Kiteworks Acquires Bonfy.AI to Bring Runtime, Agent-Aware Data Classification to Its Platform

Kiteworks, the private content and data-exchange security platform, has acquired Bonfy.AI, a young Israeli startup that emerged from stealth roughly a year ago with a $9.5 million seed round. Deal terms were undisclosed, and reporting on the exact announcement date varied slightly across outlets (Let’s Data Science cited September 8; Help Net Security and AI Weekly cited September 11), but the substance of the deal is consistent across coverage.

Bonfy’s technology performs real-time data classification and contextual policy enforcement across both human and AI-agent workflows — spanning email, file sharing, SaaS applications, and API/agent traffic. For Kiteworks, this is a clear capability tuck-in: the company has historically been strong on static classification and governed content exchange, and Bonfy pushes it toward classifying and enforcing policy on data in motion and in use, including traffic generated by AI agents rather than just human users.

This is a small deal in dollar terms compared to the mega-rounds elsewhere in the sector this year, but it’s directly relevant to DLP/DSPM buyers evaluating platforms for AI-era data governance. The move mirrors a broader pattern of “AI agent guardrail” acquisitions across the space, where vendors are racing to extend classification and enforcement to non-human identities and agentic workflows rather than leaving that traffic uninspected. Buyers already on Kiteworks should expect runtime classification features to roll into the platform over coming release cycles rather than being sold as a bolt-on.