
Investors should prioritize Cybersecurity firms that define new categories, such as the enterprise browser company Island ($5B valuation), which successfully competes against "free" alternatives by capturing Fortune 100 clients. In the public markets, Monday.com and Wix are trading at historically low multiples (1.5x and 2.5x respectively), offering a potential rebound opportunity if they prove AI will not displace their core growth. When evaluating private startups, look for "velocity DNA" similar to Wiz, which scaled from $1M to $24M in its first year, as high growth speed is the most reliable predictor of long-term dominance. Exercise extreme caution with seed-stage cybersecurity entry prices, as current valuations of $100M+ are often inflated and do not reflect the low 1% to 2% historical success rate for new startups. For late-stage private investments, favor companies with secondary liquidity programs for employees, as these are essential for retaining top talent and sustaining growth toward a "decacorn" exit.
• The cybersecurity market remains a primary area for innovation due to massive, ongoing pain points. • Entry prices for seed-stage companies have skyrocketed from $15M post-money in 2012 to $100M–$150M post-money today. • Despite high valuations, the "unicorn" hit rate remains low: only one or two companies reached unicorn status in 2024/2025, compared to an outlier year in 2021 where seven hit that mark. • The probability of success for a new cybersecurity startup is estimated at only 1% to 2%.
• Exercise Caution with Entry Prices: High entry valuations are not always balanced by the probability of a billion-dollar exit. Investors should be wary of "inflated" seed deals that are essentially bets on a team rather than a proven product. • Focus on "Science of Exceptions": Success in this sector is driven by outliers. Look for companies that demonstrate "organic" rather than "engineered" growth. • Gross Margins Matter: While AI companies are currently seeing margin compression due to inference costs, healthy cybersecurity businesses must eventually maintain high gross margins to be sustainable.
• Mentioned as a "Decacorn" and a standout performer in the Cyberstarts portfolio. • Demonstrated "insane" growth: In its first year of selling software, it went from $1M in Q1 to $2M in Q2, then $8M, then $24M. • Used as a benchmark for what "real greatness" looks like in terms of velocity.
• Velocity as a DNA Trait: When a company grows this fast, it becomes part of their organizational DNA. It is rarely a one-time event and usually predicts long-term dominance. • Secondary Market Context: Gili Raanan expressed regret for selling Wiz shares in secondary markets early, noting that holding would have yielded even higher returns despite the initial desire to provide liquidity to LPs.
• An enterprise browser company currently valued at $5 billion. • Notable for creating a market that "didn't exist" in 2019, competing against "free" products like Google Chrome and Microsoft Edge. • High adoption rates among Fortune 100 and financial services.
• Market Definition: Investment opportunities often lie in companies that define a new category rather than just entering an existing one. • Contrarian Value: Don't dismiss a product just because there is a free alternative; enterprise-grade security and features can command a massive premium.
• An AI-focused company that experienced a non-linear growth path. • After an initial start, they sold zero for two consecutive quarters before pivoting/modifying and then selling $12M in new business over the following 12 months.
• Persistence in Volatility: Even "winner" companies can have flat quarters. Investors should look for teams capable of deep analysis and modification during "zig-zag" periods rather than assuming a plateau is permanent.
• Discussion regarding the low multiples currently seen in public markets (e.g., Monday.com at 1.5x, Wix at 2.5x). • The market appears to be pricing in a "growth decline" due to fears of AI/autonomous programs displacing these businesses.
• Valuation Gap: There is a significant disconnect between private market valuations and public market multiples. • Growth Anticipation: Multiples are simply the market's anticipation of future growth. If these companies prove they can maintain growth despite AI threats, a "rebound" in multiples is likely.
• Mega-Funds: Large funds (e.g., Sequoia, Andreessen, Greylock) are still viewed as viable, but the overall venture market is "unbalanced" due to the massive influx of cash. • Secondary Liquidity: There is a growing trend toward "Employee Liquidity Funds." This allows employees to diversify their wealth without leaving the company, helping startups retain talent longer in a private state.
• Growth Benchmarks: "Exceptional" growth is defined as 4x, 4x, 3x, 3x on new ARR over the first five years. • AI Margins: There is uncertainty regarding whether AI companies will ever reach traditional software margins due to high inference costs. Raanan suggests that while margins aren't a priority in 2026, they will be the defining challenge by 2028–2029.
• Selfishness and Greed: Raanan argues these are "good traits" for early-stage investors to ensure they are getting into the best deals at the best possible terms. • Don't "Babysit": Investors should trust founders with large "cash cushions." Having extra money in the bank is rarely the primary cause of a startup's failure; poor product-market fit is. • Talent Retention: When evaluating late-stage private companies, check if they have secondary programs. Companies that don't allow employees to sell some shares risk losing their best talent to "vesting out."

By Harry Stebbings
The Twenty Minute VC (20VC) interviews the world's greatest venture capitalists with prior guests including Sequoia's Doug Leone and Benchmark's Bill Gurley. Once per week, 20VC Host, Harry Stebbings is also joined by one of the great founders of our time with prior founder episodes from Spotify's Daniel Ek, Linkedin's Reid Hoffman, and Snowflake's Frank Slootman. If you would like to see more of The Twenty Minute VC (20VC), head to www.20vc.com for more information on the podcast, show notes, resources and more.