Drata Expands Security Compliance Solutions with $250M Acquisition of SafeBase

Drata Expands Security Compliance Solutions with $250M Acquisition of SafeBase

Drata, a leading security compliance automation platform, has recently made headlines by acquiring software security review startup SafeBase for a remarkable $250 million. This strategic move aims to bolster Drata’s offerings in helping businesses comply with critical frameworks such as SOC 2 and GDPR.

Acquisition Details

SafeBase, founded by Al Yang (CEO) and Adar Arnon (CTO) in 2020, will continue to operate as a standalone entity while integrating its core solutions into the Drata platform. This partnership is more than just a merger of complementary products; it’s a collaboration between two customer-focused companies sharing a vision for empowering enterprises.

SafeBase’s Innovative Solutions

SafeBase specializes in assisting organizations with security questionnaires, which are essential assessments conducted before purchasing new software. Utilizing AI models trained specifically for security documentation, SafeBase efficiently reads, interprets, and responds to these security inquiries. Key features include:

  • Custom AI Models: Tailored to address security documentation challenges.
  • Rules-Based Behavior: An engine that allows companies to set specific customer access guidelines.
  • Dashboard Insights: Analytics on the overall security posture of the organization.

Funding and Growth

Based in San Francisco, SafeBase has successfully raised $53.1 million in venture capital, attracting investors like Zoom Ventures, NEA, and Comcast Ventures. The company currently serves over 1,000 customers, including industry giants such as LinkedIn, Palantir, and CrowdStrike.

Drata’s Vision for the Future

According to Drata co-founder and CEO Adam Markowitz, this acquisition aligns with the increasing demand for trust management solutions as businesses become more reliant on third-party vendors. The introduction of new regulations, like the

Similar Posts

Mozilla Addresses Backlash: Assures Users Their Data Won't Fuel AI Development

Mozilla Fixes Critical Firefox Vulnerability Exploited in the Wild, Echoing Chrome’s Recent Security Threat

Bysupport

Mozilla has released a critical update for Firefox (version 136.0.4) to address a significant security vulnerability (CVE-2025-2857) that cybercriminals were actively exploiting. This flaw allows attackers to escape Firefox’s sandbox, potentially leading to unauthorized access to sensitive data. The issue also affects other browsers, including the Tor Browser, which has been updated as well. Kaspersky researcher Boris Larin confirmed that this vulnerability shares similarities with a recent bug in Google Chrome. Users are urged to keep their browsers updated to safeguard against evolving cyber threats and maintain online security.

DOJ Confirms FBI's Major Operation to Eradicate Chinese Malware from Thousands of US Computers

DOJ Confirms FBI’s Major Operation to Eradicate Chinese Malware from Thousands of US Computers

Bysupport

U.S. authorities have disrupted the operations of the state-sponsored Chinese hacking group “Twill Typhoon,” linked to a global espionage campaign affecting millions of computers. On August 2024, the Department of Justice and FBI, in collaboration with French authorities and the cybersecurity firm Sekoai, executed a court-authorized operation to eliminate the “PlugX” malware from over 4,200 infected U.S. computers. The malware, utilized since 2014 for espionage, collects victim files for exfiltration. The U.S. has accused the Chinese government of funding Twill Typhoon, amid ongoing concerns about Chinese cyber threats targeting global organizations and government systems.

Anthropic CEO: DeepSeek Demonstrates Success of US Export Regulations

Anthropic Unveils Innovative AI Chatbot Solutions for Colleges and Universities

Bysupport

On Wednesday, Anthropic launched its Claude for Education tier to compete with OpenAI’s ChatGPT Edu plan, targeting higher education. Key features include “Learning Mode,” which fosters critical thinking by encouraging deep engagement with material, and functionalities for research support. Anthropic aims to double its monthly revenue of $115 million by 2025, enhancing its education sector presence. The platform includes robust security features and has partnered with Instructure and Internet2 for integration. Full campus agreements have been established with institutions like Northeastern University. As AI’s role in education evolves, Claude for Education seeks to shape future learning experiences.

Cyberattack Hits Ukraine: Disruption of Train Ticket Sales Amidst Growing Digital Threats

Cyberattack Hits Ukraine: Disruption of Train Ticket Sales Amidst Growing Digital Threats

Bysupport

Ukrainian railway operator Ukrzaliznytsia faced a significant cyberattack that disrupted its online ticket sales, affecting both domestic and international transactions. Despite this, train operations remained stable and uninterrupted. Increased passenger traffic was reported at Kyiv’s central railway station, leading to long lines for ticket purchases. In response, Ukrzaliznytsia reassured travelers that train services were running smoothly and outlined alternatives for those unable to buy tickets online, including visiting ticket offices or boarding trains without tickets. This incident emphasizes the need for robust cybersecurity measures in critical infrastructure.

SEC Extends Deadline for Investment Fund Names Compliance: What You Need to Know

SEC Extends Deadline for Investment Fund Names Compliance: What You Need to Know

Bysupport

The SEC has extended compliance dates for amendments to the Investment Company Act’s Names Rule to enhance fund transparency and protect investors from misleading information. The new deadlines are June 11, 2026, for large fund groups and December 11, 2026, for smaller groups. This extension allows funds to refine their systems and conduct thorough testing to meet the new standards. The SEC strategically aligned these dates with annual reporting cycles to reduce financial burdens and operational costs. This initiative reflects the SEC’s commitment to improving fund naming accuracy and fostering a more transparent investment environment.

Global Crackdown: Four Suspected 8base Ransomware Operators Arrested by Authorities

Global Crackdown: Four Suspected 8base Ransomware Operators Arrested by Authorities

Bysupport

A global law enforcement initiative, Operation Phobos Aetor, led to the arrest of four Russian nationals linked to over 1,000 ransomware attacks, particularly through the 8base group, a major affiliate of the Phobos ransomware-as-a-service operation. Conducted in Phuket, Thailand, the operation seized the group’s dark web leak site and over 40 pieces of evidence, including digital devices. Charges were unsealed against two suspects, Roman Berezhnoy and Egor Glebov, who allegedly generated $16 million from ransomware schemes targeting organizations, including critical infrastructure in the U.S. Ongoing investigations continue to warn over 400 companies about imminent threats.