Sentra raises $150 million to tighten AI agents’ access to corporate data

Sentra announced a $150 million investment led by Capital One Ventures on November 4, 2026, to strengthen controls over the corporate data AI agents can reach. The financing backs product development and commercial expansion, including better visibility into agents accessing sensitive information and faster containment when an agent behaves unexpectedly.

The problem, as co-founder and CEO Yoav Regev describes it, begins before an agent does anything unusual. Agents can inherit permission to read data that has not been fully classified or governed. Regev argues that traditional perimeter controls were not built for agents operating at machine speed, making the security of the underlying data a starting point for deployment.

Existing investors Bessemer Venture Partners, Zeev Ventures, Standard Investments, Munich Re Ventures and Key1 Capital joined the investment. A Capital One representative will take a seat on Sentra’s board as part of the transaction, giving the new lead investor a role in the company’s governance.

Securing data before agents arrive

Sentra’s approach centers on data at rest: information stored in corporate systems. Rather than trying to inspect every agent request as it happens, the company says it governs the data and permissions agents depend on ahead of time. Its coverage spans cloud services, business software, data warehouses, on-premises file shares and knowledge stores used by AI.

The platform combines a business-specific classification of sensitive information with a map of who or what can access it. That map includes employees, service accounts and AI agents, along with inherited permissions. Sentra describes three stages of protection around that shared view of data and access:

• Before access: Sentra says it finds and classifies sensitive data, limits non-human identities to the access they need, and removes redundant, obsolete or high-risk data. The aim is to reduce the information an agent could encounter before it starts working.
• During activity: Detection tools flag unusual access to sensitive data. Automated remediation can revoke access or remove risky sharing, while high-risk issues go to data owners and existing workflows. This is the containment side of the platform, rather than only an inventory of permissions.
• After an incident: Sentra says it shows what an agent could have reached, with business context for the datasets involved. That gives security, legal and compliance teams a record of potential exposure to support their response—not merely a list of where information is stored.

Sentra says the analysis happens inside the customer’s environment, without moving sensitive data elsewhere. The company argues that alternatives which copy information into a vendor’s systems create another collection of data to secure, adding retention, residency and compliance risks for regulated businesses. That is Sentra’s stated case for keeping analysis where the data already lives.

What organizations can do is make sure the data those agents reach is already secured.

Yoav Regev, Sentra co-founder and CEO

From access maps to wider deployments

Lyft chief information security officer Chaim Sanders, quoted in Sentra’s announcement, described the practical deployment question: his teams want to know what data agents can reach before turning them on. Sanders said Sentra provides that answer across Lyft’s environment, allowing security to support the rollout rather than slow it down.

The new capital is intended to broaden visibility into agents, copilots and models touching sensitive data. Sentra also plans to improve continuous access controls for human and non-human identities, protection before agents reach stored information, and rapid containment. These are investment priorities attached to the financing, not a separately announced product release.

Commercial spending will support larger field-sales and channel programs, brand and marketing work, and entry into new geographies. Sentra reported more than 300% year-over-year growth ahead of the investment, without identifying the metric in its announcement. The company did not disclose a valuation, according to SiliconANGLE.