Incident sheet · SIG-9441 · /security
- Signal
- SIG-9441
- System
- SEC · Security & Risk
- Filed
- Read
- 4 min · 790 words
- Severity
- Routine
$250M Cyber Fund, Solo GP Bet: Stephen Ward Rides the Exit Window
Brightmind closed a $250M debut fund, sold SGNL to CrowdStrike for $740M in 11 months, and is now raising again with one GP. Early-stage cyber deals hit $4.7B.

Event log
- Brightmind closed a $250M debut cybersecurity fund and is raising a second of similar size as sole GP
- CrowdStrike agreed in January to buy SGNL for $740M, 11 months after Brightmind led its Series A
- Early-stage cyber deals hit $4.7B through September, per PitchBook, with seed rounds averaging $8.4M
- Ward spent 18 months clearing his name after a hacker-informant accused him; the hacker got 20 years
- Departed co-founder Talpaz now targets a $170M fund at new firm Cognition
Brightmind Partners closed a $250 million debut cybersecurity fund late last year, and its co-founder Stephen Ward is now raising a second fund of roughly the same size — alone. Gur Talpaz, his co-founder and fellow general partner, left in April. So did another early colleague. Ward is betting the entire franchise on himself at 49, in a market where most GPs preach IPO patience.
Ward does not. "You have to sell on the way up," he says. In cybersecurity, he argues, the best sales come between a startup's third and seventh years. His fund tracks every security acquisition and maps what buyers build versus buy. If Palo Alto Networks buys something, he says, CrowdStrike will feel "FOMO, then Zscaler is going to look over and go, 'What did they just do? I should probably do the same thing.'" That is a thesis. Whether it compounds across a portfolio remains unproven with only one exit so far.
What has Brightmind actually delivered?
The record is thin but real. Brightmind's first fund has made 14 investments and produced one exit: SGNL, the identity security startup CrowdStrike agreed in January to buy for $740 million — 11 months after Brightmind led its Series A. That is a fast mark by any standard. Some limited partners, Ward says, asked why the firm did not ride the bet longer. His answer: he warns founders when they are "going to race past the turn." No data yet proves the calls he declined would have paid better.
The SGNL sale carries a caveat worth noting. One exit in fourteen bets is a sample size, not a track record, and Ward's second raise will test whether LPs accept that.
Who is Stephen Ward?
His résumé is unusual for venture capital: four years in Coast Guard search and rescue, nine years in the Secret Service, then CISO roles at TIAA (six years) and Home Depot (two, starting 2019). He joined the Secret Service in 1998 after mailing out roughly 300 résumés with no responses; a Seton Hall professor who served as chaplain to agency personnel made introductions. He moved into cyber investigations after the September 11 attacks.
Then came the ordeal that shaped his exit pragmatism. Stationed in New York, Ward arrested a hacker behind the largest credit card data theft of that era. Instead of charging him, Ward flipped him into an informant and ran him for about three years. The hacker kept hacking behind his back, and when caught again, accused Ward of complicity as a diversion. Ward had already left for J.P. Morgan, recruited in 2007 to build a cybersecurity unit. He spent roughly 18 months clearing his name, describing it as "almost like a spouse cheating on you." The hacker received a 20-year sentence. Audible turned the case into an eight-episode podcast, "Operation Firewall."
After Home Depot, Ward joined Insight Partners — turned down a Wiz role in the process — and spent three years on deals including Wiz, Abnormal Security, and Elisity, which IonQ agreed in October to buy for up to $1.3 billion. Wiz itself sold to Google for $32 billion; the friend who took that job, Ward says, "made life-changing money."
Why is the market moving his way?
PitchBook counts $4.7 billion in seed-through-Series B cybersecurity deals through September — already ahead of all of 2025 — even as deal count fell to 248 from 358. The average seed round jumped to $8.4 million from $5.54 million a year earlier. Early-stage is outraising later-stage for the first time in over a decade.
Ward is skeptical of the AI-security label. PitchBook bucketed 278 deals as AI security in the first half of 2026; his team's manual review found only 30 that qualified. He expects Anthropic and OpenAI to do "just enough" in security, not dominate it.
What changes with the partnership split?
Talpaz and Tayler Sipperly, both CrowdStrike corporate development alumni, left in April. Ward cited "differences in opinions regarding operations and the future of Brightmind." In August, they co-founded Cognition with CrowdStrike's global CTO Elia Zaitsev, reportedly targeting a $170 million first fund. Sipperly says they "continue to support the existing Brightmind portfolio companies as well as its limited partners" and remain on several boards — a governance wrinkle Ward did not address.
Brightmind now runs on five people, with AI agents built by CTO Jamie Mneimneh sourcing most deal flow, which keeps analyst costs down. The second fund will put about 20% into AI infrastructure; roughly 40% of the debut fund's startups are based in Tel Aviv. Ward targets a "3x net fund" and, by his own account, will not celebrate before he gets it.
via techcrunch.com (Source)
More from Daniel Okafor
Show full bio
Staff writer covering technology and product news in enterprise information technology and the leaders who run at CIO Monitor.
129 articles
The newsroom digest
One email a day with the stories that matter. No noise.
Cross-references
- Norwest Raises $4 Billion Fund to Push Deeper Into AI Investing
- Anthropic’s $1.33T IPO Plan Comes With Cheaper Claude Models
- H&M Investigates Potential Data Breach After ShinyHunters Claim
- Anthropic's IPO could mint seven $250 million founder exits
- Microsoft Dismantles PhaaS Marketplace Behind 1 Billion Malicious Messages