Work Here?
Overview
SecurityPal provides an Assurance Management Platform that automates and scales trust for organizations. It combines AI Agents and certified security experts to manage the entire assurance lifecycle—security questionnaires, trust center management, vendor risk assessments, audit readiness, and vCISO support. The platform centralizes knowledge and enables GRC and Sales teams to speed up reviews and improve accuracy. Their goal is to help organizations automate trust, present a solid security posture to customers, and close deals faster.
About SecurityPal
Industries
Consulting
Enterprise Software
Cybersecurity
Company Size
201-500
Company Stage
Series A
Total Funding
$21M
Headquarters
San Francisco, California
Founded
2020
Get referred to SecurityPal
See people who can refer or advise you
Simplify's Take
What believers are saying
- SecurityPal hosted U.S. Embassy tech dialogue in Kathmandu on February 13, 2026.
- Friends of Figma used SecurityPal’s Kathmandu office for an August 23, 2026 event.
- Bil Harmer and Lena Smart joined in November 2024, strengthening enterprise credibility.
What critics are saying
- Pukar Hamal said in July 2026 he laid off 200 people to save 200.
- Enterprise GRC platforms from ServiceNow and Vanta can compress SecurityPal’s questionnaire niche.
- If AI copilots automate trust-center workflows, SecurityPal’s manual-review model becomes obsolete.
What makes SecurityPal unique
- SecurityPal blends AI agents with certified analysts for human-reviewed assurance workflows.
- Kathmandu SOCC employs 210-plus engineers, creating a lower-cost global delivery engine.
- OpenAI, Figma, MongoDB, and Snap use SecurityPal for security reviews.
Help us improve and share your feedback! Did you find this helpful?
Funding
Total Funding
$21M
Above
Industry Average
Funded Over
1 Rounds
Craft VenturesIndustry standards
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↓ -1%2 year growth
↑ 1%SecurityPal, founded by Pukar Hamal, has reached a $110 million valuation following a $21 million seed raise. The cloud-based security SaaS company now operates from San Francisco's Salesforce Tower and serves 1,000 global enterprises. The firm runs a Security Operations Command Centre in Kathmandu employing over 210 Nepali engineers. This hybrid model combines automated security questionnaire tools with human-driven threat analysis, achieving net retention above 120% and gross margins in the high-70s. SecurityPal's approach addresses enterprise security compliance pain points through end-to-end solutions spanning questionnaire automation, continuous monitoring, and threat analysis. The Kathmandu centre demonstrates how vertical SaaS firms can leverage cost-effective talent whilst maintaining service quality, potentially reshaping global SaaS talent distribution.
Bringing 'Silicon Peaks' to Nepal. Nepal-born IT entrepreneur puts Kathmandu on the global digital services map Pukar Hamal looks out onto the Bay from large windows of his company's headquarters on the 37th floor of the Salesforce Tower in San Fransisco, and considers how far he has come from his small village in distant Darchula district in Nepal. At just 35, Hamal is the founder and CEO of SecurityPal, a $110 million company specialising in cybersecurity and security assurance for multinationals in the United States and around the world. Hamal's grandfather Ram Chandra was a Nepali Congress activist during the partyless absolute monarchy era when political activities were banned. He was arrested in 1973 for his underground pro-democracy work and taken to Nakkhu Prison in Kathmandu. The family's property in Darchula was confiscated, and his father Harish Hamal fled to India, returning to Kathmandu only in 1990 after the restoration of democracy to become active in the Nepali Congress. Pukar was born in 1991 in Kathmandu and his mother, Sunita, took him to Darchula where he grew up. Their rural village in Nepal's most remote district had no electricity, and travelling to Kathmandu took a week - walking over to India to take a train and bus. Pukar remembers doing his homework in the flickering light of a sooty kerosene lamp. He was seven when his family moved to the United States in 1998, and in the New York borough of Queens his father worked in restaurants and his mother at a childcare centre. "We lived in a damp windowless basement apartment with little natural light," recalls Pukar, who had a penchant for science in school and won many awards. At Stanford University he majored in International Relations and was exposed to Silicon Valley's venture-capital ecosystem of startups, technology, and philanthropy. He later joined the accounting firm PwC, working in government affairs and regulatory matters, and had an economic liaison role related to Taiwan at the intersection of technology, business, and public policy. He started specialising in cybersecurity and in 2016, and joined friends to launch Teamable, an talent discovery platform that helped companies find candidates through networks and connections using AI before it became as widely available as it is today. One day, when the company was close to signing a major customer, it received a security questionnaire that ran to more than 200 pages. The team could not complete the security review in time, and the company lost a $5 million deal. It was a painful failure for Hamal, but also a turning point which planted the seed that would become SecurityPal. "Companies trying to do business with large enterprises often face lengthy and complicated security reviews, compliance requirements and questionnaires, and SecurityPal solved that problem," Hamal explains. After spending two years in "stealth mode" quietly developing the technology and business plan from an apartment in San Francisco, Hamal raised $21 million in venture capital with a single 20-minute phone conversation with an investor. Since then, SecurityPal has grown at an extraordinary pace, providing cybersecurity assistance to 1,000 clients, including some of the world's best-known technology and Fortune 500 companies. REMEMBERING NEPAL Pukar Hamal says he still feels a tug from his Nepali roots, and SecurityPal opened its Security Operations Command Center (SOCC) in Kathmandu, which was jointly inaugurated by US Ambassador Dean R Thompson and himself. The Kathmandu operation now employs more than 210 Nepali cybersecurity experts who work with global companies and support their technology and security requirements. "We do not view Kathmandu as just an outsourcing destination," says Hamal. "It can become a centre for technology entrepreneurship, not just a labour market." Founded in Silicon Valley, SecurityPal is now scaling what Hamal calls "Silicon Peaks." For him, it is a sense of responsibility to give back at least a little to the country of his birth and of his ancestors. "Nepal is not our market, but we want to invest there to help build its technology ecosystem," he says. The 29 January 2025 issue of Forbes published a daily cover story featuring SecurityPal. Hamal is also a member of the Forbes Business Council, where he regularly publishes articles on AI, cybersecurity, compliance and business strategy. Filling client questionnaires can take weeks in-house, but SecurityPal can help companies with compliance questions much faster by using AI to take care of repetitive questions, while people focus on issues that actually require human judgment. Says Hamal: "AI isn't perfect, and this is why we have purpose-built, trained experts to oversee it." SecurityPal has been able to complete some lengthy security questionnaires within 24 hours, slashing the time companies take to complete their security review process. SecurityPal manages assurance workflows connected to more than $10 billion in enterprise contract value each month and its customer base includes OpenAI, Figma, MongoDB, Airtable, Snap Inc, Grammarly, and Monday.com, among others. Pukar Hamal thinks Nepal itself has not taken cybersecurity vulnerabilities as seriously as it should. "Instead of waiting for a cyberattack to happen and then reacting to it, it is essential to put strong security measures in place beforehand," he says. Hamal says size does not matter for countries adopting technology, what is more important are policies and implementation. Nepal's IT and digital services sector is growing rapidly, particularly in software development and IT services exports. He thinks Nepal should look beyond its geographical size and make cybersecurity, AI, cloud computing, software and digital services exports a central part of its economic strategy. Having founded SecurityPal with $30,000 of his own savings and started out from his small apartment, Hamal now oversees a company valued at over $110 million, and much of the work is done from its 'Silicon Peaks' office in Kathmandu. "Silicon Valley is the capital of some of the world's most influential technology companies," Hamal says. "We are trying to bring a little of that soil to Nepal's Silicon Peaks."
US Embassy Nepal's Code for Impact helps young innovators launch tech ventures in Kathmandu. B360 July 19, 2026, 1:00 pm Discover more Business review service Business Formation Four teams win Code for Impact finale in Kathmandu KATHMANDU: Seven teams of young innovators presented their technology ventures in Kathmandu on Friday at the showcase finale of Code for Impact. The nationwide entrepreneurship initiative aims to help domestic innovators build businesses within Nepal. Entrepreneurship promotion service Four teams - Aashirbad Care, DataHiti, Neptou and Synaptic - were announced as national winners. Each winning team received a $1,000 seed grant, $5,000 in Amazon Web Services (AWS) cloud credits and Rs 250,000 growth grant from Ncell. Winners also secured access to artificial intelligence and technology tools, ongoing mentorship, and branding, technical and ecosystem support. The three remaining finalists will each receive $1,000 in AWS credits together with continued mentorship and partnership access. The six-month venture-building programme is supported by the US Embassy in Nepal and implemented by Aadyanta Advisory in partnership with the American Chamber of Commerce (AmCham) Nepal, SecurityPal AI, Fusemachines, Genese Solutions and other ecosystem partners. The evaluation panel included Anand Bagaria, Managing Director of Nimbus Holdings; Ritu Singh Vaidya, Managing Director of VOITH; Cabinet Shrestha, Chairman of Agni Group; Amir Raj Thapa, Executive Director at AmCham Nepal; and Mike Harker, Public Affairs Officer at the US Embassy in Nepal. Discover more Business 360 magazine Leadership training program Women entrepreneur support Mike Harker said, "Code for Impact reflects the US Embassy's commitment to supporting Nepal's next generation of innovators. Beyond today's awards, this initiative has helped young entrepreneurs strengthen practical skills, connect with industry mentors, and engage with technologies and innovation practices that can open new opportunities for collaboration between Nepal and the United States." Aadyanta Advisory Co-founder and Managing Director Stuti Basnyet said the programme was intended to bridge the gap between ideas and viable ventures. "Too many great ideas disappear after demo day because founders lack time, mentorship and market connections. Over six months, we watched teams challenge assumptions, talk to customers, refine their products and, in several cases, begin generating real traction. That's the success we're most proud of," she said. The initiative launched in January 2026, drawing an initial pool of 190 applicant teams from across the country. From those, 35 teams were selected to participate in virtual bootcamps, AI labs and provincial hackathons held across all seven provinces. Fourteen semifinalist teams subsequently advanced into four months of targeted mentorship, customer validation, product refinement and business-model development. By the time the final seven teams reached the Kathmandu showcase, several had already secured early customers, generated revenue, launched pilots or entered the beta-testing phase. The ventures address a range of issues, including cross-border payment processing, agricultural support, healthcare access, tourism growth and specialised learning utilities. The national winners offered the following solutions. Aashirbad Care operates a GPS-verified elder-care platform developed by doctors to give diaspora families real-time updates on their parents' care. DataHiti built Elytra, a non-custodial orchestration API that settles cross-border payments in real time without holding capital. Neptou created an AI-powered discovery app to uncover local experiences outside mainstream tourist routes. Synaptic developed cARd AI, a platform that converts physical learning cards into interactive augmented reality experiences with bilingual English and Nepali audio to assist children with diverse learning needs. Nepal India trade Bishakha Lakshmi Khadka, Head of Corporate Communications, Marketing & Sustainability at Ncell, welcomed the partnership. "At Ncell, we believe our role extends beyond connectivity; we are committed to enabling innovation that creates lasting impact. We are delighted to partner with the US Embassy, Aadyanta Advisory and others to empower young innovators with the support they need to transform bold ideas into meaningful solutions," she said. Kailash Bijayananda, Chairperson of AmCham Nepal, said the programme brought together entrepreneurs, businesses, mentors, investors and technology leaders to help promising founders develop stronger ventures and reach markets. "AmCham Nepal is proud to support the commercial relationships and private sector connections that make that possible," he said. Discover more Entrepreneurship promotion service Trade economics analysis The presentations concluded with the July edition of the Silicon Peaks Mixer, where founders met prospective clients, investors and mentors. All seven finalist teams will enter an ongoing phase of ecosystem support, gaining continued access to commercial networks and introductions to potential investors. Published Date: July 19, 2026, 1:00 pm E-Magazine July 2026. RELATED B360 National Discover more Governance insights report
SAN FRANCISCO, Nov. 25, 2024 /PRNewswire/ -- SecurityPal, the leading provider of security review solutions for enterprise and high-growth companies, is proud to announce the appointment of two respected cybersecurity leaders to its team. Bil Harmer, Operating Partner Chief Information Security Officer (CISO) at Craft Ventures, joins as Board Observer, while Lena Smart, former CISO of MongoDB and New York Power Authority, steps in as Head of Trust. These strategic appointments come as SecurityPal continues its mission to simplify and accelerate security reviews for some of the most security-conscious companies in the world, including OpenAI, Figma, Plaid, and Snap. SecurityPal's unique fusion of advanced AI technology and certified, expert security review analysts has enabled it to offer the fastest, most accurate security review solution available. Bil Harmer, Operating Partner CISO at Craft Ventures and a recognized thought leader in enterprise security, brings deep expertise from previous leadership roles, including his time as CISO at Zscaler and as Vice President of Security Global Privacy, Officer at SuccessFactors, acquired by SAP
The United Nations General Assembly greenlit Monday (July 1) a China-sponsored, United States-backed resolution on artificial intelligence, signaling a potential sea change in global AI regulation and commerce. This cooperation between the two tech titans comes just months after a U.S.-led AI safety measure, highlighting the complex dance of collaboration and rivalry in the race to shape AI’s future. The nonbinding resolution, which garnered support from over 140 sponsors, calls on wealthy nations to ensure equal opportunities for developing countries in AI use and benefits. It emphasizes the need for a “fair, open, inclusive and nondiscriminatory business environment” in AI development and deployment, potentially reshaping global trade dynamics in the tech sector
There are no jobs for SecurityPal right now.
Find jobs on Simplify and start your career today
About SecurityPal
Industries
Consulting
Enterprise Software
Cybersecurity
Company Size
201-500
Company Stage
Series A
Total Funding
$21M
Headquarters
San Francisco, California
Founded
2020
There are no jobs for SecurityPal right now.
Find jobs on Simplify and start your career today