# Dream Raises $260 Million to Deploy Sovereign AI Cyber Defense Platforms Globally


Israeli cybersecurity startup Dream announced a $260 million funding round today, bringing its valuation to $3 billion and its total capital raised to over $410 million since its 2023 founding. The Series B round was co-led by Bicycle Capital and Group 11, with participation from Antler, Bain Capital Ventures, Tru Arrow Partners, and other investors.


The company plans to deploy its sovereign AI and national cyber defense platforms across Europe, the Middle East, Asia, and the Americas—positioning itself at the intersection of government cybersecurity, artificial intelligence, and geopolitical sovereignty concerns that have intensified globally over the past three years.


## Who Is Dream?


Dream was founded by three high-profile figures: Shalev Hulio, former CEO and founder of NSO Group (the controversial Israeli firm behind Pegasus spyware); Sebastian Kurz, former Chancellor and Prime Minister of Austria; and Gil Dolev, a cybersecurity entrepreneur serving as Chief Technology Officer.


The company operates from three regional headquarters: Tel Aviv (Israel), Vienna (Austria), and Abu Dhabi (United Arab Emirates)—a geographic footprint that reflects its target market of government and critical infrastructure clients seeking independence from foreign technology providers.


Hulio's leadership role is notable given NSO Group's history of criticism over surveillance and espionage allegations. However, Dream's stated mission emphasizes sovereign control and national security operations—positioning the technology for defensive, government-controlled use cases rather than commercial surveillance tools.


## Three Platforms: Sphere, Hero, and Atlas


Dream has built three integrated products targeting different aspects of national cyber defense:


### Sphere: National Cyber Defense

Sphere functions as an AI-driven, nation-state threat detection and response platform. Key features include:


  • AI-driven detection and response: Automated threat identification and containment
  • Cyber intelligence integration: Aggregating threat intelligence into operational context
  • Attack path analysis: Modeling how adversaries could exploit network weaknesses
  • Digital twin technology: Creating virtual replicas of critical infrastructure to test vulnerabilities without operational risk
  • Exposure management: Identifying and prioritizing security gaps across national infrastructure

    • ### Hero: Autonomous AI Vulnerability Research

    Hero represents an autonomous security researcher that continuously hunts for zero-days and unknown exposures. The platform:


  • Reasons like an attacker to identify exploitation pathways
  • Continuously stress-tests defenses before adversaries can
  • Autonomously searches for security defects and attack paths
  • Aims to shift from reactive patching to proactive defense

    • ### Atlas: Sovereign AI Data Platform

    Atlas allows governments to consolidate fragmented national data into structured knowledge without relying on foreign cloud providers. Capabilities include:


  • Transforming raw national data into actionable intelligence
  • Deploying mission-specific AI agents and models
  • Generating insights within secure, government-controlled environments
  • Maintaining data sovereignty while leveraging AI capabilities

    • ## Market Context: The Sovereign AI Moment


    Dream's funding arrives as governments worldwide reassess their dependence on foreign technology infrastructure for critical functions. Several macro trends drive this valuation:


    Geopolitical Fragmentation: The U.S.-China technology competition and European sovereignty initiatives (EU's AI Act, cloud sovereignty mandates) have created demand for domestically controlled AI and cyber capabilities.


    Nation-State Threats Escalating: Cyberattacks attributed to Russian, Chinese, Iranian, and North Korean actors have targeted critical infrastructure—hospitals, power grids, financial systems—with increasing sophistication and impact. Traditional perimeter-based defenses have proven insufficient.


    AI as Strategic Asset: Governments recognize that AI-driven defense (and offense) will define military and cyber power in the next decade. Countries without homegrown AI capabilities worry about technology dependence.


    Supply Chain Vulnerability: Recent attacks on Cisco, Microsoft, and other foundational technology providers have shown that even defended organizations can be compromised through their vendors. Governments are now mandating alternative platforms for critical functions.


    Dream's founders understood these pressures: Hulio's NSO background gave him access to government buyers; Kurz brought legitimate political credibility in Europe; Dolev brought technical depth. Together, they positioned Dream to capture a market that didn't exist five years ago.


    ## Competitive Landscape


    Dream is not alone in this space. Other startups and established players are building sovereign AI and national cyber defense platforms:


    | Company | Focus | Geography |

    |---------|-------|-----------|

    | CrowdStrike | Endpoint detection and response | Global (U.S. listed) |

    | Mandiant (Google) | Threat intelligence and IR | U.S. controlled |

    | Palantir | Data analytics and AI | U.S. government contractor |

    | Darktrace | AI-driven threat detection | UK-based, European focus |


    Dream's $3 billion valuation places it among the highest-valued private cybersecurity companies—comparable to recent valuations of Databricks and Stripe, and significantly higher than most other security startups. This suggests that investors believe sovereign AI cyber defense will command premium valuations as governments allocate budgets away from foreign vendors.


    ## Strategic Implications


    For Governments: Dream offers an alternative to U.S. or Chinese technology stacks for critical cyber defense—particularly attractive to European and Middle Eastern governments seeking strategic autonomy.


    For Critical Infrastructure: Organizations in government-prioritized sectors (energy, finance, telecommunications, healthcare) may face pressure to adopt domestically controlled platforms, fragmenting the global security market.


    For Established Players: CrowdStrike, Mandiant, and others will compete for the same government budgets but may struggle to rebrand as "sovereign" alternatives if they're perceived as foreign-controlled.


    For the Broader Cybersecurity Market: If Dream succeeds, it could accelerate the trend toward region-specific security stacks, potentially creating inefficiencies but reducing geopolitical leverage for any single nation over critical infrastructure globally.


    ## Funding and Roadmap


    With $410 million raised, Dream has substantial resources to build sales operations across four continents. The company plans to:


  • Accelerate platform deployment in European, Middle Eastern, Asian, and American markets
  • Expand the research and development team to advance AI capabilities
  • Build go-to-market teams in priority geographies
  • Potentially pursue strategic acquisitions to fill capability gaps

    • The funding round suggests strong interest from institutional investors in the sovereign AI narrative—Bicycle Capital and Group 11 are both experienced in geopolitical tech and emerging markets, indicating they understand Dream's customer base and long-term market opportunity.


    ---


    ## HackWire Analysis


    Dream's $3 billion valuation marks a watershed moment for "sovereign AI" as a distinct market category—but the valuation reflects investor belief in a geopolitical inevitability more than proven revenue or scale. The company has generated no publicly disclosed revenue figures, yet it commands a valuation on par with mature cybersecurity firms generating hundreds of millions annually. This disconnect suggests investors are betting on regulatory and purchasing mandates, not organic adoption.


    The NSO Group connection deserves scrutiny. Hulio's track record is complex: NSO's Pegasus enabled governments to conduct targeted surveillance, but it also demonstrated technical sophistication and government access that few Israeli tech leaders can claim. Dream's positioning as a "sovereign defense" vendor is fundamentally different from NSO's surveillance business model—but reputational risk remains. If Dream is perceived as merely "NSO's cyber defense division," it could face resistance from privacy advocates and international organizations skeptical of Israeli surveillance technology.


    The more interesting question is whether "sovereign AI" is a lasting category or a temporary political response to tech nationalism. If China, Europe, and the U.S. each build competing stacks, the fragmentation will be expensive and inefficient for organizations operating globally. Dream's bet is that governments will pay the fragmentation premium for strategic autonomy. That may prove true—but it depends on maintaining geopolitical tension. In a world of renewed U.S.-China cooperation, demand could evaporate.


    Finally, Hero (the autonomous vulnerability researcher) is the most technically interesting product and the one most likely to prove defensively valuable if it works. If Dream can genuinely automate zero-day discovery and continuous defense stress-testing, that capability transcends geopolitical positioning and becomes a foundational piece of national infrastructure. That's where the real long-term value lives.


    — HackWire Editorial


    ---


    ## Related Coverage


  • Read more in our [Vulnerabilities](https://www.hackwire.news/category/vulnerabilities) coverage
  • Cross-reference with [Breaches](https://www.hackwire.news/category/breaches) and [Malware](https://www.hackwire.news/category/malware)
  • Stay current via the [HackWire homepage](https://www.hackwire.news/)