Security startup Tolmo emerged from stealth on June 18 with $22 million in funding led by Accel, with Y Combinator participating. The company is building agents that investigate security issues using context from production systems. It says its first pentesting agents are already live with customers, while additional capabilities continue to roll out.
In the launch post, cofounder Pierre Betouin says Tolmo is working with more than 40 design partners. The announcement does not identify that group as 40 paying customers or disclose revenue.
The product connects an alert to its environment
Tolmo’s central idea is a Production Knowledge Graph that links code to deployments, production environments and surrounding services. Its agents use that context when examining pull requests, deployments and alerts.
An isolated warning can tell an engineer that a code pattern looks dangerous. Production context may help establish whether the affected code is deployed, what it connects to and which other systems could be involved. Tolmo is betting that those relationships make investigations more useful.
The company says its workflow can then pass context to a coding agent that proposes a fix. A proposed change still needs review and validation against the application it would alter; the funding announcement does not establish that every generated fix can be applied safely.
The founders bring an earlier security business
Tolmo names Pierre Betouin, JB Aviat, Vlad de Turckheim and Arnaud Breton as cofounders. The team previously built Sqreen, which Datadog acquired in 2021, and worked on security products inside Datadog.
That background helps explain the focus on runtime information and production systems. It remains separate from evidence about the new product’s performance.
The launch post reports hundreds of critical findings across design-partner environments, but does not provide an independent benchmark or a comparison with a common test set. For prospective customers, the useful evaluation would be whether Tolmo finds relevant issues in their own environment and supplies enough context to resolve them.
Follow the Startups & Ventures desk for more reporting on new software businesses.
