Elevate Security

Elevate Security

Robert Fly and Masha Sedova launched Elevate Security in 2017 after observing that most cybersecurity tools ignored the human element. Fly led security and engineering teams at Salesforce and Microsoft; Sedova founded Salesforce’s security behavior training program. The company raised $18.25M in venture funding before acquisition. The platform ingests telemetry from phishing, malware, browsing, and data-handling events to produce an organization-wide risk score per user. Its core insight — that roughly 8% of users drive 80% of incidents — translates into automated coaching, conditional access policies, and governance reviews. Elevate markets to enterprises globally, with named customers across healthcare, biotech, travel, and hospitality. Partners include Novacoast and integrations with Cisco and Cyentia Institute. Elevate operates as a Mimecast subsidiary following its acquisition in early 2024. The deal aimed to broaden Mimecast’s email security suite into workforce risk management. The leadership team, including Fly and Sedova, remains in place. Six additional executives are named on the firm’s site, though total headcount is undisclosed. Elevate's structural differentiator is its niche within cybersecurity: it exclusively focuses on user behavior risk, not network or endpoint threats. That narrow mandate avoids competition with broad SIEM or XDR platforms, positioning Elevate as a complementary layer for enterprises already running those tools. May 2024: Mimecast completed its acquisition of Elevate Security (per firm website).