For two decades, the RSAC Innovation Sandbox has consistently identified emerging cybersecurity companies poised for major success. The contest boasts an impressive track record: alumni have secured over $50.1 billion in investment and been acquired over 100 times, making it a highly reliable indicator of future industry leaders.
The Power of Generational Innovation
The Sandbox doesn’t just highlight individual companies; it fosters a unique ecosystem. According to Cecilia Marinier, VP of Innovation at RSAC, there’s a clear pattern of founders acquiring other founders, creating a compounding effect of knowledge and opportunity.
This cycle is visible in the success stories of alumni like Donnchadh Casey and James White (Calypso AI, acquired by F5), whose acquirer, Kunal Anand, was himself an RSAC 2016 finalist. The same pattern repeats with Imperva’s acquisition of Prevoty, and CrowdStrike’s acquisition of Pangea, demonstrating a tight-knit network of founders, operators, and acquirers that shapes the cybersecurity landscape.
Recent Successes Highlight the Impact
Several recent Sandbox alumni have achieved significant exits:
- Securiti AI was acquired by Veeam for $2.7 billion.
- ProjectDiscovery secured funding and talent after winning last year’s contest.
- Gretel AI was sold to Nvidia by a 2017 finalist.
These outcomes underscore the real-world value generated by the Sandbox network. Marinier emphasizes the scale: “Those numbers speak for themselves.”
The 2026 Finalists: Facing New Challenges
This year’s Top Ten finalists, pitching on March 23 at the Moscone Center in San Francisco, tackle some of the most pressing challenges in enterprise security:
- Agentic AI governance
- Non-human identity management
- Social engineering defense
- Supply chain provenance
- AI-native code security
The finalists include Charm Security, Clearly AI, Crash Override, Fig Security, Geordie AI, Glide Identity, Humanix, Realm Labs, Token Security, and ZeroPath. Each company aims to address emerging threats, particularly those introduced by the rapid evolution of artificial intelligence.
AI Dominates This Year’s Theme
Agentic AI is a dominant theme among the finalists, with solutions focused on governance, monitoring, automation, and defense against malicious AI agents. Marinier notes, “Governance for AI… everything from threat modeling to how to use agentic AI, and then controlling against agentic AI getting into systems, it’s all there in our top 10.”
Rigorous Judging Ensures Quality
The RSAC Innovation Sandbox benefits from a highly selective judging panel comprised of industry leaders: Nasrin Rezai (Verizon CISO), Larry Feinsmith (JPMorganChase), David Chen (Morgan Stanley), Paul Kocher (cryptographer), and Niloofar Razi (Capitol Meridian Partners). RSAC does not interfere with the selection process, ensuring impartiality. The judges seek startups with high growth potential, leveraging their expertise to identify future industry disruptors.
$5 Million Investment Boosts Finalists
Starting in 2025, all ten finalists will receive a $5 million SAFE note investment from Crosspoint Capital. This funding extends their runway, allowing them to scale infrastructure and capitalize on the visibility generated by the contest.
Beyond the Contest: A Broader Innovation Ecosystem
The Innovation Sandbox is part of a larger RSAC innovation framework that includes:
- Launch Pad: An early-stage forum for real-time feedback.
- Early Stage Expo: Showcasing emerging companies.
- Innovation Showcase: Year-round engagement with entrepreneurs.
- Security Scholars program: Supporting the next generation of researchers.
This interconnected system aims to foster continuous innovation and collaboration across the cybersecurity industry.
Why Attend RSAC?
For CISOs, founders, investors, and engineers, RSAC is a critical event for staying ahead of the curve. Marinier argues, “Building a safer society requires bold ideas… RSAC Conference is bringing together some of the newest, smartest, and most innovative security perspectives.” The Sandbox contest kicks off on March 23 at 9:30 AM PT, with winners announced by noon the same day.
The RSAC Innovation Sandbox is more than just a contest; it’s a proven engine for identifying and accelerating the future of cybersecurity.
