Cyera and Upwind Deepen the Control-Plane Race

Security vendors are competing to become the control layer for AI agents, where identity, data, and runtime enforcement converge.

Updated

What is this trend?

Cybersecurity vendors are racing to own the control plane for AI agents by combining data access, identity, governance, and runtime enforcement into one platform.

  • Funding is flowing to platforms that control what AI agents can see and do.
  • Identity, data access, and runtime enforcement are converging into one stack.
  • Acquisitions are folding AI governance into broader security and compliance platforms.
  • The premium is shifting from visibility tools to indispensable control points.
  • Vendors that reduce sprawl and enforce policy across agent actions are winning.

What’s the latest?

Cyera’s $400 million extension from Goldman Sachs is the clearest sign yet that the control-plane race is maturing into market structure: the company is using the funding to accelerate a unified data-

AI SOC convergence, enforcement-driven governance, and upstream third-party risk reshape security control planes

How it developed

  1. Continuous Identity Control, Sovereign Assurance as Procurement Gate, and AI Security Platformization
    • AI Security Becomes a Platform Control Point

  2. Runtime Governance Tightens, Hack-for-Hire Networks Face Export Scrutiny, and Third-Party Risk Turns Remedial
    • Fortinet and Kiteworks Push Governance Into the Runtime

  3. Agent Access Tightens, Offense Accelerates, Sovereignty Hardens, and PQC Becomes Procurement Deadline
    • AI Security Startup Absorption

Go deeper

Curated long-form picks on this trend — podcasts, videos, and analysis, by vantage.

Related reporting

Deep-dive stories that report on this trend.

Related trends

Stay ahead in Cyber Security

Get the weekly brief in your inbox — the developments, what they mean by vantage, and what to do next.