Kiteworks Buys Bonfy.AI to Control Sensitive Data as AI Agents Move It

Kiteworks has acquired Bonfy.AI, bringing software that classifies sensitive information and applies policy while a transfer is happening into its enterprise data-security platform. The practical target is a growing control problem: an employee, assistant or autonomous agent can move corporate data between systems before a conventional inventory of that data says much about whether that exchange should be allowed.

Kiteworks announced the acquisition on September 8. Financial terms were not disclosed, though CTech estimated the deal at tens of millions of dollars. Kiteworks says it will integrate the technology into its Data Control Plane, while continuing to sell Bonfy.AI as a separate solution during the integration.

The security decision shifts to the moment data leaves

Bonfy.AI is built for real-time, inline classification and policy enforcement across email, file sharing, SaaS applications, data repositories, internet-facing AI assistants and autonomous agents. “Inline” means the system is intended to assess and act on an exchange before it finishes, rather than flagging it afterward for review.

The difference is not merely timing. Kiteworks says Bonfy evaluates the sender, recipient, counterparty relationship, communication channel and business purpose surrounding an exchange before applying a policy. That makes the proposed control more contextual than a simple search for sensitive patterns in a document or attachment.

One rule set for people and agents

Kiteworks says the combined platform will use one policy model across human, machine and autonomous-agent workflows. In the company’s framing, the same control that evaluates an employee attaching a file should also evaluate an agent retrieving information, generating a response or transmitting data to another system.

What Bonfy adds to Kiteworks’ stated control model

• A decision at the point of exchange across email, file sharing, APIs and AI-agent activity.
• Transaction context that includes who is sending data, where it is going and why the exchange is taking place.
• A record of classification and enforcement actions that Kiteworks says can serve as auditable evidence.

That ambition also defines the hard part. A system that enforces policy based on business purpose and relationships must have a sufficiently accurate view of those relationships at the moment a transaction occurs. Kiteworks presents that context as the advantage of the acquisition; the announcement does not provide independent results showing how the combined system performs across customers or workflows.

A young company joins an acquisitive buyer

Bonfy.AI was founded in early 2024 by Gidi Cohen and Danny Kibel. It emerged from stealth in June 2025 with $9.5 million in seed funding led by TLV Partners, with participation from Saban Capital Group. The startup initially focused on regulated and security-conscious sectors, including healthcare, finance, insurance, law and media.

For Kiteworks, the purchase is its eighth acquisition in under five years, according to the company. It says its products protect more than 100 million end users across thousands of enterprises and government agencies, a scale that gives Bonfy’s technology a larger route into existing data-exchange workflows.

Gidi Cohen, Bonfy’s founder and chief executive, cast the deal as a way to pair the startup’s runtime controls with a broader platform. The immediate test is integration: whether a common policy layer can govern ordinary employee transfers and AI-driven exchanges without becoming an obstacle to the work those systems are meant to speed up.