Comp AI raises $34 million to turn compliance paperwork into continuous cyber agents

Security compliance used to mean a scramble of spreadsheets, consultants, and a once-a-year snapshot that was stale the week after the auditor left. Comp AI, an AI-native compliance and security startup founded in January 2025, says that model is finished. On 17 September 2026 the Miami company announced a $34 million Series A led by Roo Capital and Grand Ventures to push its agents from audit prep into continuous cybersecurity.

From days-to-compliant to always-on validation

Comp AI’s own press release is blunt about the growth story. Less than two years after founding, the company reports more than 1,000 customers and 15x year-over-year ARR growth. Its agents use organizational context to automate onboarding, policy and risk generation, evidence gathering, control monitoring, and vendor assessments. The pitch to software companies is speed without theater: become compliant in days rather than quarters, then keep watching whether controls still hold as the product changes.

That second half is where the new money is pointed. Comp AI says the Series A will accelerate expansion beyond compliance automation into continuous cybersecurity, spanning real-time monitoring, control validation, and security testing across applications and infrastructure.

CEO and co-founder Lewis Carhart argues that security software should not merely track work. It should understand the business, perform the work, and act as risk changes. COO Claudio Fuentes and CTO Mariano Fuentes, also co-founders, frame agentic AI as the reason periodic manual compliance can become continuous software.

TechCrunch separately reported that Comp AI already offers AI-powered penetration testing that proactively tests codebases and infrastructures for vulnerabilities. That detail sits outside the company’s press page wording, which speaks more broadly of security testing, but it matches the product direction the founders are selling to investors.

Capital, geography, and a careful funding footnote

Roo Capital and Grand Ventures led the round. Comp AI will use the capital for product and engineering, continuous cybersecurity capabilities, and hiring across product, engineering, operations, sales, customer success, and marketing at its Miami headquarters and New York office. The company also says it has grown 10x year-over-year as it aims upmarket toward larger organizations with more complex security needs.

Why the odd brief matters

The strange market bet is that compliance and cyber are collapsing into one agent workflow. Point-in-time audits made sense when evidence collection was human-scale. AI coding and AI attacks both move faster than that calendar. Comp AI is trying to turn the paperwork companies already hate into a live control plane that writes policies, gathers proof, tests systems, and flags drift. Whether agents can carry that load without creating a new class of false confidence is the open question. The $34 million says investors want to find out in production, not in another annual binder.