Threat Intelligence & APT SecurityWeek 1 month ago

Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Kiteworks has announced the acquisition of AI data security company Bonfy.AI, a move aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents. Kiteworks delivers a content-sharing platform to safeguard sensitive data as it moves across enterprise networks, external organizations, and internal systems. It includes regulatory compliance,..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Cybersecurity M&A

Kiteworks has announced the acquisition of AI data security company Bonfy.AI, a move aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents.

Kiteworks delivers a content-sharing platform to safeguard sensitive data as it moves across enterprise networks, external organizations, and internal systems. It includes regulatory compliance, governance, and audit tracking. 

Bonfy.ai is an AI‑native content‑security platform protecting sensitive data across human workflows and AI‑agent reasoning. It offers real‑time classification, contextual enforcement, and cross‑SaaS governance.

The cost of the acquisition has not been disclosed but is estimated by CTech at ‘tens of millions of dollars’.

The Bonfy technology will be used to extend Kiteworks’ policy enforcement across agent and human data exchange and usage in real time and inline across email, file sharing, SaaS applications, data repositories, Internet-facing AI assistants, and autonomous agents.

It fills, says Kiteworks, a structural gap in how enterprises protect sensitive data. Enterprises have detailed inventories of their sensitive data, but the inventories do not necessarily control what happens to that sensitive data when it is used or transferred. Bonfy technology fills this gap by classifying the data at the moment it is exchanged, and applying security policies before the transfer is completed – including when the exchange involves an AI assistant or autonomous agent. 

Advertisement. Scroll to continue reading.

Combining this technology with the Kiteworks control plane for secure data exchange, says Kiteworks, governs data in motion and in use through a single policy model that applies equally to people, machines, and systems across the enterprise.

Written By Kevin Townsend

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →