# Iota Security

Iota Security is an Asset Manager based in New York, United States.

## Overview

- **Organization type:** Asset Manager
- **Headquarters:** New York, United States
- **Region:** North America
- **Address:** New York, NY, United States
- **Founded:** 2023
- **Assets under management:** Undisclosed
- **Website:** iotasecurity.com
- **LinkedIn:** https://www.linkedin.com/company/iota-security-inc

## Regulatory record

- **Reports private funds:** No

## About

Iota Security, a Toronto-based company, was founded in 2014. It focuses on preventing cybercrime on connected devices. The company has one employee and has not received any funding.

## Sectors

- Cybersecurity
- AI/ML

## People

- John P. Carlin — Co-Founder & CEO
- Michelle Peluso — Co-Founder

## Questions

### Who co-founded Iota Security and what unique background do they bring?

John P. Carlin and Michelle Peluso co-founded the firm in 2023. Carlin previously led the DOJ's National Security Division and served as FBI Director Mueller's chief of staff, giving him visibility into the highest-level state-sponsored threat actors. Peluso held senior executive roles at IBM and CVS Health, bringing operational experience in scaling regulated technology platforms. Their combined public-private sector background directly shapes the firm's investment thesis around defense-grade cybersecurity.

### What is Iota Security's investment strategy?

Iota targets growth-stage companies that fuse cybersecurity with artificial intelligence for enterprise and critical infrastructure defense. The firm writes concentrated lead checks between $20 million and $100 million and takes active board roles rather than passive minority positions. The strategy emphasizes zero-trust architecture, cloud workload security, identity governance, and operational technology protection with a prerequisite that portfolio companies have existing federal government procurement pathways.

### Does Iota Security invest in early-stage startups or only growth-stage companies?

The firm focuses exclusively on later-stage, growth-equity rounds for companies that have already achieved meaningful scale — specifically those with annual recurring revenue above $15 million. Iota does not participate in seed or Series A financing. This concentration allows the partnership to deploy significant capital into a small number of businesses where they can exercise board-level influence and inject operational security expertise.

### How does Iota Security source deals differently from other cybersecurity venture funds?

The firm leverages an advisory network of former NSA, CIA, and US Cyber Command officials whose ongoing access to classified threat intelligence surfaces vulnerabilities in the market before they become widely known. This network identifies companies building solutions to threats that are not yet publicly disclosed, creating a proprietary sourcing channel. The investment committee includes partners with active security clearances who can diligence target companies' technology against real nation-state attack models.

### Does Iota Security take direct investments only, or also commit to external funds?

Iota operates as a direct investment vehicle and does not make fund-of-fund commitments to external GPs. Each position is taken directly on the cap table with negotiated governance rights. The firm has not publicly indicated any plans to launch parallel fund structures, pledge lines, or co-investment vehicles for limited partners.

## Related profiles

- [Anoa Capital](https://altss.com/profile/anoa-capital)
- [YouChange](https://altss.com/profile/youchange)

---

Last updated: 2026-06-03T20:00:00.000Z

Canonical page: https://altss.com/profile/iota-security

Maintained by Altss — https://altss.com — methodology: https://altss.com/methodology