Of the $820M raised this week, $800M went to Island and Cyera. One owns the browser, the other owns the data map. Neither was an agent-security company a year ago. Both are one now, by press release. The four companies in the window that were built for agent security from day one got a different price: Aegis sold for tens of millions, EmpowerID sold for an undisclosed sum, Outerlimit raised a pre-seed and Kontext raised $4M.
The radar shows the same thing from the product side. Of the 45 security product launches it caught this week, 32 lead with AI or agents. Okta shipped Agent SSO. Fastly shipped an AI Firewall. Barracuda, Gurucul, BigID, Darktrace, Bitdefender and Proofpoint each shipped an AI or agent product in the same seven days. Not one of them is a startup. The feature is shipping from the incumbents faster than the category is forming.
The mechanism is architecture, not marketing. An agent acts through a browser, on data, with an identity. Those three control points already have owners. A standalone agent-security product has to sit inside one of them to see anything, so it is a feature by design. The buyer sees it the same way. A security team already paying Island or Cyera takes the agent feature at renewal before it adds a fourteenth vendor.
If you are a founder in agent security, decide now whether you are building a company or a lab. Upwind paid tens of millions for a 12-person team and called it a lab. That is a good outcome at nine months. It is a bad outcome at year four with $40M raised. To be a company, you need to see something the platforms cannot see from where they sit. Outerlimit's "action layer" and Kontext's runtime are attempts at that. Whether the platforms can see it too is the whole question.
Through the eyes of a CISO buyer, agent security is going to arrive from three vendors you already pay, and they will disagree about who is in charge. Decide the owner before the renewals land: identity decides what an agent may do, data decides what it may touch, the browser decides where. Write that down, or the vendors will write it for you.
Where I could be wrong: Island and Cyera may be raising for an IPO and using "agent" because it is the word this quarter. A flat valuation at Cyera says pre-IPO more than it says agents. If the S-1s talk about DLP and DSPM and not agents, this is marketing, not market. Watch the filings, not the press releases.
Where I land: agent security will exist as a category in analyst reports. In budgets it will be a line inside three renewals.
Radar signals
- Rubrik changed its homepage on 23 September from "Assume breach." to "Agentic Cyber Resilience". The attacker is out of the headline. The agent is in.
- Guardz went the other way the same day: "Agentic SecOps for MSPs" became "Managed Workspace Security for MSPs". When the small vendor drops the word and the big one adopts it, the word has stopped selling on its own.
- Checkmarx replaced "Agentic Development Needs Agentic Security" with "Introducing Checkmarx Fusion" on 22 September. A product name replaced the thesis.
- Palo Alto Networks changed its homepage on 23 September from "Control the chaos. Secure every identity." to "Let AI coding do more. With you in control." Identity is out of the headline. AI coding is in.
- ReliaQuest said on 22 September that GreyMatter's AI is priced per endpoint, not per token, query or investigation. A large MDR vendor saying out loud that usage pricing scares its buyers.
- Blackpanda is recruiting a Managing Director for the Philippines. The job ad says the company is moving toward a Series B. No press release says that.
- Drata posted an emerging account executive role in London, revenue operations in San Francisco and a staff data engineer in the same week. The GRC company that bought SafeBase is building an EMEA sales motion.
One question
If you are building or backing agent security: what does your product see that Island, Cyera or Okta cannot see from where they already sit? Reply and tell me, and tell me why they cannot build it in a quarter. The best replies get quoted, anonymously, next week.
Thank you for reading.
If you want more than the newsletter: get the full market picture on the Mandos platform, and if you are building or investing in this space, let's talk.
Talk to you next Monday.
Nikoloz
