Native raises USD $42m for cloud security control plane

Native has launched with USD $42 million in funding and a platform it describes as a cloud security control plane for multi-cloud environments.

The product translates security policy intent into provider-specific configurations that enforce controls across Amazon Web Services, Microsoft Azure, Google Cloud and Oracle Cloud Infrastructure.

Ballistic Ventures led a USD $31 million Series A round, with General Catalyst, YL Ventures and Merlin Ventures participating. Phil Venables, former Chief Information Security Officer of Google Cloud, has joined Native's board.

Organisations are placing greater emphasis on preventive security controls as attackers use automation and AI to move from discovery to exploitation faster than many defenders can respond. Security teams also often struggle to maintain consistent policies across multiple cloud platforms, where identity models, policy tooling and service catalogues differ.

Native is positioning its approach as security-by-design, with controls embedded into cloud architecture rather than layered on as separate monitoring and detection tools. The platform relies on each cloud provider's own security enforcement mechanisms.

That design is a growing point of debate in the cloud security market. Many organisations use provider-native tools alongside third-party services. The challenge is how consistently teams can configure and maintain controls across accounts, projects and subscriptions-especially when changes must be made in production systems.

Native's software starts with a definition of security intent set by security teams, then translates that intent into the configuration required by each cloud platform. The company says this helps keep enforcement consistent as environments change.

Production controls

Making security changes directly in live cloud estates carries operational risk. A misconfigured identity policy or network control can disrupt applications and business operations.

The platform includes pre-deployment impact simulation, rollout methods designed to reduce disruption, and approval workflows. The goal is to reduce the risk that security changes break systems.

Native also tied the product's timing to shifting attacker behaviour, citing Google's Mandiant research that the average time-to-exploit reached minus one day in 2024-suggesting some flaws were exploited before patches became publicly available.

"Cloud providers invest heavily in security controls. The irony is that most enterprises struggle to use them effectively, especially across multiple clouds," said Amit Megiddo, Native's co-founder and CEO.

"We built Native so that security teams can define security policy intent and have it enforced everywhere, staying aligned as environments change. When security is native to the infrastructure, it enables the business to move faster within a secure framework," Megiddo said.

Board and backers

Venables joined the board as Native emerged from stealth. He is also a venture partner at Ballistic Ventures.

"Cloud security is entering a new era where the unit of work is not 'finding' problems, it's safely enforcing the right architecture at speed," Venables said.

"What will matter most is whether a platform can translate intent into real, provider-native enforcement across clouds and keep that enforcement aligned as environments evolve. That's the step-change: security that can keep up with the business," he said.

Ballistic Ventures said the shrinking window between new risks and real-world exploitation is driving investment in security products focused on prevention and enforcement.

"The tradeoff between being more secure and business moving faster is a false choice," said Jake Seid, co-founder and general partner at Ballistic Ventures.

"Native helps customers raise the security bar while staying nimble across multiple clouds, even as AI changes the speed and scale of attacks," Seid said.

YL Ventures also framed the market shift as a move away from relying primarily on reactive detection.

"Cloud security has reached a critical inflection point where reactive detection is no longer sufficient for the speed of the modern enterprise," said Ofer Schreiber, senior partner at YL Ventures.

"By establishing a unified enforcement layer, Native is creating the next essential pillar of the security stack. This team is uniquely positioned to define the future of secure-by-design infrastructure, and we're proud to back that vision," Schreiber said.

Team and customers

Native says Fortune 100 organisations in finance, technology and media already use the platform, but it did not name customers.

The company was founded by cloud security veterans with experience across cloud provider security services and security vendors. Megiddo previously led Amazon GuardDuty at AWS. Chief Product Officer Gal Ordo led AWS Security Hub, and Chief Technology Officer Eyal Faingold served as vice president of cloud security at Check Point.

Native has 41 employees across Tel Aviv and the United States. It plans to grow to 90 by the end of 2026, focusing hiring on talent from major cloud providers and security companies.