Aura CEO Hari Ravichandran reveals $340M ARR, building consumer cybersecurity with a family-graph AI model

Aura, the consumer cybersecurity platform founded by Hari Ravichandran, has reached $340M ARR.

The company positions itself around a problem that has grown substantially in scale: the average loss per identity theft incident has risen to roughly $25,000, up from a few thousand dollars in earlier cycles, driven partly by AI-powered deepfakes and the volume of personal data circulating on the dark web. Ravichandran argues that digital natives — children who spend most of their day on connected devices — have dramatically expanded the attack surface for families, making consumer-level protection a more urgent commercial category than it was even five years ago.

“We're about 340 some odd million of ARR... We're probably the only product that puts the actual family at the center. There's actually a large sort of family graph that maps out all of the relationships for people. Phishing email open rates have jumped from 12% to something like 60% in the AI era. Now we see scams going up to $25,000 per scam on average.”

Family graph model

Aura's core technical differentiator is what Ravichandran describes as a family graph: a structured map of relationships between household members that anchors the platform's AI reasoning and inference systems. Most competing products, he argues, are built around the problem rather than the person — a password manager knows about passwords, an identity monitor knows about breaches, but neither has a coherent picture of a specific family's digital footprint. Aura's claim is that anchoring every alert and recommendation to that relational graph produces more accurate, more personalized risk signals. The platform monitors sequences of events — a data breach appearing on the dark web, followed by a credit inquiry, followed by a suspicious address change — and uses that pattern recognition to flag elevated risk before identity theft actually occurs.

Enterprise and consumer overlap

Aura sells direct to consumers but also distributes through large enterprises, and Ravichandran is specific about why the two markets are less separate than they appear. Most enterprise breaches now originate through social engineering of individual employees rather than direct technical attacks, which means protecting a company's workforce at home is functionally the same problem as protecting corporate perimeters. That framing lets Aura pitch to corporate security and HR buyers as a workforce benefit rather than a standalone consumer subscription.

Recent breach environment

On the recent wave of identity verification breaches — including the NPD breach that exposed Social Security numbers at scale — Ravichandran's read is that consumers have become somewhat numb to breach disclosures, which he treats as a warning sign rather than a reassurance. Each breach, in his model, is an early signal in a longer sequence that eventually produces tangible fraud at the back end. His near-term advice: monitor credit continuously, watch physical mail for anomalies, and treat any unfamiliar account activity as an active threat rather than background noise.

Aura has not disclosed its latest funding round, headcount, or valuation in this conversation.