Kiteworks Buys Bonfy.AI to Close a Runtime Gap in Data Governance
Kiteworks, a provider of secure content-communications and data-governance platforms, announced on September 11, 2026 that it has acquired Bonfy.AI, an AI-native content-security startup, in a deal financial terms of which were not disclosed but are estimated in the tens of millions of dollars. The acquisition is Kiteworks' eighth in five years and is aimed squarely at a problem the company says most data-security programs have not solved: enterprises can now inventory where sensitive data lives, but they still lack real-time control over how that data moves — especially when an AI agent, rather than a person, is the one moving it.
Deal Details
| Attribute | Value |
|---|---|
| Acquirer | Kiteworks |
| Target | Bonfy.AI |
| Estimated deal value | Tens of millions of dollars (undisclosed) |
| Date announced | September 11, 2026 |
| Deal count | Kiteworks' 8th acquisition in 5 years |
| Bonfy.AI founded | Early 2024, by Gidi Cohen and Danny Kibel |
| Bonfy.AI prior funding | $9.5 million seed round (emerged from stealth June 2025) |
| Strategic rationale | Add real-time, in-context data classification and enforcement to Kiteworks' governance and compliance platform, covering both human and AI-agent data flows |
What Kiteworks Does
Kiteworks operates a content-sharing and governance platform built to safeguard sensitive data as it moves across enterprise networks, between organizations, and through internal systems. Its core value proposition centers on regulatory compliance, audit tracking, and a "control plane" through which organizations can apply consistent policy to file transfers, email, and other data-exchange channels. The Bonfy.AI acquisition is the company's eighth deal in five years, part of a broader strategy of absorbing adjacent security capabilities rather than building them natively.
What Bonfy.AI Does
Bonfy.AI is an AI-native content-security platform designed to protect sensitive data across both human workflows and AI-agent reasoning. Founded in early 2024 by Gidi Cohen and Danny Kibel, the company emerged from stealth in June 2025 with $9.5 million in seed funding. Its technology performs real-time classification of data at the moment of exchange — evaluating the sender, recipient, counterparty relationship, channel, and business purpose of a given transfer — and applies contextual enforcement before that transfer completes. The platform also extends governance across common SaaS surfaces such as Outlook, Gmail, OneDrive, SharePoint, Google Workspace, and Salesforce.
How This Fills the "AI Gap" in Data Governance
According to Kiteworks, the structural problem it set out to fix is a mismatch between where enterprises have invested and where risk actually accumulates. A decade of investment in data discovery and posture management has produced detailed inventories of sensitive data sitting at rest inside corporate data stores. But posture management classifies data at rest; the risk itself is created in motion — in the email about to be sent, the file about to be attached, or the response an AI agent is about to generate.
Bonfy.AI's runtime classification model is built around that distinction. Rather than scanning data after the fact, it reads the full context of an exchange as it happens and applies policy before the send completes. Layered into Kiteworks' existing control plane, the combined product is intended to govern data in motion and in use under a single policy model that applies equally to people, machine processes, and autonomous AI agents — closing a gap that neither company's platform addressed fully on its own.
Executive Commentary
Kiteworks Chief Business Leader Amit Toren said Bonfy.AI's technology "expands our coverage and capability to deliver the control our customers need in the AI era." Kiteworks Chief Strategy Officer Tim Freestone framed runtime classification as central to that promise, noting the capability is "what makes that promise complete" when it comes to giving customers control over private data as it moves — including the ability to substantiate those enforcement decisions to regulators after the fact.
Bonfy.AI CEO Gidi Cohen said the company was built around the idea that "risk is created when data moves, not when it sits, and controlling it means reading the full context of an exchange at runtime, before it completes." He added that Kiteworks "gives that technology a control plane and a reach we could not have built on our own," and said he was looking forward to seeing it "governing data for both people and AI agents at global scale."
Deal Structure and Timeline
Financial terms have not been disclosed by either company; industry reporting places the estimated value in the tens of millions. During the transition period, Bonfy.AI will remain available as a standalone solution while its runtime classification technology is integrated into the broader Kiteworks Data Control Plane.
Impact Assessment
For existing Kiteworks customers, the acquisition signals an eventual expansion of the platform's governance model from primarily inventory- and transfer-tracking functions toward real-time, in-line enforcement decisions — including coverage of AI-agent-generated content and cross-SaaS data flows. Organizations already using Kiteworks for regulated data exchange should expect roadmap communications on how Bonfy.AI's runtime classification will be phased into existing deployments, and should factor a multi-quarter integration timeline into any procurement or renewal planning.
For the broader data-governance and AI-security market, the deal is another data point in an accelerating consolidation trend: point solutions built around AI-agent visibility and control are increasingly being folded into established data-security and compliance platforms rather than scaling as standalone products. Enterprise buyers evaluating AI data-governance tooling should treat "runtime" or "in-line" classification — as opposed to periodic, at-rest scanning — as an increasingly table-stakes requirement, particularly for organizations that have already deployed or are piloting agentic AI systems with access to sensitive data or SaaS platforms.
Key Takeaways
- Kiteworks acquired Bonfy.AI on September 11, 2026, in a deal estimated in the tens of millions of dollars; exact terms were not disclosed.
- The acquisition is Kiteworks' eighth deal in five years, continuing a strategy of acquiring adjacent capabilities rather than building them in-house.
- Bonfy.AI's core technology is runtime, in-context data classification — evaluating sender, recipient, channel, and purpose before a transfer completes, rather than scanning data at rest.
- The deal explicitly targets AI-agent data flows, extending governance to responses and actions generated by autonomous systems, not just human-initiated transfers.
- Bonfy.AI will run as a standalone offering during a transition period before full integration into the Kiteworks Data Control Plane.