\n<\/p>\n
Bryan Onel\u2019s father was a locksmith. As for Onel, he described himself as the digital equivalent.<\/p>\n
Ethical hacking was Onel\u2019s hobby growing up. He studied AI at university and then turned that hacking hobby into a profession. \u201cI spent a decade performing penetration tests for over 150 companies across all sectors,\u201d Onel tells TechCrunch, adding that he kept easily breaking into companies that had passed their security checks.\u00a0<\/p>\n
Onel realized that security often fell within two brackets: Painful but effective, or painless but ineffective, he said. Most companies were doing the bare minimum in cybersecurity and compliance, as it often takes too much work \u2014 and tools and talent \u2014 to provide effective security defenses.\u00a0<\/p>\n
Onel\u2019s clients kept asking if he could provide a solution to their problems, so he gave it a shot.\u00a0<\/p>\n
In 2022, he teamed up with his wife, Ora, and college friend Erik Vogelzang, and launched Oneleet, an all-in-one security compliance platform. The startup aims to help other companies get their security certifications while helping them become more secure faster.\u00a0<\/p>\n
Onel tells TechCrunch that most existing compliance platforms are evidence-collection tools, where users import data from their various products, pay a fee, and then voila!<\/em> \u2014 out spits a security certificate saying they are secure.\u00a0<\/p>\n \u201cThe result is compliance theatre,\u201d Onel tells TechCrunch. \u201cYou\u2019re certified on paper, but still vulnerable to.\u201d\u00a0<\/p>\n Techcrunch event<\/p>\n \n\t\t\t\t\t\t\t\t\tSan Francisco<\/span> Oneleet is different, said Onel. The platform includes a suite of security tools: penetrating testing, code scanning, cloud data security, attack surface management, security training, and more, he said, which aims to provide a better window into a company\u2019s security defenses.<\/p>\n \u201cBecause it\u2019s integrated from the ground up, we can deploy comprehensive security with the click of a button,\u201d Onel continued. \u201cThat saves clients hundreds of hours and eliminates the blind spots that come from managing fragmented tools.\u201d\u00a0<\/p>\n Oneleet then partners with independent auditors to provide formal certification reviews.\u00a0<\/p>\n On Thursday, Oneleet announced it raised a $33 million Series A funding round led by Dawn Capital to help grow the business. Onel called his fundraising process \u201cstraightforward,\u201d and said he met Dawn Capital in San Francisco, where he described \u201cimmediate chemistry.\u201d<\/p>\n \u201cThey already had deep knowledge of the security and compliance space and immediately understood what we were building at Oneleet, so there was instant alignment,\u201d said Onel.<\/p>\n Other investors in the round include Y Combinator, Dropbox co-founder Arash Ferdowsi, and former Snowflake and ServiceNow chief executive Frank Slootman. Oneleet participated in the Spring 2022 class of Y Combinator, and said two-thirds of the VC firm\u2019s portfolio companies are now its clients.\u00a0<\/p>\n Competitors in this space include Vanta, Secureframe, and Sprinto. For its part, Oneleet has reached $3 million in annual recurring revenue and has raised $34 million in total to date.<\/p>\n The fresh cash injection will be used to expand Oneleet\u2019s engineering team, increase its AI capabilities, and to find ways to reach more customers. The goal is to end security theatre in compliance, he said, at a time when defending against cyberattacks is more important than ever.<\/p>\n Onel said that AI is changing the scale of cyberattacks. He said, for example, advanced bad actors are automating cyber crimes, while lowering the bar for novice hackers to strike with malicious attacks.\u00a0<\/p>\n He said companies are also being reckless, like carelessly using \u201cvibe coding\u201d tools, or giving AI access to business-critical information without the right guardrails. In the world of compliance, Onel said, companies can use AI to generate fake documentation to make it seem as if the business is more secure than it is.\u00a0<\/p>\n Onel says his company heavily uses AI, working in the background for threat modeling and other security assessments, and also helps draft policies. But, he said, the company has a human team verifying information so the client does not see any hallucinations. \u201cWe\u2019re responsible about it,\u201d he said.\u00a0<\/p>\n \u201cGood security should be invisible,\u201d Onel continued. \u201cCompanies should spend less time worrying about security and more time building great products. We have a shot at helping companies defend themselves more effectively than ever before.\u201d<\/p>\n<\/div>\n
\n\t\t\t\t\t\t\t\t\t\t\t\t\t|<\/span>
\n\t\t\t\t\t\t\t\t\t\t\t\t\tOctober 27-29, 2025<\/span>\n\t\t\t\t\t\t\t<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n