Act Security exits stealth with $60M to curb AI-driven cloud access sprawl
What's the deal? Tel Aviv-based Act Security has emerged from stealth with $60 million in total funding, split across a $20 million seed round and a $40 million Series A. The seed round was led by Team8 and Bessemer Venture Partners, with participation from Hetz VenturesDealroom has a profile for this one. Try Dealroom → and ClalTechDealroom has a profile for this one. Try Dealroom →; Notable Capital led the Series A, joined by Startpoint CapitalDealroom has a profile for this one. Try Dealroom → and SVCI.
What's the endgame? Founded in 2025, Act Security sells what it calls an "action-centric" security platform aimed at the cloud infrastructure layer. Rather than flagging misconfigurations, it works to eliminate the dormant permissions that make them exploitable.
Why now? The company argues that traditional cloud security models are being stretched past their limits by agentic AI. Autonomous agents often inherit outdated human permissions and run at machine speed, turning low-priority vulnerabilities into fast-moving threats.
What could go wrong? Co-founder and chief executive Jonathan LangerDealroom has a profile for this one. Try Dealroom → says roughly 97% of cloud access permissions sit dormant and unused — tolerable for humans, but risky for AI agents. "They're inheriting the same old human permissions, running around the clock at machine speed, with none of the judgment a person would apply," he said.
The platform evaluates identities, networks, and AI access at the same time, enforcing least-privilege access so agents can scale safely. It sets deterministic boundaries on what humans and AI agents can reach and do, systematically shrinking the access surface across an organisation's cloud environments.
The signal: As enterprises rush to deploy AI agents, the risk is shifting from human error to machine speed. Act Security is betting that the fix lies at the infrastructure layer — cutting off exposure at the root rather than triaging symptoms one alert at a time.
Read more: FinSMEs, SecurityWeek, SiliconANGLE
