Funding Brief｜Comp AI Raises $34M Series A to Turn Audits into Continuous Monitoring

🌏 中文版

Funding Details

What the company does

Comp AI builds an AI-native compliance and security platform. Its agents read a customer's own systems and documents for organizational context, then automatically draft policies and risk registers — replacing work that used to require manual effort on a fixed schedule.

The product architecture hands the tedious parts of compliance to agents: customer onboarding, evidence collection, continuous control monitoring, and vendor security assessments. The platform's core is open source, and its GitHub page positions Comp AI directly as an alternative to Vanta and Drata, covering mainstream frameworks like SOC 2 and ISO 27001. This round's stated purpose is clear: extend the product from "getting a company audit-ready" to "continuous security monitoring after the audit is done," including real-time control validation and having agents run security tests directly against customer applications and infrastructure.

The company was founded in January 2025 by Lewis Carhart (CEO), Claudio Fuentes (COO), and Mariano Fuentes (CTO), headquartered in Miami with an office in New York. It now serves more than 1,000 customers, including Dub Technologies and OpenCode, and says its ARR grew 15x over the past year (a company-reported figure, not independently verified).

What this round signals

What it means for the agent ecosystem

Comp AI is entering a market that already has a heavyweight incumbent — Vanta raised $150M at a $4.15B valuation in 2025. Rather than competing head-on for scale, Comp AI is betting on an "open-source core plus agentic architecture" approach aimed at AI-first, transparency-minded buyers. Co-founder and CEO Lewis Carhart put it this way: "The first generation of compliance software proved this process could be automated. Agentic AI lets us go much further — security software shouldn't just track the work, it should understand the business, perform the work, and act as risk changes."

What investors are betting on

Roo Capital and Grand Ventures' co-lead rests on a structural shift: compliance is moving from a one-time project to a continuously delivered subscription. Co-founder and COO Claudio Fuentes framed the core logic this way: compliance has historically been "an approximation of security" because the underlying work could only be done by hand on a fixed schedule; AI agents remove that limit, just as attacks are getting faster as AI spreads. In other words, investors aren't betting that Comp AI's audit software is simply better — they're betting that the pricing model of auditing itself is changing, from a one-off snapshot billed per project to continuous verification billed as a subscription.

Numbers worth watching

• Total funding of $36.6M, roughly a year after its $2.6M pre-seed in August 2025 — the Series A alone represents more than a 13x jump in round size
• The company reports more than 1,000 customers and 15x year-over-year ARR growth; against Vanta's $4.15B valuation in its 2025 round, that suggests this compliance category still has room for a differentiated new entrant to scale quickly even with an established leader present
• An open-source core that publicly positions itself on GitHub as a Vanta/Drata alternative — a rare, direct competitive stance in the compliance software category

Watchlist status

Comp AI is not yet tracked in the watchlist. Recommend adding it under section B7 (Agent Security / Governance / Security Tech), alongside Zenity, with tracking focus on: an open-source agentic compliance platform expanding from audit automation into real-time security monitoring, positioned directly against Vanta and Drata.

Today's takeaway

Compliance software is easy to file away as a low-volatility back-office tool, but this round is a reminder: once a system's configuration changes faster than the audit cycle, the audit itself goes from "an accurate snapshot" to "a stale approximation." That's the same story told by Comp AI and by Raindrop, an agent-monitoring startup that raised on the very same day — agent deployment is now moving faster than humans can verify by hand, so "continuous verification" is being capitalized as its own commercial category, not a feature bolted onto existing audit software.

References

• Compliance automation startup Comp AI raises $34M to push into security
• Comp AI Raises $34M Series A
• Comp AI sets eyes on a continuously agentic future for security and compliance