Rig Security raises $12M to monitor AI agents posing as users

Rig Security Inc., an Israeli startup focused on identity security for AI agents, has emerged from stealth with $12 million in funding. The company is targeting a blind spot: AI agents that operate under employee accounts but may not appear in traditional identity logs. Unlike coding assistants or autonomous agents that sign in with their own credentials, these agents could inherit the permissions of the human user who invoked them, potentially creating challenges for security teams trying to track their activity.

The funding round comes amid broader interest in AI security, including recent large investments in companies like Island. While Rig’s approach differs from others in the space, it reflects a growing recognition that enterprises may need new ways to manage AI agents after they’ve gained access to systems. Many existing security tools focus on authentication or access prevention, but Rig’s platform appears to emphasize recording actions taken by AI agents, including their behavior across applications and data modifications. The company’s messaging suggests that if enterprises can’t prevent AI agents from operating under human identities, they may at least want visibility into their actions.

This focus aligns with recent discussions in enterprise security. As StartupReader has noted, AI agents are introducing new complexities, such as operating across multiple systems or delegating tasks—behaviors that traditional identity logs weren’t designed to track. Some security providers, like Palo Alto Networks, have started adapting their tools to account for these risks, while Rig’s approach suggests a different emphasis: monitoring rather than prevention.

The timing of Rig’s launch coincides with increased funding for AI agent security, including NinjaTech’s recent offering bundling AI agents with GPUs. These developments indicate that enterprises are exploring ways to integrate AI agents while grappling with how to govern them. Rig’s $12 million round may reflect interest in solutions that provide visibility into AI agent activity, though the market remains fragmented.

Questions remain about how Rig’s platform will handle complex scenarios. AI agents can spawn sub-agents, delegate tasks, and retain data across sessions, creating potential risks that traditional identity logs don’t capture. Rig’s founders have indicated that their platform aims to track these chains of activity, but enterprises may need more evidence before widespread adoption.

For now, Rig’s funding round serves as another example of how AI security is evolving beyond prevention. The challenge isn’t just keeping agents out—it’s understanding what they do once they’re inside, especially when they operate under human identities. This is a problem no one has fully solved, but Rig’s approach suggests one possible direction.

Sources: siliconangle.com