Analysis
Onyx Security raised $113 million in a Series B round at a $640 million valuation, a striking re-rating just four months removed from its stealth launch. The company governs what AI agents are actually permitted to do once they're operating inside enterprise systems -- a distinct and increasingly urgent layer of AI security separate from monitoring what a model outputs or protecting individual endpoints from compromise.
The Layer That's Actually Failing
That distinction matters directly against the access-control failure patterns documented in this year's AI-agent breach data: over-permissioned agents and agents acting on data they shouldn't have touched account for the large majority of real agent-related security incidents. In-system governance -- controlling what an agent can actually do once it's inside, not just monitoring what it says -- is precisely the layer where those failures originate, which is exactly the gap Onyx is positioned against.
A Category With Four Distinct Layers Now
Onyx joins a cohort of AI-security companies that have each crossed nine- or ten-figure valuations within roughly the past year: Groundcover, covering observability for AI-agent consumers; Glow, protecting endpoints against AI-native threats; and Horizon3, running continuous, autonomous offense-simulation against AI-accelerated attacks. Together, the four companies now map out genuinely distinct layers of AI-security infrastructure -- observability, endpoint, in-system governance, and offense-simulation -- rather than four companies competing for the same budget line.
Why the Speed Matters
The speed of Onyx's own re-rating is itself a data point worth noting: stealth to $640 million in four months reflects how urgently enterprises are treating in-system agent governance specifically, at a pace that outstrips even the broader AI-security financing wave's already-aggressive cadence this year.
What to Watch
What to watch: whether Onyx discloses named enterprise customers as it scales past this round, and whether any of Groundcover, Glow or Horizon3 move to add competing in-system governance capability now that Onyx has shown the layer can support a $640 million mark this early.