A $6.4 billion bet on governing the AI workforce
On September 24, 2026, the Dallas-based cybersecurity company Island announced a $400 million Series F funding round that values it at $6.4 billion. The round was led by Evolution Equity Partners, with participation from a long roster of existing investors — Prysm Capital, Sequoia Capital, Coatue Management, Cyberstarts, Insight Partners and J.P. Morgan Growth Equity Partners among them — plus a personal investment from cybersecurity entrepreneur Dmitri Alperovitch, the former CrowdStrike chief technology officer. The valuation marks a 33 percent step-up from the $4.8 billion price Island commanded in its March 2025 Series E, and more than doubles the $3 billion valuation it reached in 2024. With this raise, Island's total funding now tops $1 billion, according to SecurityWeek — a remarkable sum for a company that launched its flagship product just four years ago.
But the more interesting story than the numbers is the repositioning. Island made its name with the "enterprise browser" — a Chromium-based browser that embeds security controls, data-loss prevention and productivity tooling directly into the application where employees spend most of their working day. With this round, the company is recasting itself as something broader: an "agentic control plane," a single policy and audit layer that governs not just what employees do inside corporate systems, but what AI agents do as well. As companies deploy autonomous software agents to handle everything from customer support to code deployment, someone has to set the rules for what those agents can access, what data they can move, and who is accountable when they act. Island is arguing that the answer is the browser.
The round in detail
The Series F is notable as much for who showed up as for how much was raised. Nearly every major investor from Island's earlier rounds returned — a sign of conviction that is easy to understate. Late-stage rounds at step-up valuations often see early backers take profits or reduce exposure; here, Sequoia, Coatue, Cyberstarts, Insight Partners, J.P. Morgan Growth Equity Partners, Prysm Capital, Alta Park Capital, Georgian, G Squared and Squarepoint all joined. Evolution Equity Partners, a cybersecurity-focused fund, led the round. And Dmitri Alperovitch — who co-founded CrowdStrike and helped define modern endpoint security — invested personally, a meaningful endorsement from someone who has seen this industry's cycles up close.
The valuation history tells the story of a company compounding credibility. In 2024, Island was worth $3 billion after raising $175 million. In March 2025, a $250 million round priced it at $4.8 billion. Now, eighteen months later, $6.4 billion. Each step-up has been accompanied by reported business momentum: CTech reported that Island had reached approximately $200 million in revenue by September 2026, growing at roughly 100 percent a year, and the company says it has doubled its annual recurring revenue in every fiscal year since its 2022 launch. At a $6.4 billion valuation against roughly $200 million in revenue, investors are paying a multiple north of 30 times revenue — a price that only makes sense if the growth continues and the market Island is addressing turns out to be as large as its investors believe.
Why the browser is becoming an AI governance layer
The strategic logic of Island's pivot is worth understanding, because it says something important about where enterprise AI security is heading. The browser is where work happens: employees and agents alike access software-as-a-service applications, corporate data and internal tools through it. Traditional security tools — firewalls, endpoint agents, API gateways — monitor the network or the device, but the browser is the point where a user's intent meets the application. If you want to enforce a policy like "this AI agent may read customer records but may not export them," the browser is a natural place to do it, because it sees the interaction as it happens.
"We've entered a new era in which people and AI agents work side by side. Just like humans, agents need the right context, access, guardrails, and accountability to succeed," said Mike Fey, CEO and co-founder of Island. "Island created the first Enterprise Browser to protect the primary place people work. This investment gives us even more capacity to innovate with our customers and help them safely scale AI."
The "agentic control plane" framing puts Island in direct conversation with one of the enterprise software industry's most urgent questions: who governs the agents? As organizations hand real responsibilities to autonomous systems — processing refunds, updating records, triaging tickets — the risk surface expands from human error to machine error at machine speed. An agent that misinterprets an instruction can move faster and do more damage than a careless employee. Regulators are beginning to ask how companies oversee these systems, and auditors are beginning to ask for logs. A platform that can show, for every agent action, what was accessed, by which agent, under whose authority, and with what result, is selling something close to compliance infrastructure — a category enterprises historically pay for without much price sensitivity.
Where the money goes
Island plans to use the new capital across four fronts: expansion in Europe and Asia-Pacific, significant growth of its R&D team, additional platform capabilities, and marketing investment, according to the company's chief customer officer Bradon Rogers. The geographic expansion is significant. Enterprise browser adoption has been strongest in North America, but the regulatory pressures driving demand for AI governance — data sovereignty rules, AI accountability frameworks — are arguably sharpest in Europe, where the EU's AI Act is creating new compliance obligations for companies deploying AI systems. A governance platform that helps enterprises demonstrate control over their AI agents has a natural market in the world's most regulated region.
The hiring plans are equally telling. Island employs about 1,000 people today and plans to grow to 1,500 by the middle of 2027, according to reporting on the round. For a company at roughly $200 million in revenue, adding 500 heads is an aggressive bet — it implies confidence that the revenue growth will fund the expansion, and that the product roadmap requires the talent. The emphasis on R&D hiring over sales hiring suggests the company believes its next phase of growth will be won on product capability rather than go-to-market muscle: the agentic control plane is a bigger engineering problem than the enterprise browser was.
What Island's raise signals about AI security spending
Island's $400 million is part of a September cluster of financings for companies securing the AI stack. In the same month, data-security company Cyera raised a $400 million Series G extension led by Goldman Sachs Alternatives at a valuation reported above $12 billion, and AI data company Snorkel AI raised $350 million in a growth round led by Insight Partners and S32. The pattern is unmistakable: as enterprises move AI from pilot projects to production systems, the budget line that grows fastest is not the models themselves — it is the infrastructure around them. Data security, governance, auditability and access control are where chief information officers are being told to spend, often by their boards and their regulators.
This has implications for how the AI economy matures. The first wave of enterprise AI spending went to model access and experimentation. The second wave — the one Island is surfing — is going to the unglamorous work of making AI safe to run: who can use which model, on which data, with what oversight, and with what paper trail. It is the same pattern every enterprise technology wave follows. Cloud computing produced the cloud security industry; mobile produced mobile device management; AI is producing AI governance. The companies that define the category early tend to keep it, which is why investors are willing to pay 30 times revenue for a credible contender.
The risks behind the re-rating
None of this makes Island's valuation a safe bet. A multiple north of 30 times revenue leaves no room for a growth stumble: if the company's revenue growth decelerates from 100 percent toward something more ordinary, the valuation math gets uncomfortable quickly. The agentic control plane is also a thesis, not yet a proven category — enterprises are still figuring out how they want to govern AI agents, and the winning architecture could turn out to be API-level monitoring, identity-based controls, or something built by the hyperscalers themselves rather than a browser-layer platform. Island's bet is that the browser is the right enforcement point; credible alternatives exist.
Competition is another honest risk. The enterprise browser category Island created is no longer empty, and the AI governance space is attracting well-funded entrants from adjacent markets — identity companies, data-loss-prevention vendors and the cloud platforms themselves all have plausible claims on parts of this problem. Island's head start, its $1 billion-plus in total funding and its roster of blue-chip backers give it resources to compete, but resources are not a moat. Execution is.
What the round does establish, regardless of how the category shakes out, is that the market for governing AI agents is real enough for serious capital to price it in the billions. When Evolution Equity Partners, Sequoia and Coatue collectively decide that the browser is where AI agent governance happens, enterprise buyers take notice — and competitors start building. For chief information officers wrestling with how to oversee the agents proliferating inside their organizations, Island's $6.4 billion valuation is a signal that the industry is organizing itself around an answer. Whether it is the right answer will be decided not by investors, but by the customers who have to live with it.
Sources
