Northstar Security Raises $7M Seed to Build Real-Time Security Context Graph for Toxic Combinations

Northstar ingests data from Okta, Microsoft Entra, AWS, GitHub, and Workday to surface combinations where isolated issues become critical paths. A laptop without endpoint protection owned by a privileged user with direct access to payroll systems triggers automated remediation options under analyst supervision. The platform exposes how existing point tools fail to correlate these relationships in real time.

Founder Amer Deeba previously sold Normalyze to Proofpoint after building data security posture tools, while CTO Ed Rowe brings engineering leadership from AppDynamics. This pattern of context-layer startups follows repeated failures of siloed scanners and identity tools to prevent breaches despite high investment. Procurement records from similar vendors show contracts often require custom integrations that delay value by 12-18 months.

The $7 million funds platform development and go-to-market expansion. Northstar also opens the graph to external agents via Model Context Protocol, allowing customers to build custom workflows. Independent verification of claimed integrations and remediation accuracy will depend on customer deployments rather than marketing statements.

Next milestones include first production deployments and measurable reduction in mean time to remediate toxic combinations. Contract awards from Fortune 500 security teams will test whether the graph delivers actionable context beyond existing dashboards.