Rig Security raises $12M to separate AI agent actions from the humans whose accounts they use

"Security teams can see that an account did something dangerous," Guy Kozliner, Rig's founder and CEO, said. "What they cannot see is whether a person did it or an agent did, and they cannot stop the agent without blocking the person." ^[6] SecurityWeek describes the same gap from the log side. The agent takes on the identity of the developer or service that launched it, so a SIEM cannot separate the legitimate user's action from a rogue or subverted agent's ^[4]. SecurityWeek adds that such agents act at machine speed and independent of their creator ^[5]. "The problem is access that is broader than intended, ungoverned, and hiding behind human activity," Kozliner said ^[7].

Rig puts the attribution on the endpoint, where the session originates, because the downstream record shows only the account ^[9][4]. The correlation graph comes from Kozliner's time at Wiz. He concluded the graph approach he used there could be applied to the human and AI identity problem ^[16]. Wiz co-founder and CTO Ami Luttwak is one of Rig's angel investors ^[3].

The architecture and the investors are on the record; the performance and adoption figures come from Rig. The company says the platform is in production at Fortune 200 organizations in financial services, insurance, healthcare and technology ^[11]. The >96% correlation accuracy is a claimed figure ^[8]. The report does not describe a real incident, name a customer, or say how that accuracy was measured.

SecurityWeek has covered two other agent-focused raises. Kontext Security launched with $4 million for AI agent runtime controls ^[14], and Scalekit raised $5.5 million to secure AI agent authentication ^[15]. Counting Rig, the three rounds total $21.5 million ^[18]. The Linux Foundation is set to govern TRACE, an open standard for AI runtime attestation ^[19].

Investor money is going to tools built specifically for agents. Rig, though, sells its platform as identity security posture management and identity threat detection and response across AI and non-human identities ^[10]. On this evidence, agents are a new type of identity that identity-security vendors are competing to cover. The sources do not show a market that stands apart from identity security.

Rig will spend the seed money on research and engineering, particularly detection and enforcement, on a larger U.S. go-to-market team, and on partners and channels ^[13].