Comp AI Raises $34 Million to Automate Security Compliance

Comp AI has secured a $34 million Series A funding round to accelerate its push into automated security and compliance management. The startup, founded in January by Lewis Carhart, Claudio Fuentes, and Mariano Fuentes, seeks to address the growing burden of manual security audits for software companies. The round was led by Roo Capital and Grand Ventures, bringing the company’s total funding to $37.5 million.

The founders previously worked together on a workflow platform that reached over a million users before being shut down. During that time, they realized that preparing for security certifications like SOC 2 was a distracting, labor-intensive process that diverted attention from product development. This experience directly inspired Comp AI’s mission to automate these tedious tasks, allowing engineering teams to focus on building features rather than chasing compliance paperwork.

Automating tedious compliance workflows

According to reporting from GN technics/ai (en-US), Comp AI builds an agentic platform that uses artificial intelligence to handle routine security work. This includes drafting security policies, collecting evidence for audits, and continuously monitoring whether a company meets specific compliance controls. The system is designed to function as a digital assistant that handles the repetitive aspects of maintaining a secure infrastructure.

For many software companies, meeting security requirements is directly tied to revenue, as clients often demand proof of compliance before closing deals. Comp AI positions its tool as a way to streamline this process without removing human oversight. The company emphasizes that while AI agents may draft documents or test code, human employees remain responsible for reviewing and approving these actions. This hybrid approach aims to balance efficiency with accountability.

Addressing risks in agentic systems

The urgency for such tools stems from the rapid adoption of AI agents in enterprise environments. Traditional security audits are static snapshots that become outdated the moment new software is deployed. If a company passes an audit and then introduces a new AI agent that accesses customer data, the previous report no longer reflects the current risk profile. Comp AI argues that security needs to be continuous rather than periodic to keep pace with these changes.

Mariano Fuentes, the company’s CTO, highlights the need for transparency in AI operations. As agents gain access to sensitive systems, companies must track what data they access and ensure they stay within defined boundaries. Comp AI is developing features to monitor these permissions and validate risk in real time. This approach treats security as an ongoing process of validation rather than a one-time checklist.

Human oversight remains essential

Despite the automation capabilities, the founders are clear that humans remain central to the process. The platform does not replace independent audit reviews or human judgment. Instead, it supports the controls that humans maintain. As AI agents take on more consequential tasks, the company believes that safeguards and human approval levels should increase accordingly. This design choice acknowledges that while AI can speed up compliance, it cannot fully replace the need for human accountability in critical security decisions.