Rig Security Secures $12M to Protect Enterprises from AI Agents Hiding Behind Human Identities

AI Agents Create New Identity Security Challenge

Rig Security emerged from stealth with $12 million in seed funding to tackle a growing vulnerability in enterprise security: AI agents operating under human identities1

1

2

2

. Ten Eleven Ventures and Brightmind Partners co-led the round, with strategic participation from the CrowdStrike Falcon Fund and backing from Wiz Co-Founder Ami Luttwak1

1

. The cybersecurity startup addresses a critical blind spot: coding assistants, autonomous agents, and automation tools do not log in as themselves but borrow the identity of the human owner or service account that launched them1

1

. This means when an agent deletes a production database, audit logs show the person who owns the account as the actor.

Identity Protection in the Agentic Era Demands New Approach

Roughly three in four breaches involve compromised identities, making AI-driven identities one of the most vulnerable attack surfaces enterprises face today1

1

. Guy Kozliner, Founder and CEO of Rig Security, explains the shift: "Identity used to mean people's credentials. Today, the most active identities in an enterprise are AI agents, and they are acting under human names"1

1

. Security teams can detect when an account performs a dangerous action but cannot determine whether a person or an agent was responsible, and they cannot stop the agent without blocking the employee2

2

. The platform was built to help organizations unleash AI securely by providing visibility into which agents exist, what access they have borrowed, and what they are doing with it1

1

.

RICE Engine Delivers Real-Time Visibility Across Enterprise Systems

At the core of Rig's platform is the Rig Identity Correlation Engine, or RICE, a proprietary system built by a Harvard alumni research team currently in patent process1

1

. Using machine learning and mathematical modeling methods, RICE resolves the same identity across identity providers, cloud infrastructure, on-premises systems, network edges, and endpoints with more than 96% accuracy1

1

2

2

. RICE powers Rig's Identity Dependencies Graph, a live map of how human, machine, and AI agents are connected through accounts, permissions, sessions, and trust relationships, and how those relationships can be exploited1

1

. The underlying research has produced five inventions1

1

.

Lightweight Endpoint Sensor Stops Risky Agent Activity at Runtime

Rig's lightweight endpoint sensor distinguishes an AI agent's session from the user's own activity and enforces policy inline1

1

2

2

. This capability enables the platform to stop risky agent activity before it reaches the cloud, without disrupting the person whose identity the agent borrowed1

1

. The platform deploys agentlessly in minutes, providing visibility across cloud, on-premises, and identity-provider environments1

1

. Organizations can then deploy sensors where needed to add runtime attribution and policy enforcement1

1

. Together, these capabilities deliver Identity Security Posture Management and Identity Threat Detection and Response across AI and non-human identities from one platform1

1

.

Fortune 200 Companies Already Protect Enterprise Identities with Rig

Rig is already in production with Fortune 200 organizations across financial services, insurance, healthcare, and technology1

1

. The 20-person company's software now analyzes hundreds of millions of identity events and access signals every month2

2

. Mortgage lender New American Funding is one customer using the platform for enterprise security monitoring. Bill Harper, its assistant vice president of digital identity, said agents write code and investigate issues across the company, and traditional identity tools cannot reliably tell their activity apart from the employee's2

2

. Rig shows which agents are running and whose access they are using, giving the lender control over them "without getting in the employee's way," he said2

2

. The platform is available on the AWS Marketplace and the CrowdStrike Marketplace1

1

2

2

.

Experienced Team Brings Expertise from Wiz and Unit 8200

Kozliner started Rig after working on Wiz Co-Founder Ami Luttwak's team2

2

. Chief Technology Officer Nokky Goren was the first engineer at Axis Security, a network security startup that Hewlett Packard Enterprise acquired in 20232

2

. Head of Product Michal Haikov brings experience from Israel's Unit 8200 and Flow Security, now part of CrowdStrike Holdings2

2

. Mark Hatfield, co-founder and partner at Ten Eleven Ventures, noted that most identity tools only point out what is wrong, while Rig connects what it finds to enforcement in real time, enabling security teams "to actually act on identity risk, including risk created by AI agents"2

2

. As AI agents become more autonomous and gain broader access to enterprise systems, organizations will need to monitor chained permissions and trust relationships across their infrastructure to prevent identity-based attacks while maintaining productivity.