How much has HiddenLayer raised?
About $155M in total, including a $100M Series B announced on September 2, 2026 led by Delta-v Capital, with Ten Eleven Ventures, Morgan Stanley, M12 and Booz Allen Ventures participating.
Beam vs HIDDENLAYER
Beam vs HiddenLayer
HiddenLayer secures models and agents at runtime for enterprises and raised a $100M Series B on September 2, 2026 led by Delta-v Capital, taking it to roughly $155M raised. It operates at the deployed-AI layer. Beam works at the developer endpoint, observing what a coding agent did, without enforcement.
Beam vs HiddenLayer, side by side
Details below are drawn from a September 2026 review of the AI agent security market. Some figures are vendor-sourced or analyst estimates, and this is a fast-moving space — check with each vendor before you buy.
| Beam | HiddenLayer | |
|---|---|---|
| What it is | Local-first activity monitor and pre-run scanner for AI coding agents. Early prototype. | Enterprise platform for model and agent runtime security. |
| Monitoring | Shell commands, file changes, tool calls, network endpoints and browser actions from harnesses such as Claude Code, Codex and Cursor, normalised into local NDJSON with risk flags and evidence attached. | Model and agent runtime security across enterprise AI deployments. |
| Skill / MCP scanning | Yes. SKILL.md files and MCP configurations are scanned before you run them, using 11 heuristic patterns plus an MCP version-pin check. | Not specifically covered in our source research. |
| Blocking / enforcement | No. Beam observes and flags. It never allows or denies an action. | Runtime protection is core to the product. |
| Individual use | Runs locally for one person on one machine. Shared teams, fleet rollout and approvals are not built yet. | None. Enterprise platform sale. |
| Deployment | A local collector plus a local interface. No MDM package, no central console, no SSO, no SOC 2, no SIEM forwarding. | Enterprise deployment. |
| Source / licence | Not open source today. | Commercial, not open source. |
| Pricing | Not published. | Enterprise custom quote, no public price. |
HiddenLayer in numbers
As reported in our source research. Some figures are estimates.
- Series B
- $100M on September 2, 2026, led by Delta-v Capital
- Other investors
- Ten Eleven Ventures, Morgan Stanley, M12 (Microsoft's Venture Fund), Booz Allen Ventures
- Total raised
- About $155M
- Reported growth
- ARR up more than 10x and 50+ new enterprise customers
Where HiddenLayer does more
- Runtime protection for models and agents at enterprise scale, which Beam does not attempt.
- Well capitalised: a $100M Series B on September 2, 2026 and about $155M raised in total.
- Established enterprise customer base, with more than 50 new enterprise customers reported.
Where Beam differs
- Beam covers the developer endpoint — the agent running on someone's laptop — rather than deployed models.
- Beam is local-first: data stays on the machine and credentials are redacted before writing.
- Beam's pre-run scan targets SKILL.md files and MCP configurations specifically.
Beam’s current gaps
- Beam observes and flags. It has no blocking or enforcement, so it cannot stop a destructive command.
- There is no MDM package, central console, SSO or SOC 2 report, so it is not ready for a managed fleet rollout.
- Scanning is heuristic pattern matching. It produces false positives, misses novel phrasing, and is not a guarantee of safety.
- Beam is early and has no published pricing. Every tool on this page is further along in at least one dimension.
Which one fits
If your risk sits in deployed models and production agents, HiddenLayer is built for that and is well resourced. Beam addresses a narrower surface: the coding agent on a developer's machine.
FAQ
Does HiddenLayer monitor coding agents on a laptop?
Our source research describes model and agent runtime security for enterprise AI rather than developer-endpoint monitoring, which is Beam's focus.
Is Beam an alternative to HiddenLayer?
Not really. Beam is an early local prototype with no enforcement, no console and no compliance certifications. They address different layers.
See how Beam works
Beam is an early, local-first prototype. Read what it actually does today before comparing it further.