Daniel Ingevaldson

Daniel Ingevaldson is a General Partner at TechOperators, an Atlanta-based early-stage venture firm (founded 2008) that specializes almost exclusively in cybersecurity and B2B software. He brings more than 15–20 years of hands-on operating experience in information security, product, and threat research, which he applies to backing technical founders in the security space.

His operating career began at Internet Security Systems (ISS), where he was part of the influential X-Force research and development group; after ISS was acquired by IBM, he helped shape the combined company's security strategy. He went on to co-found Endgame, Inc., a security company where he held a senior operating role; Endgame was acquired by Elastic (Elastic NV) in 2019. He also served as Chief Technology Officer of Easy Solutions, a fraud-prevention company, where he developed a systems-level view of how attackers operate and monetize fraud.

Ingevaldson holds a B.S. in Computer Science from Purdue University (attended 1996–2000). Across his career he has been an early and vocal advocate for practical security standards—most notably email authentication approaches like DMARC—and is known for breaking problems such as fraud down into discrete attacker "phases" rather than reasoning about security in generic terms.

At TechOperators, he works alongside partners including Glenn McGonnigle, Tom Noonan, Dave Gould, Said Mohammadioun, and Tom McNeight, and serves as a board member and board observer for portfolio companies. The firm positions itself as an operator-led fund that backs founders in AI security, cloud security, identity, and threat intelligence, and points to exits to acquirers such as Elastic, Splunk, Twilio, ServiceNow, and Sourcefire.

• Stage & checks: Concentrates on seed and Series A cybersecurity and B2B software companies; TechOperators leads early rounds (e.g., leading EVO Security's $8.5M Series A), with individual/early check sizes around ~$1M.
• Identity as the front line: *"Identity is, and will remain, the first control surface attackers target."* He favors companies solving real access/identity problems for underserved buyers (e.g., MSPs and SMBs) rather than retrofitted enterprise tooling.
• Attacker-workflow, systems-level lens: Evaluates startups against how real-world attackers operate—breaking problems like fraud into discrete phases—instead of buying into generic "cyber" narratives.
• Operator-founder fit: Prioritizes technical founders with deep domain and operational understanding of their customers' workflows (he highlighted EVO CEO Michael Roth's "security expertise and operational execution").
• Timing with compliance tailwinds: Looks for markets pulled forward by cascading regulatory demand (CMMC, HIPAA, GDPR) that forces smaller organizations to buy security.
• Skeptical of hype cycles: Reportedly wary of crypto/Web3 and trend-chasing pivots; prefers sustainable business models and tangible infrastructure over speculative digital assets.