WillItSurvive
Cybersecurity companies · United States

Cyberhaven

Startup that maps data lineage across cloud apps to spot and stop data leaks.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from Q4 2026 · Every call on the record Checkpoint: Microsoft Purview's next release cycle, watched for cross cloud lineage parity across Snowflake, GitHub, and Drive
The call

Cyberhaven has real lineage tech Microsoft has not matched, but growth has cooled, leadership just changed, and Purview is closing in from above.

Cyberhaven helps companies see where sensitive data goes across their computer systems and cloud services. The company built a 10-year database that competitors find hard to copy, and it has integrated AI assistants Claude and Codex into its product. However, Microsoft already sells a competing product called Purview that dominates the market (Microsoft has 7.9% of customers' attention versus Cyberhaven's 2.2%), and Forcepoint acquired a rival company to catch up. Meanwhile, Cyberhaven's growth has stalled (same number of workers, less website traffic), it suffered a security breach in its Chrome extension that shook customer trust, and its founder left and a new CEO started in May 2025. The one thing that could change the picture: if Microsoft adds the ability to track data across Snowflake, GitHub, and Google Drive as well as it does now, Cyberhaven would lose its main advantage.

Why
01
AI pressure: None apparent. Cyberhaven wires Claude Code and Codex into its lineage graph via MCP, treating frontier models as inputs, not rivals. Could AI do the core job? Unlikely.
02
Bigger players: Microsoft Purview. Purview already ships DSPM for AI and Copilot aware controls, and leads DLP mindshare at 7.9% versus Cyberhaven's 2.2%. Could a giant copy it? Probably.
03
What protects it. A ten year data lineage graph spanning heterogeneous platforms that Microsoft's single stack view cannot easily replicate.
What would change this call
Microsoft Purview ships cross-cloud lineage covering Snowflake, GitHub, Drive at parity within 12-18 months. Would compress Cyberhaven's core lineage-graph differentiation.
Cyberhaven headcount and open roles resume growth beyond mid-2026 plateau (290 staff, 3 open roles). Would signal renewed bookings momentum rather than stalled scale.
A second Cyberhaven supply-chain or extension security incident occurs. Would signal the Dec 2024 breach was not an isolated trust failure.
Key numbers
  • $1B valuation after $100M Series D (2025-04-02)
  • Web traffic down 33% quarter over quarter (2026-06-20)
  • Chrome extension breach hit ~400,000 users (2024-12-27)
Named risks
  • Second supply-chain or security incident following December 2024 Chrome breach. Severity: high
  • Microsoft Purview closing the cross-cloud lineage gap and eroding differentiation. Severity: high
  • Growth deceleration: flat headcount, falling web traffic, only 3 open roles by mid-2026. Severity: medium
  • New CEO Nishant Doshi execution risk, in seat since May 2025. Severity: medium
  • Lack of disclosed revenue or NRR data since Series D obscures true financial health. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Microsoft Purviewlosing toPurview holds #1 DLP mindshare at 7.9% vs Cyberhaven's 2.2%, as of June 2026
Microsoft PurviewcontestingShipped competing DSPM for AI and Copilot-aware controls in same window as Cyberhaven's 2026 launches
ForcepointcontestingAcquired Getvisibility to bolt DSPM plus DDR onto its platform, reported mid-2026
Nightfall AIcontestingPositioned as direct peer competitor in modern DDR and data security for AI space, 2026
Questions people ask
Is Cyberhaven profitable in 2026?
No verified profitability data exists. Cyberhaven is a private, venture-backed company that has not disclosed hard revenue or profit figures since its Series D in April 2025. It cites record growth and 200% bookings growth around its 2024 Series C, but no net income figures are public as of mid-2026.
Could AI replace Cyberhaven's product?
Unlikely to fully replace it. Cyberhaven's core moat is a proprietary data lineage graph built over about 10 years tracking data across platforms, something raw AI models cannot easily replicate. It even integrates Claude Code and Codex into its Analyst Plugin, launched May 2026, treating AI as an ingredient, not a replacement.
Who is Cyberhaven's biggest competitor?
Microsoft Purview is Cyberhaven's biggest threat, ranked #1 in DLP mindshare at 7.9% versus Cyberhaven's 2.2% and #29 overall as of June 2026, per PeerSpot. Purview has already shipped DSPM for AI features that directly compete with Cyberhaven's positioning.
Who owns Cyberhaven?
Cyberhaven is privately held and venture-backed, with no parent company. Investors include Redpoint Ventures, Adams Street Partners, Khosla Ventures, StepStone Group, Schroders, and Industry Ventures, following a $100 million Series D on April 2, 2025 that valued the company at $1 billion.
Did Cyberhaven have a security breach?
Yes. On December 24 to 25, 2024, a phished employee account was used to push a malicious Chrome extension update that stole session cookies and tokens, part of a wider campaign hitting 30+ extensions and about 2.6 million users. Cyberhaven detected and removed it within hours and shipped a clean update.
Has Cyberhaven changed leadership recently?
Yes. Founder CEO Howard Ting stepped down on May 13, 2025, citing family and work life balance, moving to the board. Nishant Doshi, former Chief Product and Development Officer who joined in August 2024, became interim and then permanent CEO.
Timeline
  • 2026-06-29Launched Analyst Plugin integrating Claude Code and Codex via MCP into lineage context
  • 2026-05-04Cyberhaven became available on AWS, Azure, and Google Cloud Marketplaces
  • 2026-04-24Launched Agentic AI Security for shadow AI discovery, debuted at RSA Conference
  • 2026-02-03General availability of Unified AI and Data Security Platform combining DSPM, DLP, IRM
  • 2025-07-07Company blog confirmed leadership transition, over 200 employees reported
  • 2025-05-13Founder CEO Howard Ting stepped down; Nishant Doshi became interim CEO
  • 2025-04-02Raised $100 million Series D led by StepStone Group at $1 billion valuation
  • 2024-12-24Chrome extension supply-chain breach via phished employee account
  • 2024-06Raised $88 million Series C led by Adams Street Partners and Khosla Ventures at ~$488 million valuation
  • 2021-12Raised $33 million Series B led by Redpoint Ventures
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources