Doxx.net and a16z Bet on Owning the Root of Trust

Doxx.net’s $38 million Series A is not really about the money. It is about who answers the questions the internet normally answers for you.

Two figures below look alike and are unrelated: the Series A is $38 million, and the company separately claims more than 38 million threats blocked since December 2025. The raise is not stated on doxx.net’s homepage; it comes from an Axios Pro teaser and open mirrors. No independent assessment of the security claims is reported anywhere. Nothing here is security advice and nothing here is investment advice.

What Happened

Miami-based doxx.net has closed a $38 million Series A. Andreessen Horowitz led the round, with Animo Ventures and Focal.vc participating. The company’s Agentic Defined Networking platform, known as ADN, entered open beta alongside the announcement. The raise figure does not appear on the company’s homepage; it comes from an Axios Pro exclusive teaser and open mirrors at Refresh Miami and FinSMEs, with the remainder of the Axios piece paywalled.

That number — $38 million — needs to be kept separate from a second figure the company reports. Doxx.net says it has blocked more than 38 million threats since its closed beta began in December 2025. The coincidence of the same number is easy to misread. They are entirely unrelated figures.

The founder is Barrett Lyon. He previously built Prolexic, acquired by Akamai; BitGravity, acquired by Tata; XDN, acquired by Fortinet; and Defense.Net, acquired by F5. All four were internet infrastructure and security companies. The track record is part of why this round reads the way it does.

The Structural Read

The standard internet model distributes trust. No single entity controls both naming and verification. That distribution is not a feature anyone designed consciously — it is the accumulated result of decades of separate institutions, protocols, and operators.

Doxx.net is doing something structurally different. It owns its own IP space, operates its own DNS root, runs its own certificate authority, and hosts on its own bare-metal servers. Those four things together constitute a parallel root of trust.

Founder Barrett Lyon states the trade plainly. He argues the industry sells privacy as a feature while routing traffic through rented infrastructure it does not own and cannot verify. His position is that privacy embedded in architecture is more durable than privacy promised by policy.

That is a real and defensible engineering distinction. The structural consequence that follows from it is equally real: when the architecture owns the trust, the guarantee is as good as the operator who owns the architecture. That is not a warning about doxx.net specifically. It is simply what the design means.

That framing is the FDE lens applied cleanly. Using the Business Engineer FDE Framework — Founders, Distributors, Enablers — doxx.net sits in the Founder position: building the infrastructure layer others will eventually route through, rather than sitting on top of infrastructure controlled by third parties. The bet is that the infrastructure itself becomes the defensible asset.

The agent layer is where this becomes urgent rather than theoretical. The platform gives AI agents their own network identities and private channels. A network API with native MCP support lets agents configure infrastructure directly. The pitch is that software acting on your behalf should be a named entity on the network with its own permissions — not something quietly borrowing yours.

A DNS-level filtering layer runs alongside it. It is designed to prevent agents from reaching known or suspected phishing and malware destinations while they act on behalf of users. Peer-to-peer communication — calls, video, messages, file transfers — passes directly between devices rather than through a central server.

This piece is describing the stated design. No independent security assessment is reported anywhere in the available material. The threats figure is the company’s own count from a closed-beta period. Valuation, total funding, headcount, pricing, customer numbers, and the identities of the six continents are all absent from the available sourcing.

Three Implications

IMPLICATION 1 — AGENT IDENTITY IS AN UNSOLVED PROBLEM AI agents acting on behalf of users currently borrow human credentials. Doxx.net is proposing that agents get their own named identities at the network level. If that design pattern spreads, it changes how agent permissions, audit trails, and accountability get structured across the industry.

IMPLICATION 2 — PARALLEL INFRASTRUCTURE IS A REAL OPTION NOW Running a private DNS root and certificate authority was once the domain of nation-states and hyperscalers. A Series A company is now doing it commercially and at scale across six continents. That signals the cost and complexity of parallel internet infrastructure has dropped to a level where venture bets are viable.

IMPLICATION 3 — TRUST RELOCATION REQUIRES DUE DILIGENCE AT A NEW LEVEL A product that asks to become your root of trust is asking for something categorically different from a product purchase. No independent security assessment is reported in the available material. What that implies for anyone evaluating it is a question this publication is not answering, and nothing here is a recommendation either way.

The Bottom Line

Doxx.net’s $38 million Series A — a figure sourced from an Axios Pro teaser and its open mirrors, not from the company’s homepage — is structurally interesting because of what the company says it has built, not what it has raised. Running your own IP space, DNS root, certificate authority, and bare-metal servers on six continents is a legitimate engineering choice with real advantages. It also means that every trust question those systems normally answer gets answered by one operator.

Barrett Lyon has sold four infrastructure companies to Akamai, Tata, Fortinet, and F5. Andreessen Horowitz led the $38 million round, with Animo Ventures and Focal.vc participating, behind the premise that the internet’s original design was never adequate for privacy. Whether the architecture delivers on that premise is a question no independent assessment in the available sourcing has yet answered.

Sources: Refresh Miami; FinSMEs; Axios Pro (original exclusive, remainder paywalled). Raise figure is not stated on doxx.net’s homepage. Nothing in this article is investment advice or security advice.