Comp AI raises $34M to expand from compliance into security

Compliance automation meets active security

Comp AI has closed a $34 million Series A round to expand beyond compliance audit preparation and into continuous security monitoring and testing, according to SiliconANGLE.

The Miami-based startup, formally incorporated as Bubba AI Inc., builds software that automates compliance workflows for frameworks including SOC 2 and ISO 27001. The platform reads customer systems and documentation to draft policies and risk registers, then uses AI agents to gather evidence, monitor controls, and conduct vendor security assessments. More than 1,000 companies currently use the platform, including Dub Technologies Inc. and OpenCode.

Roo Capital and Grand Ventures led the round. Comp AI previously raised $2.6 million in a pre-seed round co-led by Grand Ventures and OSS Capital in August 2025, bringing total funding to $36.6 million.

From audit snapshots to continuous defense

The new capital will fund a shift from point-in-time audit readiness to ongoing security operations. Comp AI plans to add real-time monitoring, control validation, and security testing against customer applications and infrastructure.

"The first generation of compliance software proved this process could be automated. Agentic AI lets us go much further," CEO and co-founder Lewis Carhart said. "Security software shouldn't just track the work. It should understand the business, perform the work, and act as risk changes."

Co-founder and COO Claudio Fuentes described traditional compliance as "an approximation of security" constrained by manual processes and fixed schedules. He argued that AI agents can eliminate those limits as attacks accelerate with broader AI adoption.

The company's core platform is open source, positioning itself as an alternative to established players like Vanta Inc., which reached a $4.15 billion valuation in a $150 million round last year, and Drata Inc.

Why it matters

Compliance and security have historically operated on different timelines—audits happen quarterly or annually, while threats evolve continuously. Comp AI's expansion reflects a broader industry recognition that compliance frameworks, while necessary, don't guarantee security posture between audits. By applying agentic AI to both domains, the company is attempting to collapse that gap. For enterprises managing growing attack surfaces and regulatory requirements simultaneously, tools that unify compliance documentation with active security monitoring could reduce both risk and operational overhead.

Growth and hiring plans

Comp AI reported that annual recurring revenue has grown 15-fold over the past year. The Series A proceeds will support hiring across product, engineering, sales, and customer success teams.

Carhart founded the company in January 2025 alongside Claudio Fuentes and CTO Mariano Fuentes. The startup operates from Miami with an office in New York.

Details of the funding round were first reported by SiliconANGLE.