Alcatraz Raises $50M to Replace the Badge With Your Face and Redefine Physical Security for the AI Era

The badge clipped to your lanyard is, in security terms, a spectacular failure of imagination. It can be lost. It can be stolen. It can be lent to someone who should not have it. It can be tailgated through a door by three people when one swipe is meant to admit one. It contains no intelligence about who is using it, no ability to verify that the face it supposedly identifies belongs to the person presenting it, and no memory of every time it has been exploited.

The physical security industry has known this for years. It has been slow to do anything about it, in part because the alternatives, legacy biometric systems built on surveillance technology that stores photographs, creates centralised databases of personal identity, and generates exactly the kind of high-value target that attracts breaches, are in some ways worse than the problem they solve. Alcatraz was founded on the conviction that there was a third option. The company has raised $50 million to prove it at scale.

The Series B round, which brings Alcatraz’s total capital raised above $100 million, was led by BlackPeak Capital, Cogito Capital, and Taiwania Capital, with participation from existing investors including Almaz Capital, EBRD, and Ray Stata. The capital will fund expansion into new verticals and international markets, and accelerate hiring at a company that has already deployed its technology across AI data centres, major US airports, Fortune 100 enterprises, NFL teams, and universities serving a combined base of more than four million employees worldwide.

Founded by the Engineer Who Helped Build Face ID for the iPhone

The origin story of Alcatraz is unusually credible for a company in the security space. Vince Gaydarzhiev, the company’s founder, led hardware prototyping for iPad and iPhone at Apple during the development of Face ID. He spent years working on one of the most consequential consumer privacy achievements in Silicon Valley history: a facial authentication system that unlocks a device without taking photographs, without storing biometric images, and without transmitting personal data to any external server. When he left Apple, he saw an obvious question that nobody in the physical security industry was asking: why couldn’t the buildings where people work be protected the same way their phones already were?

The answer, Alcatraz’s technology, is now deployed in some of the most sensitive physical environments in the world. Its flagship hardware product, the Rock, and its successor the Rock X, are AI-powered devices installed at building entry points that authenticate identity as a person walks past at normal speed, with no stopping, no swiping, and no fumbling for a badge. The face is the credential. The experience, from the employee’s perspective, is frictionless. From the security administrator’s perspective, the record is precise, continuous, and tamper-proof in ways that badge-based systems can never be.

The Distinction That Changes Everything: Authentication vs Surveillance

The distinction Alcatraz makes between facial authentication and facial recognition is not a marketing exercise. It is the technical and ethical foundation on which the entire company is built, and it maps directly onto a regulatory and commercial landscape that is becoming increasingly hostile to surveillance-based biometric systems.

• The Old Way (Facial Surveillance / Recognition): Identifies people by matching images against a stored database of photographs. Stores biometric data centrally. Creates a high-value target for breaches. Employees are often unaware it is happening. Subject to BIPA, GDPR, and CCPA enforcement action. Regulatory scrutiny accelerating globally.
• The Alcatraz Way (Facial Authentication): Confirms that the person walking in is who they say they are. No photographs taken. No biometric images stored in the cloud. On-device facial matching only. Employees enroll voluntarily and can delete data at any time. Meets GDPR, CCPA, BIPA, ISO 27001, 27017, and 27018 out of the box.

The analogy CEO Tina D’Agostin uses is precisely calibrated: facial recognition is a surveillance camera with a long memory. Facial authentication is a lock that recognises your key and forgets it the moment the door opens. The Alcatraz platform performs all facial matching on the device itself. No sensitive data is stored remotely. No photographs are transmitted. No personal identity is tied to a face in any centralised system. The entire security architecture is designed to provide enterprise-grade access control with the same privacy-first model that Apple built into Face ID, which is exactly where its founder learned to build it.

“We are the Face ID of securing physical spaces. Like Face ID on your iPhone, no photographs are being taken. No personal data is being stored. The world’s largest airports, energy companies, and the most critical data centers all trust Alcatraz.”

 – Tina D’Agostin, CEO, Alcatraz

The Hardware of Alcatraz: Rock and Rock X

The Rock is Alcatraz’s original enterprise device, delivering AI-powered 3D facial authentication and tailgating detection from a single unit installed at building entry points. It connects to any access control system via Wiegand or OSDP panels, functions as an ONVIF camera for existing security infrastructure, and supports both single-factor and multi-factor authentication configurations. It can be deployed at doors, turnstiles, mantraps, and other critical entry points with no integration headaches and no requirement to replace existing panels or infrastructure.

The Rock X is its successor, built in a more compact form factor with upgraded cameras and sensors, an onboard SIP intercom for visitor management, and weatherproofing for reliable operation in extreme indoor and outdoor environments. Both devices are powered by the Alcatraz Platform, which enables remote management, instant firmware updates, and secure on-device facial matching with no sensitive data stored or shared externally at any point.

Tailgating detection deserves particular attention as a capability, because tailgating, the practice of a second person following an authenticated individual through a secured doo

r, is among the most common and least technically addressed vulnerabilities in enterprise physical security. Most access control systems have no ability to detect it. The Rock identifies and alerts to tailgating in real time, making it one of the only physical security devices that addresses the gap between who is authenticated and who is actually in the building.

The Growth Numbers Behind Alcatraz’s $50 funding

• 300% Year-over-year growth in data center adoption reported in 2025
• 200% Growth in new enterprise customers added in 2025
• 5x Expansion across Fortune 500 deployments in 2025

The trajectory is being driven in large part by a trend that Alcatraz was well positioned to capitalize on before most of its competitors noticed it. The largest technology companies in the world are spending hundreds of billions of dollars building AI data centres, and those facilities have become some of the most sensitive real estate on the planet. The GPU clusters inside them are worth tens of millions of dollars per rack. The training runs executing on them represent years of proprietary research and competitive advantage. The data passing through them is in many cases irreplaceable.

Physical access to these facilities is therefore a security problem of extraordinary consequence, and the badge-based systems that govern most enterprise buildings are wholly inadequate to the threat environment that AI infrastructure attracts. Alcatraz’s 300 percent year-over-year growth in data centre adoption in 2025 reflects a market that is waking up to this mismatch simultaneously.

The Industries Alcatraz Serves

The company’s platform is deployed across eight distinct verticals, each with its own access control requirements and threat profile.

• AI Data Centres
• Aviation and Airports
• Critical Infrastructure
• Financial Services
• Government Buildings
• Healthcare and Life Sciences
• Higher Education Campuses
• Stadiums and Arenas

Each of these sectors has reached the same structural conclusion through different routes. Airports face the challenge of securing airside access for tens of thousands of staff while managing throughput efficiently enough not to create operational bottlenecks. Earlier in 2026, Safe Skies, a programme funded by the FAA, certified the Rock as reliable, secure, and effective for use in high-security airport environments, a milestone that opens a significant new market for the company and validates the platform against one of the most demanding sets of security standards in the civilian world.

Financial institutions need access control that satisfies both internal security requirements and external regulatory examination. Healthcare and life sciences facilities must protect research environments, pharmaceutical inventories, and patient data access. Universities need to balance open campus culture with protection of research facilities and sensitive departmental environments. The Rock’s plug-and-play integration with existing infrastructure makes it unusually accessible across all of these contexts: it does not require a forklift replacement of existing access control panels, and its SaaS delivery model means the AI models improve over time without requiring hardware replacement.

The Argument the Funding Makes

Ray Stata, one of the company’s largest investors and a co-founder of Analog Devices, offered the clearest articulation of why the Series B happened when it did: four-digit passcodes and badges were designed for a different era. Companies are realising they need security that is tied to the person, not to a piece of plastic. With Alcatraz, every time an employee walks through the door, the AI is learning and adapting, not relying on a photograph taken years ago on their first day.

That last point matters more than it might initially appear. Facial authentication systems that rely on a static enrollment photograph degrade in performance as the person’s appearance changes over time. Alcatraz’s on-device AI continuously updates its model of each enrolled user based on their real-world access events, meaning the system becomes more accurate and more reliable the longer it is deployed, rather than becoming stale and error-prone. It is a fundamentally different relationship between the technology and the person it is authenticating.

The $50 million raised in this round is earmarked for international expansion, new vertical entry, and team growth at a company that describes 2026 as its strongest year to date. For an enterprise that is guarding the physical perimeter of the infrastructure running the AI revolution, that ambition is backed by a remarkably coherent argument: the buildings that house the digital future deserve security built on the same principles as the phones in everyone’s pocket. Alcatraz has spent a decade building it. It now has the capital to take it everywhere.