Virtru secures $50 million investment to advance data

Virtru's technology centers on the Trusted Data Format, an open standard that embeds security controls directly into data files rather than relying on traditional perimeter defenses.

Virtru, a Washington, D.C.-based data security company that developed technology now used by U.S. defense and intelligence agencies, has raised $50 million in funding as organizations seek new ways to protect sensitive information in an era of artificial intelligence adoption.

The Series D round, led by investment firm ICONIQ with participation from Bessemer Venture Partners, Foundry, and The Chertoff Group, doubles the company’s valuation to $500 million. The funding reflects growing demand for data protection solutions that can secure information as it moves between organizations and systems.

Virtru’s technology centers on the Trusted Data Format (TDF), an open standard that embeds security controls directly into data files rather than relying on traditional perimeter defenses. The approach, which the company refers to as “microsecurity,” allows data to move across the internet with extra protections, regardless of where it goes.

The TDF standard was developed by Virtru co-founder Will Ackerly during his tenure at the National Security Agency. It has since been adopted as the data protection standard for national defense and intelligence missions across the United States and allied nations, according to the company.

More than 6,000 organizations now use Virtru’s platform, including major financial institutions like JPMorgan Chase, Capital One, and Equifax, as well as technology companies like Salesforce and the U.S. Department of Defense.

The funding comes as organizations grapple with new security challenges posed by AI systems, which can process and analyze vast amounts of data across different platforms and boundaries. 

Current data security approaches typically fall into two categories: internal controls that protect data within an organization’s systems, and external sharing tools that often sacrifice security for convenience. Virtru’s approach attempts to bridge this gap by embedding security directly into data files themselves.

“The evolution toward data security platforms that combine granular policy controls with real-time protection represents a fundamental shift in how organizations must approach data-centric security,” said Andrew Bales, senior principal analyst at Gartner. “The market is clearly moving toward solutions that provide persistent protection that travels with the data itself.”

The company plans to use the new funding to accelerate global adoption of the TDF standard, expand protection for AI and analytics workflows, and scale solutions for defense and critical infrastructure customers.

“This is a pivotal moment not just for Virtru, but for global security architecture,” said John Ackerly, CEO and co-founder of the company. “From day one, Virtru’s mission has been to unlock the full value of data by ensuring it remains under your control, everywhere it travels. AI represents a seismic shift in business workflows, dramatically amplifying the need for precise, data-centric security that moves seamlessly with data across all boundaries. This funding is a seminal moment as we continue to scale Virtru and make TDF the open platform of choice for data-centric security.”

100-plus companies call for ‘global surge’ in AI-powered cyber defense

OpenAI, Anthropic, Google, Microsoft, and others say there’s a narrow “defenders’ window” to strengthen security before AI-powered attacks become more sophisticated.

A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.

What the post-quantum executive order really demands of CISOs

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure