Spin.AI buys Israel's DoControl to widen SaaS and AI security stack
What's the deal? Spin.AI has acquired DoControl, an Israeli cybersecurity company, combining the two firms' tools into a single SaaS and AI security offering. Terms were not disclosed.
What each side brings: DoControl adds automated data access governance, data loss prevention (DLP), and AI governance. Spin.AI's platform, built around its SpinOne and SpinCRX products, covers SaaS security posture management (SSPM), browser and extension security, and ransomware resilience.
What's the endgame? The combined company now spans five layers of SaaS and AI risk: access governance and DLP, posture management, browser security, insider and non-human identity risk, and ransomware resilience. Spin.AI already protects more than 2,000 organizations worldwide and runs a risk engine that has evaluated over 550,000 browser extensions and applications.
DoControl brings a track record with named customers. Vox Media used it to remediate excessive sharing across 20% of its SaaS documents, while StackAdapt cut public and external asset exposure by roughly 75%, completing more than 55,000 automated remediations within 90 days.
Why now? The deal builds on backing from K1 Investment ManagementDealroom has a profile for this one. Try Dealroom →, which announced its investment in Spin.AI in March 2026. K1's support was "instrumental" in bringing the acquisition together, the company said.
Both chief executives framed the fit as complementary. "Adding DoControl's powerful DLP and AI Governance capabilities gives security teams an even clearer view of identities accessing data and how it's moving within SaaS and AI," said Dmitry Dontov, chief executive officer of Spin.AI.
Omri Weinberg, co-founder and chief executive officer of DoControl, said the two firms share "the same ideal customer profile, the same vision, and, most importantly, the same DNA." Existing DoControl customers will see no change to their product or team, the company said.
The signal: The acquisition reflects consolidation in SaaS security, where buyers increasingly want a single vendor covering data, identity, and posture rather than stitching together point tools. DoControl's own research — that automated systems now generate most activity on platforms like SharePointDealroom has a profile for this one. Try Dealroom → and OneDriveDealroom has a profile for this one. Try Dealroom → — points to non-human identity as a fast-emerging risk the combined company is betting on.
Image credit: Generated with Gemini
