Ascerta raises $18M to show enterprises which AI projects make money
Ascerta raised an $18 million Series A led by Dell Technologies Capital for software that ties enterprise AI spending to revenue and savings. So far, the evidence that buyers want it is two named customers and performance figures Ascerta reports about itself.
Reality
- Evidence30
- Adoption20
- Hype gap+40
- Incentives70
- Confidence40
buildOne report1 publisher SalesBleed made Agentforce leak CRM Account data over DNS from a public lead form
Zenity Labs demonstrated SalesBleed, a proof-of-concept that used a public Salesforce lead form to make Agentforce read Account records and leak them over DNS. Salesforce has already patched it.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence55
Planted web-form lead steered Salesforce Agentforce into leaking CRM records to an outside server
Noma Labs disclosed ForcedLeak, a CVSS 9.4 chain that let a planted Salesforce web-form lead steer Agentforce into leaking CRM data. Salesforce blocked the exit on September 8, leaving audits of recent leads and agent activity as the open task.
Publishers:noma.security
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+35
- Incentives75
- Confidence50
Zenity Labs found three Salesforce Agentforce bugs that let a planted sales lead drive zero-click CRM data theft and Slack phishing. Each attack began with one poisoned lead-form submission, and Salesforce fixed all three within 79 days of Zenity's report.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence62
Dataiku sells an agent inventory to the nine in 10 CIOs who say they already have one
Dataiku ships Agent Management in October with connectors into Salesforce, AWS, Microsoft and Google agent runtimes, metered per agent monitored. The bill grows with every agent the inventory turns up.
Reality
- Evidence44
- Adoption10
- Hype gap+34
- Incentives84
- Confidence54
Okta puts an enforcement point between AI agents and the tools they call
Agent Gateway enforces policy on each tool call and logs it as it happens, while deactivating an agent in the console today only blocks new sessions. Okta says revoking live tokens and cutting sessions in flight is planned.
Reality
- Evidence42
- Adoption27
- Hype gap+30
- Incentives80
- Confidence55
Copilot Chat read confidential mail for weeks past the DLP policy set to stop it
A February 2026 Microsoft admin advisory and the EchoLeak flaw before it both began in AI features vendors switched on inside already-approved apps, putting the missing review squarely on the operator's side of the line.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+35
- Incentives82
- Confidence55
Capsule puts a 71-millisecond judgment between an agent and the action it intends
The startup fine-tuned two Nvidia Nemotron models to allow, flag or block each action an agent intends, and reports 98% accuracy on a 9,429-trajectory benchmark whose own authors say accuracy is the wrong test.
Reality
- Evidence32
- Adoption27
- Hype gap+36
- Incentives80
- Confidence43