AIR's platform can discover agents running at a company, continuously vets any skills and add-ons they use, and blocks any unwanted behavior. As companies start giving AI agents access to an increasing portion of their systems, a nascent software supply chain seems to be forming around the new tooling AI agents are using: skills, plug-ins, MCP servers, and add-ons that let them interact with the internet.

What happened

As companies start giving AI agents access to an increasing portion of their systems, a nascent software supply chain seems to be forming around the new tooling AI agents are using: skills, plug-ins, MCP servers, and add-ons that let them interact with the internet. AI security startup AIR believes companies will need a way to monitor that supply chain, and it’s now coming out of stealth with $50 million raised across two seed rounds to build that product.

Founded by Yair Saban (CEO) and Niv Hoffman (CTO), veterans of Israel’s Unit 8200 intelligence corps, where they worked on offensive cybersecurity, AIR offers a platform that can discover agents running inside companies, continuously vet any skills, tools, and components those agents use, and block them from interacting with software or external sources that don’t pass security criteria. It also offers a marketplace of vetted add-ons and skills for AI agents.

The funding rounds closed within weeks of each other, Saban told TechCrunch, with the first round raising $10 million, and the second $40 million.

The important details

Sequoia led the first round, while Greenoaks led the second, Saban said. Swish, Netz, and Zach Frankel (president of Cognition), Yinon Costica (co-founder of Wiz), Ofir Ehrlich (co-founder of Eon), Anne Neuberger, Omer Adam, Varun Anand (co-founder of Clay), and other angel investors also participated.

AIR’s pitch goes thusly: The way AI agents are used wholesale at companies is beginning to resemble operating systems, but the tools they use, or the software they can install, aren’t yet being given the kind of oversight we give to drivers or applications. “In the early 2000s, whenever you installed a driver, the driver didn’t need to be signed.

Today, every time you install a driver, you see a signature saying who signed it, because the driver is actually loading code into the kernel,” Saban said.

Context and impact

“You don’t have that with skills or plug-ins or MCPs, and it’s a shame, because it’s the same mechanism, it’s the same lesson, but we haven’t learned it.” The big risk, he argues, is that as AI agents start working more autonomously across databases and enterprise systems, and connecting to the internet, attackers can poison the content an AI agent consumes instead of attacking it directly. The startup says it can solve that with a visibility product that finds agents active across a company’s environment, as well as identifies employees who use AI tools unapproved by IT departments or those who use personal accounts.

Then, it uses an enforcement layer that hooks into agents to intercept and analyze actions, like loading a skill or fetching content from the internet. Lastly, AIR also checks the tools, add-ons, or software an agent wants to use against a whitelist the startup maintains.

Saban says the startup maintains this whitelist by evaluating skills and add-ons openly available on the internet for changes and malicious behavior, as a previously approved skill could become risky if a package it downloads changes, or its developer’s account is compromised.

What comes next

He added that AIR’s platform currently filters out about 27% of the add-ons and skills it finds online. AIR claims it has more than 20 customers, and Saban said roughly a quarter of these are large enterprises.

He said the company has so far seen the strongest demand in heavily regulated industries, particularly financial services and pharmaceutical companies. However, AIR is hardly alone in this space.

Noma Security offers discovery, access controls, and runtime monitoring for agents, MCP servers, and skills, while Zenity sells security and governance tools that work similarly.

Key signals

• Founded by Yair Saban (CEO) and Niv Hoffman (CTO), veterans of Israel’s Unit 8200 intelligence corps, where they worked on offensive cybersecurity, AIR offers a platform that can discover agents running inside companies, continuously vet any skills, tools, and components those agents use, and block them from interacting with software or external sources that don’t pass security criteria.
• Then, it uses an enforcement layer that hooks into agents to intercept and analyze actions, like loading a skill or fetching content from the internet.
• Saban thinks AIR’s moat lies in its ability to continuously vet the skills and add-ons ecosystem growing around AI agents.

What to watch

Watch whether the capital produces faster shipping, deeper partnerships, or sharper competition in the category.