Sequoia, Khosla and Coatue put $60M into a foundation model trained to be the security team.

Sequoia's memo describes Corma training a defensive-cybersecurity foundation model through large-scale RL across environments replicating real enterprise networks, deployed as an agentic "Security Workforce" spanning secops, cloud, and network security roles. The pitch datum: at one customer, Corma's agent detected and contained an active attacker campaign the human team had missed for 52 days. A seed sized like a Series B, aimed at selling the headcount rather than the software.