A $51M seed with no product: what investors were actually buying

Ben Bernstein, Dima Stopel and John Morello raised $51 million at seed, before shipping anything ^[2]. Set against a median US seed of roughly $3.1 million this year and $3 to $4 million in cybersecurity, per Pitchwise's July 2026 breakdown, that is somewhere between thirteen and seventeen times the sector norm, handed over at the earliest possible stage ^{[1] [3]}.

The line item being priced is not an idea. Palo Alto Networks bought the same team's previous company, Twistlock, for approximately $410 million in cash, a figure confirmed in Palo Alto's own SEC filing rather than a press release ^[4]. Twistlock had absorbed $63.1 million of venture money across its life, so investors saw roughly a 6.5x return on capital invested ^{[5] [6]}. Read the seed against that history and the arithmetic is blunt: $51 million into a company with no product is about 81 percent of everything the founders' prior company raised in its entire existence ^[1].

Bernstein was direct about what the money was for. Speaking to TechCrunch in October 2023, he framed the size as deliberate, wanting room to incubate the idea properly on the assumption competitors would arrive once the category got interesting ^[7]. The buyer side was not a cold introduction either: YL Ventures, which co-led with Mayfield, had seeded Twistlock in May 2015, making this the third time the two sides had worked together ^[9]. The pattern is not confined to one deal. Carta data reported through Crunchbase in August 2026 shows founders who had previously led a venture-backed company took more than half of all Seed and Series A capital in 2025, and 40 percent of round volume ^[8]. Europe's largest cybersecurity seed, $20 million to NeuralTrust, also went to a team investors already knew ^[10].

The part worth studying is what happened next. The round was not raised for Minimus. It funded Gutsy, a company applying process mining to security operations, and Gutsy no longer exists ^[11]. Stopel's explanation, given in an October 2025 interview, was that the product "wasn't interesting enough. And it doesn't matter why. In a startup, if there's no sales, nothing else matters" ^[12]. The team went from 50 people to 30, a 40 percent cut, killed the MVP, spent eight months back in stealth and returned as Minimus at RSAC in April 2025 ^{[13] [2]}. Minimus sells hardened container images ^[14]. On the difference between the two, Stopel said Gutsy prompted "nice to have" and Minimus prompts "we need this" ^[15].

That is what the premium actually purchased: permission to be wrong once with enough cash left to try again. A $3 million seed does not carry that option.

The credentials underneath hold up, with one caveat. NIST Special Publication 800-190, the Application Container Security Guide, was published on 25 September 2017 and lists three authors: Murugiah Souppaya of NIST, Karen Scarfone of Scarfone Cybersecurity, and Morello, then CTO of Twistlock ^[16]. Company press materials have described the team as the authors of SP 800-190, which stretches it, since Morello is one of three named ^[17]. Twistlock served over 290 customers at acquisition, more than a quarter of them in the Fortune 100, according to Crunchbase News' May 2019 coverage ^[18].

Watch whether "we need this" converts into disclosed customers rather than category enthusiasm, and watch the next round's terms, which will show whether the second idea gets priced on the same 2019 exit or on its own numbers. Watch too whether the repeat-founder concentration in Carta's 2025 data holds, because that is the mechanism, not this one deal ^[8].