今年夏天，网络安全领域涌现出大量新公司和新理念。一些最具吸引力的进展背后，是那些多年来一直致力于解决当前问题的创始人。
Cybersecurity has had no shortage of new companies and ideas this summer. Behind some of the most interesting developments are founders who have spent years working on the problems they are now trying to solve.
他们的公司覆盖了安全架构的不同层面，但都专注于将网络安全适应于一个正被人工智能、云基础设施、软件和身份认证重塑的环境。以下是今年夏天进入我们视野的五位网络安全公司首席执行官。
Their companies span different parts of the security stack, but they share a focus on adapting cybersecurity to an environment being reshaped by AI, cloud infrastructure, software and identity. Here are five cybersecurity CEOs who have been on our radar this summer.
罗布·古尔泽夫（Rob Gurzeev），CyCognito 罗布·古尔泽夫的职业生涯大部分时间都花在网络安全攻击方，包括在以色列8200部队的工作以及在网络安全研发领域担任高级职务。
Rob Gurzeev, CyCognito Rob Gurzeev has spent much of his career on the offensive side of cybersecurity, including work with Israel’s Unit 8200 and senior roles in cybersecurity R&D.
这一背景影响了CyCognito对外部攻击面管理的方法。该公司并不完全依赖组织现有的资产清单，而是专注于发现攻击者从外部能够找到的内容。
That background informs CyCognito’s approach to external attack surface management. Rather than relying entirely on an organization’s existing asset inventory, the company focuses on discovering what attackers can find from the outside.
CyCognito的平台绘制组织的外部攻击面，并利用自动化分析和测试来识别暴露的、可利用的以及敏感的资产。该公司表示，其技术无需客户提供初始资产清单或配置即可运行。
CyCognito’s platform maps organizations’ external attack surfaces and uses automated analysis and testing to identify exposed, exploitable and sensitive assets. The company says its technology can work without requiring customers to provide an initial asset inventory or configuration.
古尔泽夫的工作继续围绕一个根本性的安全问题展开：当攻击者除了公司名称外一无所知时，组织在攻击者眼中是什么样子？
Gurzeev’s work continues to center on a fundamental security question: what does an organization look like to an attacker when the attacker starts with nothing but the company’s name?
阿萨夫·维纳（Asaf Wiener），Mate Security 阿萨夫·维纳拥有来自业内两家最知名安全公司的产品经验。在Wiz，他领导服务于财富500强企业的漏洞管理产品，并打造了一款产生独立年度经常性收入的新产品。在微软，他帮助将微软Defender漏洞管理从孵化阶段发展为独立的、能产生收入的产品。
Asaf Wiener, Mate Security Asaf Wiener brings product experience from two of the industry’s most prominent security companies. At Wiz, he led the Vulnerability Management product serving Fortune 500 companies and built a new product generating independent ARR. At Microsoft, he helped take Microsoft Defender Vulnerability Management from incubation to a standalone, revenue-generating product.
如今，作为 Mate Security 的首席执行官兼联合创始人，Wiener 正将自己在安全领域的经验应用于基于人工智能的安全运维工作中。Mate Security 的核心技术包括“安全上下文图”（Security Context Graph）以及自主运行的安全运维系统，这些技术为安全团队提供了一个框架，使他们能够整合各种人工智能工具，同时确保整个运维过程的有序进行并遵守相关规则。
Now, as CEO and co-founder of Mate Security, Wiener is applying that experience to AI-powered security operations. Mate is building around its Security Context Graph and agentic security operations, giving security teams a framework for connecting AI agents while maintaining orchestration and guardrails.
其长远目标是超越传统的“人工智能辅助工具”范畴，探索当人工智能工具能够主动进行安全调查和响应时，安全运维工作会呈现出怎样的新形态。
The broader idea is to move beyond AI assistants and explore what security operations look like when AI agents can actively investigate and respond.
Itay Keren（Bloom Security） Itay Keren 今年夏天因 Bloom Security 的成功亮相而备受关注：该公司在 Glilot Capital Partners 和 Ten Eleven Ventures 的带领下完成了 2000 万美元的种子轮融资。Bloom Security 的主要目标是保护终端设备的安全，但其对“终端设备”的定义与传统观念有所不同。Keren 认为，如今的终端设备实际上已经演变成了一个复杂的生态系统——其中包含了人工智能工具、管理控制服务器（MCP 服务器）、集成开发环境（IDEs）、浏览器扩展程序以及各种可能接触敏感数据和系统的软件。
Itay Keren, Bloom Security Itay Keren made headlines this summer when Bloom Security emerged from stealth with a $20 million seed round led by Glilot Capital Partners and Ten Eleven Ventures. Bloom is taking aim at endpoint security, but with a different definition of what an endpoint looks like. Keren’s thesis is that today’s endpoint has become an ecosystem containing AI agents, MCP servers, IDEs, browser extensions, packages and other software that can interact with sensitive data and systems.
这种变化给传统的终端安全产品带来了挑战，因为这些传统产品主要是针对那些更容易识别和控制的应用程序、流程及设备设计的。
That creates a challenge for traditional endpoint security products, which were largely designed around applications, processes and devices that were easier to identify and control.
Bloom Security 的核心理念是提升对这一新型终端环境的可见性和控制能力，从而推动关于如何保护基于人工智能技术的系统的安全性的讨论不断深入。
Bloom is building around visibility and control across this new endpoint environment, putting Keren at the center of a growing conversation around securing AI-native computing.
Barak Klinghofer（Reclaim Security） Barak Klinghofer 从网络安全问题的“修复”角度来着手解决安全挑战。在创立 Reclaim Security 之前，他曾创立过 Hexadite（该公司后来被微软收购），之后还在微软的安全部门工作过。Reclaim Security 的主要目标是解决一个让安全团队普遍感到困扰的问题：即使发现了安全漏洞，如果组织无法及时修复它们，这些漏洞也毫无意义。该公司致力于开发自动化漏洞修复技术，重点在于在漏洞正式投入生产环境之前就评估修复措施可能带来的影响。
Barak Klinghofer, Reclaim Security Barak Klinghofer is approaching cybersecurity from the remediation side of the problem. Before founding Reclaim Security, Klinghofer founded Hexadite, which was acquired by Microsoft, and later worked within Microsoft Security. His current company is focused on a familiar frustration for security teams: finding vulnerabilities is only useful if organizations can actually fix them. Reclaim Security is building technology around automated exposure remediation, with an emphasis on understanding the potential impact of a fix before it reaches production.
该公司的做法反映了网络安全领域的一个更广泛的变化趋势：从单纯生成安全检测结果，转向帮助企业减少那些已经被发现的安全风险。
The company’s approach reflects a broader shift in security from generating more findings to helping teams reduce the exposures they already know about.
约西·巴里舍夫（Yossi Barishev）是 Way Security 的首席执行官兼联合创始人。他长期致力于应对高级持续性威胁（APT）以及来自国家行为体的网络攻击。如今，他专注于企业安全领域中最古老的问题之一——身份管理（Identity Management, IAM）。
Yossi Barishev, Way Security Yossi Barishev has spent his career dealing with APTs and nation-state adversaries. Now, as CEO and co-founder of Way Security, he is focused on one of enterprise security‘s oldest problems: identity. Way emerged from stealth this summer with a $20 million seed round co-led by Insight Partners and Glilot Capital.
Way Security 于今年夏天正式成立，获得了由 Insight Partners 和 Glilot Capital 共同领投的 2000 万美元种子轮融资。该公司正在开发一种基于人工智能的解决方案，旨在帮助企业在日益复杂的网络环境中实施和强化身份与访问控制机制。
The company is building an AI-driven layer designed to help organizations operationalize and enforce identity and access controls across increasingly complex environments. For Barishev, the challenge isn’t simply whether companies have IAM tools.
对巴里舍夫来说，问题不在于企业是否拥有身份管理工具，而在于这些工具是否能够被有效地应用于所有应用程序、用户以及各个身份管理场景中，从而真正提升企业的安全防护水平。
It’s whether those tools are consistently translated into effective security enforcement across applications, users and identities.
这五位首席执行官各自专注于网络安全领域的不同方面，但他们所领导的公司都体现了行业内的重大变革趋势：
The problems they’re building around These five CEOs are tackling different parts of cybersecurity, but their companies reflect some of the industry’s biggest shifts.
Mate 公司正在探索基于人工智能的安全运营解决方案；
Mate is exploring AI-driven security operations.
Bloom 公司正在重新设计适用于人工智能原生环境的安全防护体系；
Bloom is rethinking the endpoint for an AI-native environment.
CyCognito 公司专注于发现企业面临的外部安全风险；
Reclaim 公司则致力于将检测到的安全问题转化为实际的修复措施；
CyCognito is focused on discovering external exposure, Reclaim on turning findings into remediation, and Way on making identity controls work across complex enterprises.
Way Security 则致力于在复杂的企业环境中实现有效的身份管理功能。
随着人工智能和自主软件技术的不断发展，这些问题将成为定义企业安全领域未来发展方向的关键因素。
As AI and autonomous software continue changing how businesses operate, these are the kinds of problems that could define the next chapter of enterprise security. Contributed article.
本文为转载内容，非 TNW 新闻编辑部原创，不代表 TNW 的官方立场。
Not produced by the TNW newsroom and does not reflect the editorial stance of TNW.