, and its enterprise deployments so far are recent. It has no published pricing, a small support organization by definition of its age, and no track record at the multi-year scale that insider-risk programs in regulated industries typically demand from a vendor. It is also narrowly scoped to insider risk and behavioral investigation, not a broader identity governance or authentication platform.

## Pricing

Not published; demo-request, sales-led model typical of an early-stage enterprise security vendor.

## Best for, and who should look elsewhere

Worth evaluating for enterprises that already have identity, endpoint, and SaaS telemetry but lack the analyst capacity to investigate insider-risk signals manually, particularly CrowdStrike Falcon customers who can add the integration directly. Look elsewhere if a proven multi-year track record and broad support ecosystem matter more than investigation quality, or if you need identity governance beyond insider-risk detection. See the [ITDR vendor directory](https://startwithidentity.com/vendors/itdr/) for established alternatives like [Vectra AI](https://startwithidentity.com/vendors/itdr/vectra-ai/) and [Gurucul](https://startwithidentity.com/vendors/itdr/gurucul/).

## Bottom line

A genuinely differentiated approach to insider risk, AI-investigated cases instead of raw alerts, backed by serious funding and now a major EDR vendor, but still early enough that buyers should weigh the investigation quality against the company's short operating history.