Stephen Ward, a former U.S. Secret Service agent who later served as chief information security officer at Home Depot, is preparing to raise a second cybersecurity fund of roughly $250 million for Brightmind Partners, according to people familiar with the matter. The planned vehicle reflects a broader shift in the market: investors are increasingly favoring managers with direct operational experience in cyber defense, incident response and enterprise security rather than generalist venture firms making broad bets on frontier technology.
Ward's background gives Brightmind a distinctive pitch. His career spans law enforcement, corporate security and venture investing, a combination that has become especially valuable as cyber threats grow more sophisticated and as artificial intelligence accelerates both defensive and offensive capabilities. In a market where founders often need help navigating procurement, security architecture and regulatory scrutiny, a former practitioner with high-level operational exposure can be more than a capital source; he can be a strategic partner.
Operator-Led Capital
Brightmind's fundraising effort comes at a time when cybersecurity remains one of the most durable categories in technology investing. Unlike many software segments that have cooled after the 2021 funding surge, cyber has continued to attract capital because the underlying demand is structural. Enterprises, governments and critical infrastructure operators are under constant pressure to harden systems against ransomware, identity theft, supply-chain compromise and increasingly AI-assisted attacks. That persistent threat environment has helped specialist funds maintain relevance even as broader venture markets have tightened.
Ward's profile also illustrates how the cyber investment thesis has evolved. Early cybersecurity funds often concentrated on endpoint protection, network monitoring and compliance tooling. Today, the opportunity set is wider and more complex, spanning cloud security, identity, data governance, software supply-chain protection, AI model security and automated threat detection. For a manager like Ward, the appeal lies in backing founders building tools that can keep pace with adversaries who are themselves using machine learning to scale attacks and evade detection.
AI Raises The Stakes
The timing is notable because frontier AI is reshaping the cyber landscape in both directions. On one hand, AI can improve anomaly detection, accelerate incident triage and reduce the burden on overstretched security teams. On the other, it lowers the cost of phishing, social engineering and code generation for malicious actors. That dual-use dynamic has made cybersecurity one of the most closely watched adjacent sectors within AI investing, with limited partners increasingly looking for managers who understand both the technical stack and the operational realities of defending it.
Brightmind's second fund, if completed at the expected size, would suggest that investors still see room for disciplined, thesis-driven capital in a crowded field. A $250 million vehicle is large enough to support meaningful ownership in early-stage companies, but not so large that it forces a manager to drift into later-stage growth deals or dilute conviction. In cyber, where product cycles can be long and customer adoption often depends on trust, that scale can be an advantage.
Ward's prior experience at Home Depot is also relevant. Large enterprises are often the proving ground for security products, and a former CISO can evaluate whether a startup's technology is genuinely deployable or merely compelling in a demo environment. That practical lens may help Brightmind differentiate itself in a sector where technical claims can outpace real-world performance.
The fundraising effort also arrives amid a more selective venture environment. Investors have become more cautious about backing unproven AI startups, especially those without clear paths to revenue or defensibility. Cybersecurity, by contrast, offers a more immediate business case: buyers understand the urgency, budgets are often recurring, and the consequences of failure are visible. That makes the category one of the few frontier-tech areas where capital can still be raised on the basis of necessity rather than narrative alone.
If Brightmind succeeds, the new fund would reinforce a broader trend in venture capital: specialist firms led by operators are gaining ground by pairing domain expertise with a narrower investment mandate. In cybersecurity, where trust, timing and technical depth matter as much as financial backing, that model may prove especially durable.