Sweet Security
Runtime CNAPP unifying cloud and AI security with LLM-driven detection.
About
Sweet Security is a runtime-first cloud security platform built on an eBPF sensor that watches workloads in real time. Instead of periodic scans, it detects attacks as they happen, correlates identity, posture, and workload signals, and automates response. A granted US patent covers its LLM-based detection of anomalous log sessions, which it says cuts noise and exposes multi-step attacks that rule-based systems miss.
In November 2025 Sweet raised a $75M Series B led by Evolution Equity Partners, bringing total funding to $120M, alongside 6x ARR growth and 10x enterprise customer expansion. It has extended the same runtime approach to AI with an AI Security Platform that maps models and agents, detects shadow AI and prompt injection, and enforces guardrails without slowing development teams.
What it can do
- eBPF-based real-time runtime threat detection\nLLM-driven anomaly detection with US patent\nAI Security Platform for models, agents, and shadow AI\nUnified identity, posture, and workload protection
Setup
Request a demo at sweet.security; eBPF sensor deployment
Prerequisites
Cloud workloads (AWS/Azure/GCP/K8s); security team for rollout
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 102; Trending score 80/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.