Marlinspike Co-Founder Neil Keegan and Vice President Nick Snoad sat down with Cyber Defense Magazine to discuss how the firm is navigating the increasingly complex intersection of national security, artificial intelligence, and autonomous systems. With approximately $225 million in assets under management (AUM), including the recent close of its second fund at approximately $127.3 million, Marlinspike is actively investing in early-stage cybersecurity and dual-use technology companies. The firm’s name is derived from the traditional mariner’s tool used to untangle tightly knotted rope, a fitting metaphor for its mission. Keegan and Snoad are focused on helping startups address some of the most complex challenges facing modern enterprise security and edge computing. As Keegan explained, “Marlinspike actually is a tool that has been used by mariners for hundreds of years… Imagine like a big tangled knot, so you can get in there and untangle the knot… From the Marlinspike investment firm’s perspective, we’re not afraid of a challenging situation.”
Redefining Identity Management in an Agentic World
The rapid evolution of Identity and Access Management (IAM) is one of the most urgent investment concerns. Recent data shows a startling change; Snoad argued that organizations are now faced with managing dozens of AI agents for every human user. Traditional human-centric identification boundaries are no longer relevant due to the rapid increase of machine-to-machine interactions. Before the business attack surface gets out of control, Marlinspike is primarily focused on finding startups that can authenticate, secure, and manage permissions for this influx of autonomous agents.
Securing the Edge and the Binary Layer
Another area Marlinspike is closely monitoring is the “simulation-to-real” gap in autonomous training and the rapid growth in autonomous systems and robotics adoption. Snoad noted that some autonomous models can achieve up to 95%+ efficacy in simulation, but reaching the last mile to get to actual deployment relies heavily on real-world data. Tools that can monitor data sets and identify the vulnerability to adversarial red teaming and dataset poisoning loom large. If an adversary poisons a training dataset, they can systematically trigger algorithm failures, hallucinations, and severe model drift at the edge. “If you can poison a dataset, you could break the autonomous system algorithm and make it have hallucinations, drift, etcetera,” and render it ineffective. When scaling that up to a macro fleet, the ramifications for companies, governments, and other stakeholders could be massive. Knowing whether an edge system is misperforming due to a faulty simulation engine or a malicious data-poisoning attack will be a defining capability for future industrial and defense networks.
“If you can poison a dataset, you could break the autonomous system algorithm and make it have hallucinations, drift, etcetera”
– Nick Snoad, Vice President of Marlinspike
Another area Marlinspike is closely monitoring is the “simulation-to-real” gap in autonomous training. Snoad noted that some autonomous models can achieve up to 98% efficacy in simulation, and the vulnerability to adversarial red teaming and dataset poisoning looms large. If an adversary poisons a training dataset, they can systematically trigger algorithm failures, hallucinations, and severe model drift at the edge. “If you can poison a dataset, you could break the autonomous system algorithm and make it have hallucinations, drift, etcetera,” Snoad said. Knowing whether an edge system is misperforming due to a faulty simulation engine or a malicious data-poisoning attack will be a defining capability for future industrial and defense networks.
The Strategic Leap: Moving from Commercial to Government Networks
When it comes to scaling early-stage cyber startups, typically targeting Seed+ to Series A rounds with check sizes ranging from low single-digit millions up to $10 million, Marlinspike enforces a strict and somewhat contrarian go-to-market philosophy. Unlike space or traditional hardware plays, Marlinspike explicitly advises its cybersecurity portfolio companies not to pitch to the government first, with Snoad stating, “It’s one of those rare industries where we tell people ‘don’t go to the government first’”. Instead, startups should build, refine, and perfect their platform on commercial networks first. Once strong product-market fit and commercial validation are achieved, Marlinspike leverages its extensive deep-tech and national security ecosystem to help companies navigate the grueling path toward IL5 and IL6 government certifications.
Featuring
Neil Keegan, Co-Founder & CEO
Nick Snoad, Vice President
About the Author
Carmen Estela is a Cybersecurity Research Analyst at Cyber Defense Magazine and a Women in Cybersecurity Award Candidate. She recently graduated with a Master’s of Science degree from the University of Central Florida and holds a Bachelor’s degree in Criminology from the University of Florida with certifications in Data Analytics and AI Fundamentals. She frequently speaks and volunteers at well-known industry gatherings, such as BSides Orlando and BSides Jax, where she offers her perspectives on emerging cyber trends. Carmen is committed to advancing the standards of governance, risk, and compliance within cybersecurity. She has also served as an adult protective investigator, police dispatcher, and legal intern, applying investigative skills across law enforcement, academic, and public service settings.
Reach her online at [email protected].
