Most corporate employees in America have likely signed up for ChatGPT. And Claude. And possibly Cursor. Their employer’s security team has no idea—or even if they do, they can’t keep up. This paradox is why Vanta is having a blockbuster year.
The San Francisco-based security and compliance company has crossed $300 million in annual recurring revenue, Fortune exclusively learned. This milestone represents a tripling of ARR in two years. Vanta’s customer growth rate has also accelerated to roughly 60% year-over-year—a number that has gone up in each of the past four quarters, the company said. Sources with knowledge of Vanta’s balance sheet say that its net revenue retention (NRR) has similarly increased every quarter for the last 2 years and continues to be over 100 percent.
Vanta now serves more than 16,000 customers, including Snowflake, Atlassian, Duolingo, Ramp, Cursor, and Harvey.
The company’s success stands firmly against the backdrop of its last public valuation in July 2025: $4.15 billion. At the time, Wellington Management led a $150 million Series D alongside Sequoia, Goldman Sachs Alternatives, J.P. Morgan, Craft Ventures, Y Combinator, Atlassian Ventures, and CrowdStrike Ventures. Vanta has raised more than $500 million since CEO Christina Cacioppo and engineer Erik Goldman founded the company out of Y Combinator in 2018. Cacioppo—who taught herself to code from books before writing Vanta’s first prototype—now oversees roughly 1,000 employees.
What’s pulling the curve up is a problem that didn’t exist at scale 24 months ago. Vanta’s own data, drawn from its third-party risk management product and released in a recent report, found that 70% of companies now have shadow AI—tools employees adopted without security review. The company also reported that LLMs are 52% more likely to be flagged as high risk than traditional SaaS. In a single year, the average company sees employees reinstall an AI tool 1,000 times after security has revoked it. The most-reinstalled offenders, per Vanta: Claude, ChatGPT, and Cursor.
“There’s this push-pull going on at an actually really broad scale,” Cacioppo told Fortune, describing executives demanding AI transformation while security teams scramble to assess what’s already on the network. The fix, she argues, is continuous monitoring.
“AI is exciting, but also scary and risky,” Cacioppo said. “It’s that combination of new, quickly growing AI hyperscalers with more risk and more scrutiny that is letting Vanta’s growth rate actually increase year over year.”
Now, the $65.2 billion governance, risk, and compliance field is watching a category leader extend its lead. As for the inevitable IPO question, Cacioppo demurred: “The goal is the long-term sustainable company versus the day of confetti.”
See you tomorrow,
Lily Mae Lazarus
X: @LilyMaeLazarus
Email: lily.lazarus@fortune.com
Submit a deal for the Term Sheet newsletter here.
Joey Abrams curated the deals section of today’s newsletter. Subscribe here.
VENTURE CAPITAL
– TrueAnomaly, a Centennial, Colo.-based developer of space technology, raised $650 million in Series D funding. Eclipse and RiotVentures led the round and were joined by Paradigm, Atreides, G Squared, ThePrivateSharesFund, VanEck, and others.
– GoldenChild, a Miami, Fla.-based dog food company, raised $37 million in funding from Atomic, A*, and RedpointVentures.
– Fence, a New York City-based developer of internet-native infrastructure for debt capital markets, raised $20 million in funding. GalaxyVentures led the round and was joined by existing investors ParaFiCapital and CraneVenturePartners.
– Windmill, a New York City-based AI-powered performance review platform, raised $12 million in funding. InspiredCapital led the round and was joined by PrimaryVenturePartners, FounderCollective, and OceansVentures.
– Redpine, a Stockholm, Sweden-based knowledge layer for agentic AI, raised €6.8 million ($8 million) in seed funding. NordicNinja led the round and was joined by LuminarVentures, node.vc, and angel investors.
– Dex, a London, U.K.-based AI talent agent, raised $5.3 million in seed funding. NotionCapital led the round and was joined by a16zSpeedrun, ConceptVentures2100, and angel investors.
– Betterness, a Miami, Fla.-based developer of autonomous AI agents for personalized wellness, raised $2.5 million in seed funding from MartinVarsavsky, JustinStone, and others.
– Tapaya, a Prague, Czech Republic-based payments infrastructure startup, raised €1 million ($1.18 million) in pre-seed funding. PassionCapital and DepoVentures led the round and were joined by BADideas.fund.
PRIVATE EQUITY
– Artemis acquired Optikos, a Wakefield, Mass.-based optical technologies company. Financial terms were not disclosed.
– ClearCourse, backed by Aquiline, acquired Kurve, a Newport, Wales-based developer of self-service kiosk technology. Financial terms were not disclosed.
– SuperiorHealthPartners, a portfolio company of RenovusCapitalPartners, acquired Chant Healthcare, a Stigler, Okla.-based provider of home health, home care, and hospice services operating through CompassionHomecare and SansBoisHospice. Financial terms were not disclosed.
– ValorExteriorPartners, a portfolio company of OsceolaCapital, acquired AssociateRoofing, a Braintree, Mass.-based exterior home services company. Financial terms were not disclosed.
EXITS
– AcronTechnologies acquired SightlineIntelligence, a Portland, Ore.-based video processing and AI-powered defense solutions company, from ArtemisCapitalPartners. Financial terms were not disclosed.
– ProtectiveLifeCorporation agreed to acquire ObsidianInsuranceHoldings, a New York City-based property, casualty, and specialty insurance platform, from GenstarCapital. Financial terms were not disclosed.
PEOPLE
– InTandemCapitalPartners, a New York City-based private equity firm, appointed ElliotCooperstone CEO and managing partner, BradCoppens president and managing partner, ChrisReef to partner, AaronNewman as principal, LaurenMangino to managing director, and JacksonMonnin to vice president.