Kiteworks Acquires Bonfy.AI to Add Inline, Runtime Data Governance for People, Machines, and AI Agents

Kiteworks has acquired AI-native data-security firm Bonfy.AI — reportedly for tens of millions of dollars, per a CTech estimate — to extend its Data Control Plane with inline, runtime classification and policy enforcement at the moment data is exchanged,…

Kiteworks announced the acquisition of Bonfy.AI, an AI-native content-security platform that classifies sensitive data in real time as it moves across email, file sharing, and AI-agent workflows (Help Net Security also cites APIs, while SecurityWeek also cites SaaS apps). The deal, estimated by CTech at tens of millions of dollars, extends Kiteworks' Data Control Plane with inline runtime data governance: Bonfy's technology evaluates sender, recipient, counterparty, channel, and business purpose to apply policy before a send completes, with entity-aware context analysis intended to reduce false positives compared with pattern-matching prevention tools. A single policy model governs people, machines, and systems, and auditable evidence is framed around compliance demands including CMMC 2.0, HIPAA, and GDPR. This is Kiteworks' eighth acquisition in five years (Help Net Security says 'under five years'). Bonfy.AI was founded in early 2024 by Gidi Cohen and Danny Kibel, raised a $9.5 million seed round, and emerged from stealth in June 2025.

• Kiteworks acquired Bonfy.AI, an AI-native content-security and data-governance platform (coverage dated 2026-09-11).
• Deal value: reportedly tens of millions of dollars, per a CTech estimate cited by SecurityWeek; not officially confirmed.
• Bonfy classifies sensitive data inline at exchange time, covering email, file sharing, and AI assistants/autonomous agents; Help Net Security adds APIs and SecurityWeek adds SaaS apps to the channel list.
• The technology evaluates sender, recipient, counterparty, channel, and business purpose to apply policy before a send completes.
• A single policy model applies to people, machines, systems, and AI agents across the enterprise.
• Entity-aware context analysis is aimed at reducing false positives versus pattern-matching prevention tools.
• The acquisition extends Kiteworks' Data Control Plane with inline, runtime policy enforcement.
• Auditable evidence from the platform is framed around CMMC 2.0, HIPAA, and GDPR compliance demands.