The round was co-led by Ten Eleven Ventures and Brightmind Partners, with strategic participation from the CrowdStrike Falcon Fund and backing from cybersecurity founders and executives including Wiz co-founder and CTO Ami Luttwak.
Founded in early 2025 by CEO Guy Kozliner, a former member of Ami Luttwak's CTO team at Wiz, Rig Security has been building what it calls an identity protection platform for the agentic era.
The startup has grown to 20 employees and says it is already in production with Fortune 200 organizations across financial services, insurance, healthcare and technology.
Why AI Agents Break Identity Security
Rig's thesis starts with a simple observation: autonomous AI agents never log in as themselves.
Coding assistants, automation tools and agents borrow the identity of the human owner or service account that launched them, so in the identity provider, the audit log and the SIEM, an agent deleting a production database looks exactly like the person who owns the account.
That breaks traditional tooling. When a rogue or subverted agent does damage, the standard response — disable the account — also blocks the employee whose identity the agent borrowed.
"Identity used to mean people's credentials. Today, the most active identities in an enterprise are AI agents, and they are acting under human names," said Kozliner.
Roughly three in four breaches involve compromised identities, making this one of the most vulnerable attack surfaces in the enterprise.
How Rig's Platform Works
Rig's platform discovers AI agents on endpoints, distinguishes their activity from the human or machine identity they are operating through, and enforces policy on what they may do in real time.
At its core is the Rig Identity Correlation Engine (RICE), which resolves the same identity across identity providers, cloud infrastructure, on-premises systems, network edges and endpoints at more than 96 percent accuracy based on internal testing.
RICE powers an Identity Dependencies Graph: a live map of how human, machine and AI identities connect through accounts, permissions, sessions and trust relationships, and how those relationships can be abused.
A lightweight endpoint sensor can block a rogue agent's risky action before it reaches the cloud, without disrupting the person whose identity the agent borrowed. The platform delivers identity security posture management and threat detection and response across AI and non-human identities, and deploys agentlessly in minutes.
Backing From the Cybersecurity Establishment
CTO Nokky Goren was the first engineer at Axis Security, acquired by HPE, and head of product Michal Haikov is a veteran of Israel's Unit 8200 and Flow Security, acquired by CrowdStrike.
"Most tools stop at showing the problem. Rig goes further, connecting visibility, risk and real-time enforcement so security teams can actually act on identity risk," said Mark Hatfield, co-founder and partner at Ten Eleven Ventures.
The company is available on the AWS Marketplace and the CrowdStrike Marketplace, was named one of two runners-up in the 2025 AWS and CrowdStrike Cybersecurity Startup Accelerator run with the NVIDIA Inception program, and says it currently protects tens of millions of identity activities.
Rig plans to expand its team in both Israel and the US over the coming year.
By Hamza Faisal
