Oneleet Secures $33M to Redefine Security Compliance

From Locksmith’s Son to Cybersecurity Innovator

Growing up, Bryan Onel was inspired by his father, who worked as a locksmith. While his father focused on physical locks, Onel saw himself as the “digital equivalent.” As a teenager, he developed a passion for ethical hacking, later studying artificial intelligence at university.

That passion soon evolved into a decade-long career. “I spent a decade performing penetration tests for over 150 companies across all sectors,” Onel told TechCrunch. But time and again, he noticed that companies certified as “secure” were still easy to breach.

This led to a key realization: most businesses approached cybersecurity in one of two ways — either effective but painfully complex, or simple but ineffective. Many organizations, Onel observed, were doing only the bare minimum to remain compliant.

Launching Oneleet: A New Approach

In 2022, Onel co-founded Oneleet with his wife, Ora, and longtime friend, Erik Vogelzang. The goal was to create a comprehensive security compliance platform that could help companies achieve certifications while genuinely strengthening their defenses.

Unlike traditional compliance tools, which often act as evidence collectors to generate a certificate, Oneleet embeds active security measures.

“The result is compliance theater,” Onel explained. “You’re certified on paper, but still vulnerable to all kinds of attacks.”

Oneleet’s platform includes penetration testing, code scanning, cloud security, attack surface management, and employee training. By integrating these tools from the start, Oneleet helps companies save time and reduce risks.

“Because it’s integrated from the ground up, we can deploy comprehensive security with the click of a button,” Onel added. “That saves clients hundreds of hours and eliminates the blind spots that come from managing fragmented tools.”

Independent auditors are then brought in to provide formal certifications, ensuring credibility in compliance.

A $33 Million Boost for Growth

On Thursday, Oneleet announced a $33 million Series A round led by Dawn Capital. Onel described the fundraising as “straightforward,” noting that he immediately connected with Dawn Capital during a meeting in San Francisco.

“They already had deep knowledge of the security and compliance space and immediately understood what we were building at Oneleet, so there was instant alignment,” he said.

The funding round also saw participation from Y Combinator, Dropbox co-founder Arash Ferdowsi, and former Snowflake and ServiceNow CEO Frank Slootman. Oneleet previously joined Y Combinator’s Summer 2022 batch and reports that two-thirds of its new portfolio companies have since become clients.

With the new investment, Oneleet’s total funding rises to $35 million, while the company has already reached $9 million in annual recurring revenue (ARR). Competitors in the compliance sector include Vanta, Secureframe, and Sprinto.

Combating “Security Theater” with AI

The new capital will be used to scale engineering, enhance AI-driven capabilities, and expand customer outreach.

Onel highlighted how AI is changing the cybersecurity landscape:

• Advanced attackers are automating cybercrimes.

• Novice hackers are using tools to launch malicious attacks more easily.

• Some companies are adopting risky practices like “vibe coding” or granting AI access to critical systems without safeguards.

• AI can even be misused to generate fake compliance documents, creating a false sense of security.

Oneleet itself uses AI to support threat modeling, policy drafting, and background security analysis, but ensures that human experts verify results. “We’re responsible about it,” Onel emphasized, noting that this prevents inaccurate or misleading outcomes.

The Bigger Vision

Ultimately, Oneleet’s mission is to make strong security invisible yet effective.

“Good security should be invisible,” Onel said. “Companies should spend less time worrying about security and more time building great products. We have a shot at helping companies defend themselves more effectively than ever before.”

Author: Din Kumar