Kiteworks has announced the acquisition of AI data security company Bonfy.AI, a move aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents.
Kiteworks delivers a content-sharing platform to safeguard sensitive data as it moves across enterprise networks, external organizations, and internal systems. It includes regulatory compliance, governance, and audit tracking.
Bonfy.ai is an AI‑native content‑security platform protecting sensitive data across human workflows and AI‑agent reasoning. It offers real‑time classification, contextual enforcement, and cross‑SaaS governance.
The cost of the acquisition has not been disclosed but is estimated by CTech at ‘tens of millions of dollars’.
The Bonfy technology will be used to extend Kiteworks’ policy enforcement across agent and human data exchange and usage in real time and inline across email, file sharing, SaaS applications, data repositories, Internet-facing AI assistants, and autonomous agents.
It fills, says Kiteworks, a structural gap in how enterprises protect sensitive data. Enterprises have detailed inventories of their sensitive data, but the inventories do not necessarily control what happens to that sensitive data when it is used or transferred. Bonfy technology fills this gap by classifying the data at the moment it is exchanged, and applying security policies before the transfer is completed – including when the exchange involves an AI assistant or autonomous agent.
Combining this technology with the Kiteworks control plane for secure data exchange, says Kiteworks, governs data in motion and in use through a single policy model that applies equally to people, machines, and systems across the enterprise.
“Bonfy.AI’s cutting-edge technology expands our coverage and capability to deliver the control our customers need in the AI era, and its excellent team will further accelerate the development of our unified Data Control Plane,” suggests Amit Toren, chief business officer at Kiteworks.
This is the eighth Kiteworks acquisition in five years, with each one designed to expand the firm’s data security and compliance platform.
The value of this acquisition includes a governed decision inline at runtime rather than a report after the fact; decisions based on genuine context rather than simple pattern matching; a single policy model for both human and AI workflows; enterprise-wide data exchange control; and provable compliance at the moment of decision. It becomes an extension of Kiteworks rather than a parallel product.
“Everything we build comes back to a single promise to our customers: you stay in control of your private data, everywhere it moves and everywhere it is used,” comments Tim Freestone, chief strategy officer at Kiteworks. “Inline at runtime classification is what makes that promise complete. Knowing where sensitive data lives is part of the equation, but deciding, in the instant data leaves, whether it should leave, and being able to prove that decision to a regulator months later is a big gap we’re closing.”
Bonfy was founded in early 2024 by Gidi Cohen and Danny Kibel. It emerged from stealth in June 2025 with $9.5 million in seed funding. “We built Bonfy.AI around a single idea: risk is created when data moves, not when it sits, and controlling it means reading the full context of an exchange at runtime, before it completes,” said CEO Cohen. “Kiteworks gives that technology a control plane and a reach we could not have built on our own. I’m excited to see it governing data for both people and AI agents at global scale.”
Related: Palo Alto Networks Acquires AI Agent Platform Console
Related: Fortinet Acquires AI Security Company Virtue AI
Related: Watch on Demand: Cloud & Data Security Summit
Related: Data Security Firm Evervault Raises $25 Million in Series B Funding
