As enterprises allow AI agents to access more databases, business systems, and the internet, a new type of software supply chain formed around components such as skills, plugins, and MCP servers is becoming a critical link that enterprise security teams need to address. AIR has announced the end of its stealth mode and completed two rounds of seed financing totaling 50 million US dollars.

Two rounds of financing completed within weeks

AIR was founded by Yair Saban and Niv Hoffman, both of whom have worked in cybersecurity for the Israeli 8200 unit. Saban indicates that two rounds of financing were completed within a few weeks, with the first round amounting to 10 million US dollars and the second round to 40 million US dollars.

• Sequoia Capital led the first round of financing
• Greenoaks Leads the Second Round of Financing
• Multiple angel investors participated simultaneously

AIR's products are aimed at the AI proxies that operate within enterprises. The platform can identify these proxies in the corporate environment, continuously monitor the skills, tools, and components they utilize, and prevent them from connecting to software or external information sources that do not meet security standards. Companies are also provided with a reviewed proxy extension market.

Focus on reviewing plugins and skills

AIR believes that after enterprises widely use AI proxies, this system will become increasingly similar to an operating system. However, the tools for installing and invoking these proxies currently lack a review mechanism similar to that of traditional drivers or applications. The risks come not only from direct attacks on the proxies themselves but also from the possibility of the content read by the proxies being poisoned.

According to the introduction of AIR, its products mainly consist of three layers: first, it identifies active AI proxies within the enterprise and determines whether employees are using AI tools or personal accounts that have not been approved by IT; then, by connecting to the proxy execution layer, it intercepts and analyzes actions such as loading skills and accessing web pages; finally, it compares the relevant tools and extensions with the company's maintained allowlist.

Has served over 20 clients

Saban indicates that the company will continuously assess publicly available skills and extensions on the internet, as components that were previously approved may become high-risk due to changes in dependency packages or intrusions into developer accounts. According to AIR, the platform currently filters out about 27% of the extensions and skills it discovers online.

According to AIR, the company currently has over 20 customers, of which about a quarter are large enterprises. At this stage, the industries with the strongest demand are mainly those with higher regulatory requirements, including financial services and pharmaceutical companies. The company currently has around 40 employees, and the new financing will be primarily used for hiring researchers and expanding its market presence in the United States and Europe.

There are already multiple competitors in the race.

This field is not a blank market. Noma Security, Zenity, Astrix Security, and Operant AI are all providing products related to AI proxy discovery, access control, runtime monitoring, or MCP protection. TechCrunch mentioned that Zenity completed a $125 million Series C financing in August of this year, while Noma completed a $100 million Series B financing last year.