About Beacon
Beacon is a platform for AI-native security that creates an environment for AI agents and security teams to autonomously prevent, detect, and defend. Beacon describes itself as a security data management platform built to solve the tradeoff between cost, coverage, and context. Beacon says every extra log raises the SIEM bill, so teams cut coverage and lose the context AI agents need. Beacon automatically discovers coverage gaps, transforms and enriches telemetry with security-driven intelligence, and routes optimized data to any destination.[1][3][4]
Beacon's Data Layer fuses telemetry across vendors, routes clean data to external systems, pre-resolves entities, and automates normalization and enrichment at scale. Beacon provides native collection, integration, monitoring, and schema normalization across 150+ sources. Beacon has 150+ pre-built connectors and skills. Beacon collects security, application, identity, and contextual data via APIs, syslog, webhooks, and cloud storage. Beacon processes, transforms and routes data to destinations in real time using its streaming pipeline. Beacon's coverage and posture monitoring continuously maps sources against threats and compliance and flags gaps.[1][4][5]
Beacon maps data to ECS, OCSF, ASIM, or any custom schema. Beacon applies identity, threat intelligence, and asset context in-stream through expert-vetted Recipes and an AI Assistant. Beacon's expert-crafted recipes reduce data volume before ingestion by filtering, aggregating, and optimizing events while preserving detection-relevant fields. Beacon's AI detects and classifies sensitive data in motion, including PII, financial data, credentials, and secrets. Beacon ingests and routes security data from Claude with security-aware optimization, enrichment and normalization.[5][6][7]
Beacon's platform lets defenders use agents for detection engineering, investigation support, posture, and shadow AI analysis. Beacon supports building and running agents on an open harness with support for MCP, CLI, and API. Beacon includes a growing library of specialized agents built for the work defenders do every day. Beacon lists shadow-AI analysis, alert triage and investigation among the agents coming soon. The Beacon Agent continuously monitors the telemetry estate, tracking new applications, flagging missing sources, alerting when critical data goes quiet, and resolving issues. Security teams can plug into Beacon's Agent Lake through APIs and MCP integrations, using Skills to power their own agentic workflows. Beacon discovers AI tools across an environment and surfaces unsanctioned AI usage. Beacon Fabric has Discovery capabilities that scanned the environment of Lemonade to surface SaaS coverage gaps through agentic workflows.[1][3][4][6][7][8]
Beacon separates the data layer from the analytics layer, collecting, normalizing, and routing data to any destination in the format it expects. Beacon collects telemetry and routes it to a SIEM, data lake, warehouse, or cloud storage. Beacon routes the same data to multiple destinations simultaneously, each normalized to the schema that tool expects. Beacon has pre-built connectors for cloud, SaaS, identity, endpoint, and business applications, plus every major SIEM, data lake, and cloud storage as a destination.[6]
Beacon is SOC 2 Type II and ISO 27001 compliant and offers multi-cloud, multi-region, and bring-your-own-cloud deployment options. Beacon is used by dozens of enterprises across industries from fintech to healthcare to hospitality. Beacon's adopters include high-growth technology companies and private equity-backed organizations. Lemonade is a full-stack insurance company offering consumer insurance products across the U.S. and Europe. Lemonade streams key telemetry sources through Beacon covering cloud infrastructure, business apps, endpoint data, and security tooling.[3][5]
Beacon was founded in 2024 by veterans of elite intelligence, offensive security, and enterprise-scale data infrastructure. Gal Tal-Hochberg, CEO and Co-Founder of Beacon, previously founded HiredScore. Or Mattatia and Iddo Israely are co-founders of Beacon with backgrounds in nation-state cyber defense. Beacon's founders come from Israeli Unit 8200, incident response at Sygnia and Mitiga, national cyber defense, and global technology leadership at Team8. Beacon's team includes incident responders, threat researchers, and offensive security experts. Beacon closed a $13 million seed funding round led by Notable Capital, with participation from Holly Ventures, AlphaDrive Ventures, SVCI, Jefferies Family Office and over 60 founders and CISOs.[1][4][5][9][10]
Beacon on the record