groundcover
Founded by veterans of an elite Israeli cyber unit, groundcover is rewriting observability architecture for the AI era with eBPF and bring-your-own-cloud design
groundcover was founded in 2021 in Tel Aviv, Israel, as a cloud-native observability platform. We view the founding team’s background as more than biographical color; it is, in our read, the direct causal origin of the product’s core architectural bet. The two co-founders served together in an elite cyber unit within the Israeli Prime Minister’s Office, and we think this shared intelligence-community background explains the company’s “no-instrumentation, customer-cloud-resident” design far more convincingly than the standard founder-market-fit narrative typical of infrastructure pitch decks.
The company closed its Seed round in late 2021 and has since progressed through Series A (2022), Series B (2025), and, most recently, a $100M Series C led by One Peak in July 2026 — bringing cumulative funding to $160M and post-money valuation to roughly $500M, approximately four times the prior round. We flag this valuation trajectory as an unusually steep re-rating for an infrastructure software name, and in our view the underlying driver is a clear macro tailwind: the explosion of AI-workload telemetry volumes rather than any single product breakthrough.
Spent six years as R&D Group Manager in the Cyber Division of the Israeli Prime Minister’s Office (2007–2013), followed by roles as Tech Lead/Senior PM at CYMOTIVE Technologies, Head of Research at DayTwo, and Machine Learning Manager at Apple (2019–2021). Holds a Bachelor’s in Physics and an Engineer’s degree in Electrical & Electronics Engineering from the Technion, plus a Master’s in Computer Science from Tel Aviv University. We read this cyber–embedded systems–ML combination as the direct technical basis for groundcover’s product philosophy.
Previously Chief Architect at medical-device cybersecurity firm CyberMDX. Served alongside Shahar Azulay in the same elite cyber unit of the Israeli Prime Minister’s Office, where the pair developed a shared view of the limitations of legacy APM (application performance monitoring) tooling. Leads technical architecture and eBPF sensor development.
The founding team’s network also appears directly reflected in the early cap table. Heavybit co-led the Seed round and secured a board seat that it continues to hold, while Palo Alto-based solo-GP fund Zeev Ventures (founder Oren Zeev, with a track record including Navan, Tipalti, and Audible) has participated in every round from Series A through Series C — functioning, in our assessment, as a de facto anchor investor across the company’s history.
groundcover’s core architecture pairs an eBPF-based sensor with a bring-your-own-cloud (BYOC) data plane. Its proprietary eBPF sensor, internally named “Flora,” collects telemetry directly at the Linux kernel level, deploying without code changes or SDK integration and capturing full-fidelity, unsampled data across infrastructure, application, and AI workloads within minutes of installation. Layered on top is native OpenTelemetry (OTel) support, feeding into a BYOC data plane in which all telemetry is stored and processed inside the customer’s own cloud environment rather than a vendor-hosted SaaS backend.
| Product / Technology Module | Functional Area | Stage | Notes |
|---|---|---|---|
| eBPF Sensor (Flora) | Infrastructure & application telemetry collection | Commercial GA | No-instrumentation deployment; kernel-level data capture; live within minutes |
| Agent Mode | AI-agent-driven detection, triage & remediation | Scaling | Core Series C investment thesis; positioned as the centerpiece of the engineer-agent collaboration roadmap |
| APM / Infrastructure Monitoring | Full-stack Kubernetes monitoring | Commercial GA | Core product line underpinning the Datadog / New Relic / Grafana Cloud displacement positioning |
| Log Management / RUM | Log management, real-user monitoring | Commercial GA | Part of the company’s OSS-stack-replacement go-to-market motion |
| groundcover MCP | AI observability connector | New expansion | Purpose-built connector for AI stacks and agentic workflows; entry point into the emerging AI-observability category |
Our take: groundcover’s market-entry logic leans heavily on a proprietary survey of 500 U.S. technology leaders, conducted with Atomik Research in April 2026. Roughly half of respondents put AI workloads at 26–50% of total observability spend, and close to four in five said they had already taken at least one cost-cutting step — sampling data more aggressively, renegotiating vendor contracts, or building open-source workarounds. We read this data as double-edged: it substantiates category growth, but it also signals that the buyer base is already highly cost-sensitive, which we flag as a headwind to premium pricing for any new entrant, including groundcover itself.
groundcover has raised a cumulative $160M across four rounds spanning roughly four years and eight months, from Seed (late 2021) through Series C (July 2026). We flag a notable shift in lead-investor profile over that period: early rounds were anchored by developer-infrastructure specialists (Heavybit) and Israel/Europe-focused deep-tech funds (Angular Ventures), while Series C brought in later-stage, institutional-grade capital in the form of One Peak (a growth-equity firm with $4B+ in AUM) and, notably, Morgan Stanley Expansion Capital as a first-time investor. We view this progression as a textbook “category validated, institutional capital follows” pattern.
Co-led by Heavybit, which secured a board seat at this stage and has held it through every subsequent round. Proceeds funded validation of the initial no-instrumentation, eBPF-based observability thesis.
Led by Zeev Ventures with full participation from all Seed investors. Announced jointly with the Seed round, bringing disclosed cumulative funding to $24.5M at the time. Proceeds directed toward core product development for the Kubernetes application-monitoring platform.
Led by Zeev Ventures with all existing investors participating. The company disclosed ARR growth of approximately 500% year-over-year at announcement, evidencing commercial momentum. Proceeds earmarked for accelerating U.S. market penetration and deepening AWS and GCP partnerships.
Led by One Peak (London-based growth equity, $4B+ AUM), with Morgan Stanley Expansion Capital entering as a first-time investor and all existing backers (Zeev Ventures, Angular Ventures, Heavybit, Jibe) participating. Post-money valuation of approximately $500M represents roughly a 4x step-up from Series B. The round was underpinned by disclosed ~3x ARR growth and ~2x headcount growth over the trailing 12 months.
The observability market is a mature, contested category (estimated market size $50B+) populated by well-capitalized incumbents — Datadog, New Relic, Grafana Labs — alongside a field of venture-backed challengers, including Chronosphere and fellow Israeli competitor Coralogix. CEO Azulay himself has characterized it, in a conversation with Calcalist, as “a very established and mature market with giant companies like Datadog alongside newer startups.” Against that backdrop, we see groundcover’s structural differentiation resting on the following pillars.
One of few vendors combining kernel-level, no-instrumentation data capture (eBPF) with customer-cloud data residency (BYOC) simultaneously. No-code deployment lowers adoption friction, while in-environment data residency addresses regulated-industry and AI-prompt-privacy requirements — in our view a structural moat rather than a feature checkbox.
Where legacy platforms are architected to reduce data volume for cost control, groundcover captures telemetry without cardinality or sampling limits. The company’s positioning targets next-generation demand on the premise that autonomous AI agents making production decisions require complete, not sampled, data.
Extends beyond passive monitoring into AI-agent-driven detection, triage, and remediation, built atop the company’s own data platform. This vertical integration of data infrastructure and agentic application layer, in our assessment, implies stronger lock-in than a pure telemetry-pipeline vendor would achieve alone.
The founding team’s background in Israeli Prime Minister’s Office cyber operations functions, in our read, as a credibility asset in sales conversations with security- and privacy-sensitive enterprise and regulated-industry buyers — a dynamic we think is corroborated by the company’s disclosed Fortune 5 customer wins.
Trailing-12-month ARR growth of ~3x, headcount growth of ~2x, 250+ paying customers, multiple seven-figure contract wins, and disclosed net revenue expansion within the existing base together suggest, in our view, that growth is being driven by land-and-expand dynamics rather than new-logo acquisition alone.
Morgan Stanley Expansion Capital, a firm that historically concentrates on later-stage growth deals, entering for the first time at Series C reads to us as an institutional-grade validation signal. The roughly 4x valuation step-up under One Peak’s lead is a further indicator that the market is pricing groundcover as a category leader.
A competitive signal we flag: Recent press coverage (Tech Times) has framed Datadog as having adopted elements of groundcover’s architectural approach. We would read a large incumbent shadowing a challenger’s design philosophy as evidence that the technical differentiation is being taken seriously by the market — but we also flag the corresponding risk: if an incumbent with Datadog’s distribution absorbs similar capabilities into its own platform, groundcover’s differentiation window could narrow materially.
As of its July 2026 Series C, groundcover remains a private company with no disclosed audited financial statements. Publicly disclosed metrics are limited to relative or qualitative figures — ARR growth (~3x), headcount growth (~2x), and customer count (250+) — while absolute revenue, net loss, and cash-burn figures remain undisclosed. We flag this as a structural information gap inherent to private-company analysis and a material constraint on any investment conclusion drawn from this note.
On the opportunity side, we highlight ▲ a clear structural macro tailwind from AI-workload-driven telemetry growth; ▲ technical differentiation credible enough that a large incumbent (Datadog) is reported to be echoing elements of the architecture; ▲ the entry of late-stage institutional capital (Morgan Stanley Expansion Capital), which we read as consistent with either a final pre-IPO private round or a continued private growth trajectory; and ▲ aggressive geographic expansion — including a fourth U.S. office opened within five months in Boston — supporting revenue-base diversification.
On the risk side, we flag ▲ feature-parity risk from well-capitalized incumbents (Datadog, New Relic, Grafana Labs) with far greater distribution reach; ▲ intensifying direct competition from fellow Israeli venture-backed challenger Coralogix and others; ▲ budget resistance to new-vendor adoption in a buyer environment where, per the company’s own survey, 79% of customers have already taken cost-cutting action on observability spend; ▲ the burden of sustaining hyper-growth to justify a valuation that has already stepped up roughly 4x in a single round; ▲ rising fixed-cost exposure from aggressive headcount and geographic expansion, with no public disclosure of resulting cash-burn trajectory; and ▲ geopolitical/operational concentration risk stemming from the company’s core R&D and engineering base being centered in Israel.