The Pentagon is using a $1.2B startup to automate cyberwarfare

Signals Inbox·July 22, 2026·Cybersecurity

The Pentagon is already paying Twenty to help run offensive cyber operations, and investors just valued the two-year-old startup at $1.2 billion. The real tension is not the valuation alone. Twenty says its software can move government hacking from slow, handcrafted missions toward AI-assisted operations that pursue many targets in parallel.

Q1What actually happened?

Twenty, an offensive cybersecurity startup working with U.S. military and intelligence agencies, received another $30 million from Khosla Ventures at a $1.2 billion valuation. That followed a $100 million Series B at a $1 billion valuation roughly one month earlier. Forbes reports that the Pentagon is already using its software for cyber operations.

Q2What is Twenty actually automating?

Not a chatbot writing hacking tips. Twenty is building an end-to-end system for finding targets, connecting intelligence, planning missions, and helping operators pursue several targets in parallel. Its pitch is that government cyber missions should work more like a scalable software platform and less like a handcrafted project rebuilt from scratch each time.

Q3How real is the Pentagon adoption?

It is real, but still early. The largest publicly reported deal is a $12.6 million U.S. Cyber Command contract. Twenty has also worked with the Navy and received a contract worth up to $640,000 from the Air Force Office of Special Investigations. Those numbers are tiny beside fighter jets or missiles, but unusual for a very young offensive-cyber startup.

Q4Why does working in parallel matter?

Traditional cyber operations are slow and labor-heavy. Skilled operators often investigate and pursue targets through custom workflows, one mission at a time. Twenty wants software to handle more of the repetitive searching, coordination, and analysis so the same team can work across many targets. That could increase the speed and number of operations without increasing headcount at the same rate.

Q5Is the AI launching attacks by itself?

Twenty says humans remain in control of every consequential decision. So the safer description is AI-assisted cyberwarfare, not fully autonomous hacking. But the line still matters. Once machines discover targets, combine intelligence, recommend actions, and coordinate workflows, human operators may supervise far more activity than they could manually.

Q6So what is the bigger shift?

Offensive cyber is becoming a venture-backed software category. Twenty reached a $1.2 billion valuation less than two years after its founding, while the Pentagon is also placing major AI systems on classified networks. The key question is no longer whether the military will use AI. It is how quickly AI can turn scarce cyber talent into industrial-scale operational capacity, and what controls remain meaningful when that happens.