Every time venture capitalists write a check, they\u2019re secretly running numbers in their heads about different exit scenarios. It\u2019s their job as fiduciaries. But nearly all will tell you (publicly, anyway) that every portfolio company is headed for an IPO. <\/p>\n
Stephen Ward, the co-founder of Brightmind Partners, a two-year-old cybersecurity fund in New York, says otherwise outright. \u201cYou have to sell on the way up,\u201d he says.<\/p>\n
Ward\u2019s unvarnished pragmatism is one reason he stands out. Another is the size of his firm\u2019s debut fund late last year: a whopping $250 million fund, which he closed with co-founder Gur Talpaz. A third reason is his r\u00e9sum\u00e9, which includes a stint with the Coast Guard, nine years in the Secret Service, and CISO jobs at TIAA and Home Depot before he ever thought about investing.<\/p>\n
One proof point that suggests the combination is working is SGNL, the identity security startup CrowdStrike agreed in January to buy for $740 million, 11 months after Brightmind led its Series A.<\/p>\n
Now Ward is raising a second fund, targeting roughly the same size as the first one. This time, though, he\u2019ll be doing it without Talpaz, who left in April along with another early colleague, leaving Ward as the firm\u2019s sole general partner. He\u2019s betting on himself at a moment when early-stage cybersecurity startups are raising more money than later-stage rivals for the first time in more than a decade.<\/p>\n
His unemotional approach to exits traces back to an unlikely career. Ward says he grew up in northwest New Jersey between two farms, in a family that couldn\u2019t afford college for his older brothers. After high school, he joined the Coast Guard, inspired by a commercial of a man jumping out of a helicopter, though he says he barely knew how to swim at the time. He spent four years in search and rescue.<\/p>\n
Afterward, he studied criminal justice at Seton Hall in New Jersey and thought half-heartedly about law school. \u201cI didn\u2019t know what I wanted to do,\u201d Ward told me last week over Zoom, wearing a pale hooded sweatshirt and looking more like a basketball coach than a venture capitalist. \u201cI was kind of lost. I missed the military and the camaraderie and all of that.\u201d<\/p>\n
After graduating in 1998, he says, he mailed out some 300 r\u00e9sum\u00e9s but no one responded. A Seton Hall professor who was also a chaplain to Secret Service personnel, as well as to members of the FBI and CIA, began introducing him around, and the Secret Service called first.<\/p>\n
The Secret Service has two primary missions: protecting people and investigating financial crimes. Ward gravitated to investigations, then to \u201ccyber\u201d after the September 11 attacks in 2001. That year, he married a former college classmate, an American-born Syrian Muslim. Colleagues warned him the background check would be \u201cmiserable.\u201d (They\u2019re still happily married.)<\/p>\n
What came next took Ward\u2019s life down an unexpected path. Stationed in New York, he arrested a hacker who\u2019d pulled off the largest credit card data theft of that era. Instead of charging him, however, Ward flipped him, turning him into an informant and running him for about three years. But the hacker kept hacking behind Ward\u2019s back, and after he was caught again, he told the agency, as a diversionary tactic, that Ward was in on it.<\/p>\n
By that time, Ward had left for the private sector, and he ultimately spent roughly 18 months clearing his name. \u201cIt was hard to get out of bed,\u201d he said of that period, describing the investigation as \u201calmost like a spouse cheating on you,\u201d given his love of the agency. The hacker ultimately received a 20-year sentence, and Audible bought the rights to the story, turning it into an eight-episode podcast called \u201cOperation Firewall.\u201d<\/p>\n
Ward\u2019s corporate career has been a success by most measures, though he describes it as a series of jumps he really wasn\u2019t qualified to make. His first private-sector job at J.P. Morgan, where he was recruited in 2007 to build a cybersecurity unit, was the hardest transition of his career, he says. He felt like \u201cthe dumbest person in the room,\u201d missed his Secret Service crew, and twice thought about going back, unaware he was still under investigation. He stuck it out and now calls the investment bank the \u201cbest management school.\u201d <\/p>\n
Six years as CISO at the financial services company TIAA followed, and then two years at Home Depot starting in 2019. But in 2021, feeling burned out, he quit without anything lined up for the first time since age 16. <\/p>\n
That chapter didn\u2019t last long. The founders of Wiz, whose security software Ward had used at Home Depot, put him on a short list for a job at their company. Jeff Horing, a venture capitalist at Insight Partners, which had co-led Wiz\u2019s $100 million Series A round in late 2020, interviewed Ward for the role, then offered him one at Insight instead.<\/p>\n
It\u2019s a good-news, bad-news story, given that Wiz was acquired last year by Google for $32 billion. When I asked him about it last week, Ward observed that the friend who took the Wiz job \u201cmade life-changing money,\u201d but said it doesn\u2019t bother him.<\/p>\n
Regardless, he spent just three years at Insight, where he says he worked on Wiz, Abnormal Security, and Elisity, which IonQ agreed in October to buy for up to $1.3 billion. Then, at age 49, he thought about striking out on his own for the first time.<\/p>\n
He says people told him it was a young man\u2019s game. He left anyway and began cold-emailing limited partners. Ultimately, fewer than 20 LPs filled the fund, including Horing.<\/p>\n
Ward started Brightmind in 2024 with Talpaz, a CrowdStrike corporate development executive whose deals overlapped with Ward\u2019s during his time at Insight. Tayler Sipperly, another CrowdStrike corporate development alum, was the firm\u2019s third employee.<\/p>\n
The partnership ended this past spring. Asked what happened, Ward, using carefully worded legalese, cited \u201cdifferences in opinions regarding operations and the future of Brightmind.\u201d In August, Talpaz and Sipperly co-founded a new venture firm with Elia Zaitsev, CrowdStrike\u2019s global CTO for the past three years. Called Cognition, it\u2019s now reportedly targeting a $170 million first fund to back cybersecurity startups.<\/p>\n
Brightmind\u2019s first fund has made 14 investments to date, with one exit: that SNGL sale.<\/p>\n
Some investors asked why Brightmind didn\u2019t ride out that bet even longer. But Ward says he\u2019s seen enough across his career that he feels confident in warning founders when they\u2019re \u201cgoing to race past the turn.\u201d <\/p>\n
In cybersecurity, he says, the best sales come between a startup\u2019s third and seventh years. Indeed, he says his team tracks every security acquisition and what buyers are building versus buying. If Palo Alto Networks is likely to buy something, he says, CrowdStrike will experience \u201cFOMO, then Zscaler is going to look over and go, \u2018What did they just do? I should probably do the same thing.\u2019\u201d<\/p>\n
Understanding how the pieces fit together is the trick, Ward explained, offering some hypotheticals. If CrowdStrike is building a product, he said, it\u2019s unlikely to buy a portfolio company that makes something similar. Palo Alto Networks might love a company, but not if buying it would force its customers to switch away from something it bought five years ago. <\/p>\n
\u201cIt\u2019s very easy to go, \u2018Good match,\u2019 \u2018terrible match,\u2019\u201d he said. \u201cAnd that\u2019s really what we spend a ton of time figuring out.\u201d<\/p>\n
He has timing on his side, at least. Early-stage cybersecurity startups are outraising their later-stage rivals for the first time in more than a decade, according to PitchBook, which counts $4.7 billion worth of seed-through-Series B deals through September.<\/p>\n
That total is already ahead of the entirety of 2025, even though the number of deals fell to 248 from 358 last year. Seed rounds in particular are ballooning, per PitchBook. The average cybersecurity seed round jumped to $8.4 million in the first nine months of this year, from $5.54 million a year earlier.<\/p>\n
Ward questions how much of that money is really going to AI security. By PitchBook\u2019s count, 278 deals in the first half of 2026 were bucketed as such, but his team\u2019s manual review found only 30 true ones. He doesn\u2019t think Anthropic or OpenAI will \u201ctake over the security world,\u201d but instead will do \u201cjust enough.\u201d<\/p>\n
For real-time protection, which he terms \u201czero second,\u201d he favors cyber-specific models that run locally on a customer\u2019s own systems, like that of Empirical Security. He also looks for startups that could trounce established companies that he considers vulnerable, name-checking 27-year-old Qualys and 24-year-old Tenable.<\/p>\n
Ward says Brightmind\u2019s second fund won\u2019t be entirely cybersecurity, focusing about 20% on AI infrastructure deals. He expects a meaningful number of teams to come from Israel, too. (Roughly 40% of the debut fund\u2019s startups are based in Tel Aviv.)<\/p>\n
Asked about the founders he\u2019s most comfortable backing, the response is immediate: second-time founders who stick together. <\/p>\n
Brightmind is comprised of five people right now: COO Iva Messy, also a Seton Hall graduate, came from venture firms Felicis and Andreessen Horowitz (a16z) on the recommendation of Ward\u2019s cousin, Carl Eschenbach, a former Workday CEO who is now back at Sequoia. Sven Wollschlaeger, a Midwesterner whom Ward calls one of the hardest-working people he\u2019s known, spent three years alongside Ward at Insight and is a principal at Brightmind.<\/p>\n
CTO Jamie Mneimneh, whom Ward first hired at Home Depot as a distinguished engineer, is the most technical person of the team. He built the cloud computing environment on AWS where the firm tests startups\u2019 products. Mneimneh also built the AI agents that now source most of Brightmind\u2019s deal flow, which is how the firm avoids hiring a bench of analysts and keeps management fees down, says Ward.<\/p>\n
Taylor Cleveland, Ward\u2019s chief of staff at Home Depot, joined the firm a few months ago.<\/p>\n
For all the career changes, Ward says the real force driving him hasn\u2019t changed. He grew up without money and still worries it could happen again, saying he\u2019s being paid to produce a \u201c3x net fund,\u201d and he\u2019s \u201cnot going to celebrate until we get that.\u201d<\/p>\n
Said Ward: \u201cI don\u2019t know what\u2019s wrong with me. I have a level of being very naive to like, not being qualified to do something. I\u2019ve just always looked at people and been like, \u2018Okay, you know more than me today, but tomorrow, it\u2019s going to be a little less, and the day after that, it\u2019s going to be less, and eventually, I\u2019m going to catch you and surpass you, and I\u2019m going to know more than you.\u2019 That\u2019s how competitive I am.\u201d<\/p>\n<\/div>\n
[analyse_source url=”https:\/\/techcrunch.com\/2026\/11\/05\/the-ex-secret-service-agent-who-flipped-a-hacker-is-now-raising-a-second-250m-cybersecurity-fund\/”]<\/p>\n","protected":false},"excerpt":{"rendered":"
[analyse_image type=”featured” src=”https:\/\/techcrunch.com\/wp-content\/uploads\/2026\/11\/Stephen_Ward_horiztonal.jpeg?resize=1200,1077″] Every time venture capitalists write a check, they\u2019re secretly running numbers in their heads about different exit scenarios. It\u2019s their job as fiduciaries. But nearly all will tell you (publicly, anyway) that every portfolio company is headed for an IPO. Stephen Ward, the co-founder of Brightmind Partners, a two-year-old cybersecurity fund in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[226,62],"class_list":["post-2240915","post","type-post","status-publish","format-standard","hentry","category-politics","tag-crawlmanager","tag-techcrunch-com"],"_links":{"self":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2240915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2240915"}],"version-history":[{"count":0,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2240915\/revisions"}],"wp:attachment":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2240915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2240915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2240915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}