Stephen Ward’s Brightmind Partners raises second $250M cybersecurity fund

Second $250M fund targets early-stage cybersecurity startups

Brightmind Partners, a New York-based cybersecurity venture firm, has started raising its second $250 million fund. The firm was founded in 2024 by Stephen Ward, a former Secret Service agent and chief information security officer (CISO) at TIAA and Home Depot. Brightmind closed its first $250 million fund in 2025, and its portfolio company SGNL was acquired by CrowdStrike for $740 million in January 2026—just 11 months after the firm led SGNL’s Series A round.

Brightmind shrinks to five after co-founder’s exit

Ward is now the sole general partner at Brightmind after Talpaz’s departure. The firm has shrunk to five employees: COO Iva Messy, who joined from Felicis and Andreessen Horowitz; principal Sven Wollschlaeger, who worked alongside Ward at Insight Partners; CTO Jamie Mneimneh; and chief of staff Taylor Cleveland. Ward described the split with Talpaz as the result of "differences in opinions regarding operations and the future of Brightmind."

Tayler Sipperly, Talpaz’s former colleague, told TechCrunch that he and Talpaz "continue to support the existing Brightmind portfolio companies as well as its limited partners." Cognition, their new firm, is poised to compete for deal flow, particularly in Israel, where Brightmind has already invested in nearly 40% of its debut fund’s startups.

AI deal sourcing and a focus on Israel

Brightmind’s second fund will dedicate about 20% of its capital to AI infrastructure, with a focus on Israel. Nearly 40% of the firm’s debut fund investments were in Tel Aviv, reflecting Ward’s preference for backing second-time founders with strong technical teams.

The firm sources deal flow using AI agents, which screen startups and surface opportunities based on data-driven criteria. This approach aligns with Ward’s emphasis on measurable outcomes, including clear timelines for exits.

Early exits and a funding shift in cybersecurity

Ward’s investment philosophy is built on pragmatism, particularly when it comes to exits. He advises founders to target acquisitions between their third and seventh years, a stance shaped by his experience with SGNL’s rapid $740 million sale to CrowdStrike. This timeline contrasts with the traditional venture capital playbook, which often pushes for IPOs or later-stage sales.

Early-stage cybersecurity startups raised $4.7 billion in seed-through-Series B deals through September 2026, surpassing later-stage funding for the first time in over a decade. The average seed round has also grown to $8.4 million, up from $5.54 million in 2025, reflecting higher expectations for early-stage companies.

Investment strategy: M&A timing and market gaps

Brightmind’s debut fund has made 14 investments so far, with SGNL as its only exit. Ward’s team systematically tracks every security acquisition and analyzes buyer behavior, using these insights to guide their own investment decisions.

Ward believes established cybersecurity companies like Palo Alto Networks, Zscaler, Qualys, and Tenable are vulnerable to disruption. He sees opportunities for startups that build cyber-specific AI models capable of running locally on a customer’s systems, rather than relying on generic cloud-based solutions.

From Secret Service to venture capital: Ward’s unconventional path

Ward spent nine years in the Secret Service, where he specialized in cyber investigations. His career took a dramatic turn when he arrested a hacker responsible for the largest credit card data theft of that era. After flipping the hacker into an informant, Ward ran him for three years—until the hacker continued his criminal activities behind Ward’s back, implicating Ward in the process. Ward spent 18 months clearing his name, and the hacker later received a 20-year sentence. Audible turned Ward’s story into an eight-episode podcast, Operation Firewall.

After leaving the Secret Service, Ward built a corporate cybersecurity career, including six years as CISO at TIAA and two years at Home Depot. In 2021, he quit Home Depot without another role lined up. Jeff Horing, a venture capitalist at Insight Partners, interviewed Ward for a role at Wiz but instead offered him a position at Insight, where Ward spent three years working on investments in Wiz, Abnormal Security, and Elisity.

In 2024, Ward co-founded Brightmind with Gur Talpaz, a former CrowdStrike corporate development executive. Their debut $250 million fund closed in 2025, but Talpaz left the firm in April 2026, taking another early colleague with him. Talpaz and the colleague launched a rival venture firm, Cognition, targeting a $170 million fund for cybersecurity startups.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

Ward’s second fund arrives as early-stage cybersecurity funding hits $4.7 billion—more than later-stage deals for the first time in a decade. His insistence on exits between a startup’s third and seventh years forces founders to focus on unit economics and M&A readiness from day one. The 20% allocation to AI infrastructure also means startups must prove their models are cyber-specific and locally deployable, not just rebranded AI tools.

Key takeaways

• Early-stage cybersecurity founders now face a $4.7 billion funding pool but must meet Ward’s expectation of exits within 3-7 years.
• Ward’s 20% AI infrastructure allocation pressures startups to build cyber-specific, locally deployable models.
• Founders should prepare for M&A as early as year three, as Ward’s data-driven approach demands clear exit timelines.
• The departure of Ward’s co-founder to launch a competing $170 million fund adds a new rival for deal flow, particularly in Israel.

Related on Lazyfounder

• Parents turn to AI agents for household tasks amid lingering privacy fears
• Texas data center freeze and global protests split AI infrastructure sector