Sentra raises $150 million to secure enterprise data for AI agents
The investment from Capital One Ventures aims to help companies manage how autonomous AI agents access sensitive information across complex cloud environments.
The short version
- Capital One Ventures led the $150 million funding round, joining investors like Bessemer Venture Partners and Munich Re Ventures.
- Sentra focuses on 'data at rest,' securing information where it lives rather than inspecting every individual request in real-time.
- The platform identifies and classifies sensitive data across cloud, SaaS, and on-prem systems to prevent over-permissioned access.
- The company reported over 300% year-over-year growth as enterprises rush to deploy AI copilots and autonomous agents.
- Sentra analyzes data entirely within the customer's environment to avoid the risks of moving sensitive records to a third-party estate.
Why it matters
As companies move from human-only workflows to autonomous AI agents, the risk of 'machine-speed' data leaks increases. This funding signals a shift toward security models that prioritize pre-emptive data governance over reactive perimeter defense.
The rise of agentic data security
Enterprises are currently facing a massive shift in how they interact with information. While data security was originally built for human users, the explosion of AI agents—autonomous programs that perform tasks on behalf of people—has created a new challenge. These agents act as the busiest consumers of enterprise data, often moving at machine speeds that traditional security tools cannot monitor effectively.
Many organizations are struggling to keep up with the rapid rollout of AI copilots and cloud services. Because these agents often inherit permissions from existing systems, they can inadvertently access sensitive records that haven't been properly classified. This creates a situation where business speed is often at odds with the need for strict data governance and visibility.
Sentra is positioning itself to solve this by providing 'agentic data security.' This approach focuses on ensuring that the data an agent reaches is already secured. By governing the data and the identities that can reach it ahead of time, companies can deploy AI more quickly without losing control over their most sensitive assets.
Securing data at rest
Unlike some security models that try to inspect every single request as it happens, Sentra focuses on protecting data at rest. This means the platform secures information where it lives, across various environments including cloud storage, SaaS applications, data warehouses, and on-prem file shares. By governing the data before an agent ever reaches it, the company maintains continuous protection beyond traditional perimeters.
The platform works by finding and classifying sensitive data across these diverse environments. It then maps out what people, service accounts, and AI agents can actually reach, including any permissions they might have inherited from other sources. This allows security teams to enforce the principle of least privilege, ensuring that non-human identities only have the access they absolutely need.
A key technical advantage of this method is that Sentra analyzes data entirely inside the customer's own environment. This prevents the need to copy sensitive information into a separate third-party estate. For regulated industries, this is a critical distinction because it avoids the extra retention, residency, and compliance risks that come with moving data to a different location.
Detection and automated response
Beyond initial classification and mapping, Sentra provides tools for active monitoring and rapid containment. The platform uses data-aware detection to flag any unusual access to sensitive information. If an agent behaves unexpectedly or an access pattern looks risky, the system can trigger automated remediation to revoke access or remove risky sharing immediately.
When these high-risk issues are identified, the system routes them to the appropriate data owners and existing workflows for review. This ensures that security teams are not overwhelmed by every minor alert but can focus on the most significant threats. It provides a way to contain a malfunctioning or compromised agent fast, minimizing the potential for a large-scale data breach.
After an incident occurs, Sentra provides a record of what an agent could have reached. This includes business context for the datasets involved, which helps legal and compliance teams respond more effectively. By providing this evidence, the platform helps organizations respond to security events in a way that is both quick and defensible to auditors.
Scaling the AI security market
The $150 million investment is intended to accelerate Sentra's innovation in several key areas. The company plans to improve its visibility into agents, copilots, and the specific models they use. They also aim to provide continuous least privilege for both human and non-human identities while expanding their brand and marketing reach.
The company is also looking to scale its go-to-market strategy by growing its field and channel programs. They plan to enter new geographies to meet the increasing demand for data security posture management. This funding comes on the heels of a year where the company saw more than 300% year-over-year growth as enterprises turned to the platform to manage their AI-driven data needs.
As Yoav Regev, co-founder and CEO of Sentra, noted, "AI agents are now the busiest consumers of enterprise data." The goal of this new capital is to bring agentic data security to every enterprise that is putting these autonomous agents to work. By unifying data security posture management, detection, and access governance, Sentra aims to be the primary layer of protection for the AI era.
What to watch
- How other security vendors will pivot to support 'agentic' identities.
- Whether data-at-rest security will become the standard over real-time request inspection for AI.
- The specific types of AI agents (e.g., coding assistants vs. customer service bots) that see the fastest adoption of these tools.
Try it
Check your organization's current 'non-human' identities, such as service accounts or API keys, to see what permissions they have inherited from older systems.
Sources and links
- ReportingPR Newswire: the article we sourced
Liked it? Say why
Add a line for other readers.
No account needed. We never show your email. Comments with links, ads or abuse are held and not shown. Your comment shows after a quick check.
Listen to the AI Wire headlines
Listen to the AI WireListen to our daily AI shows every morning: on your commute, in the shower, wherever you are
Listen to the daily showsFirst reported by PR Newswire · Read the original. Written by the SI Agent News Desk from the reporting above.Written with AI from the source above. Every number is checked against the source. Spot a mistake? Corrections.
