Introduction
Cybersecurity has become one of the most pressing challenges for modern businesses, yet too often, compliance measures amount to little more than box-ticking exercises. Bryan Onel, who grew up with a locksmith father and later became the “digital equivalent” through his passion for ethical hacking, witnessed firsthand how broken the system had become. After a decade of penetration testing, he realized that most companies were settling for “compliance theatre” — certifications that looked good on paper but left businesses dangerously vulnerable. His answer to this problem was Oneleet, a platform designed to merge compliance and real security into one seamless solution.
Main Content
Launched in 2022 by Onel, his wife Ora, and college friend Erik Vogelzang, Oneleet offers companies an all-in-one compliance and security platform. Unlike competitors that focus on evidence collection for certification, Oneleet integrates penetration testing, code scanning, cloud security, attack surface monitoring, and even staff training into a single platform. Independent auditors then provide formal certification, ensuring compliance isn’t just paperwork but a true reflection of an organization’s security posture.
“Because it’s integrated from the ground up, we can deploy comprehensive security with the click of a button,” Onel explained. This streamlined approach eliminates blind spots caused by fragmented tools and saves clients hundreds of hours.
On Thursday, Oneleet announced a $33 million Series A round led by Dawn Capital, with participation from Y Combinator, Dropbox co-founder Arash Ferdowsi, and former Snowflake and ServiceNow CEO Frank Slootman. The company, which previously graduated from Y Combinator’s Summer 2022 batch, has now raised $35 million in total. Oneleet already boasts $9 million in annual recurring revenue, with two-thirds of new YC portfolio companies adopting its platform.
The funding will be used to expand engineering teams, boost AI capabilities, and scale outreach to new customers. Onel noted that AI is both a blessing and a curse for cybersecurity: while it enables more advanced defenses, it also allows attackers to automate and scale their malicious campaigns. Oneleet leverages AI for threat modeling and drafting policies but ensures human oversight to avoid errors or “hallucinations.”
Conclusion
With competition from the likes of Vanta, Secureframe, and Sprinto, Oneleet faces a crowded market. But its vision — ending “security theatre” by combining real defense with compliance — sets it apart. As AI reshapes both the attack surface and defensive strategies, Oneleet is positioning itself as the tool that makes security both effective and invisible. For Onel, the mission is clear: companies should spend less time worrying about compliance checklists and more time focusing on innovation, knowing their security is truly built in from the ground up.