The vulnerability was in the pin. When an AI coding agent like Claude Code or GitHub Copilot fetches a plugin, it often uses a pinned commit hash, a cryptographic anchor meant to guarantee the code hasn't been tampered with. The AIR research team discovered a way to break that anchor, a flaw they called Plugin4Shell. An attacker could silently swap in malicious code during an update, and the agent would execute it, no user click required. It was, the company claimed, the first supply chain vulnerability of the AI agent ecosystem, affecting 134,000 agents [AIR Security]. The find wasn't just a security advisory; it was a product thesis, rendered in code. If the agent's power comes from the skills and tools it can call, then those components are the new attack surface. AIR launched from stealth last September to build the firewall for that surface.
The Wedge in the Agent Stack
Most enterprise AI security has focused on the model itself, guarding against prompt injection or data leakage. AIR's bet is that the real action, and the real risk, is one layer up. An AI agent in a company isn't just a language model; it's a piece of software that can execute tasks. It uses plugins to book flights, MCP servers to query databases, and custom skills to manipulate spreadsheets. This toolkit forms a sprawling, dynamic software supply chain that most security teams cannot see. AIR's platform acts as a discovery and governance layer. It scans an enterprise environment to find every agent in operation, then continuously evaluates the components those agents are using [BankInfoSecurity, September 2026]. If a skill fails a security check or tries to interact with a prohibited system, the platform can block it. The company is, in essence, selling a runtime security policy for autonomous software.
The Unit 8200 Credential
The founding team's background reads like a venture capitalist's checklist for a deep-tech security startup. CEO Yair Saban spent 11 years in Israel's elite Unit 8200 military intelligence unit, rising to lead its research and development division [BankInfoSecurity, September 2026]. Co-founder and CTO Niv Hoffman is another Unit 8200 veteran with a background in offensive cybersecurity [Yahoo Finance, September 2026]. This pedigree signals a specific kind of technical rigor, one built on reverse-engineering complex systems and thinking like an adversary. It's a credential that resonates in security buying committees. The team bolstered its commercial credibility with a key early hire: Ryan Knisley, the former Chief Information Security Officer of The Walt Disney Company and Costco Wholesale, joined as chief strategy officer [The Globe and Mail, October 2026]. The mix suggests a company built to both find esoteric bugs and sell to Fortune 500 boards.
Traction and the $50 Million War Chest
AIR emerged with notable momentum for a company founded in early 2026. It reported more than 20 customers, with roughly a quarter of them being large enterprises [BankInfoSecurity, September 2026]. It also had approximately 40 employees at launch, a headcount that has since grown to about 45 [Fortune] [Ilan Pe'er - Air | LinkedIn]. This early traction was backed by one of the larger seed rounds of the year. The company raised a total of $50 million across two seed financings, led by Sequoia Capital and Greenoaks, with participation from firms like Swish and Netz [Yahoo Finance, September 2026]. The scale of the round, especially for a seed-stage security company, underscores investor conviction in both the market urgency and the team's ability to execute.
| Role | Name | Key Background |
|---|---|---|
| Co-Founder & CEO | Yair Saban | Former head of R&D, Unit 8200 (Israeli military intelligence) [BankInfoSecurity, September 2026] |
| Co-Founder & CTO | Niv Hoffman | Unit 8200 veteran, offensive cybersecurity [Yahoo Finance, September 2026] |
| Chief Strategy Officer | Ryan Knisley | Former CISO, The Walt Disney Company and Costco Wholesale [The Globe and Mail, October 2026] |
The Friction of a New Category
For all its early promise, AIR's path is paved with the classic challenges of defining a new category. The company is selling into a market that is itself being built. Widespread enterprise deployment of sophisticated, action-taking AI agents is still more forecast than reality. Security is a follow-on spend; it requires a primary investment to already be in place. AIR must therefore not only sell its solution but also help catalyze the adoption of the very technology it secures. Furthermore, the competitive landscape remains fluid. While no direct competitors are named in available sources, the space is attracting attention. Large platform vendors (like Microsoft or Google) could eventually bake similar governance into their agent frameworks, and incumbent security players will certainly expand their portfolios. AIR's defense rests on depth and focus.
- Technical head start. The discovery of vulnerabilities like Plugin4Shell demonstrates a research-driven approach that builds a moat of credibility and proprietary threat intelligence [AIR Security].
- Enterprise design. Features like integration with Google Cloud for consolidated billing show an understanding of how large organizations actually purchase software [AIR Security].
- Category definition. By framing the problem as "AI agent software supply chain" security, AIR is attempting to own a mental box in the CISO's mind before anyone else can [ValueAdd VC, September 2026].
What to Watch in the Next Twelve Months
The next year will be about proving that early design is correct. The capital is for hiring, particularly researchers and go-to-market teams in the US and Europe [Yahoo Finance, September 2026]. Key milestones will be less about raw customer count and more about depth of deployment. Watch for named enterprise logos moving from pilot to production, and for the expansion of the platform's coverage to new agent frameworks and tool types. The company's inclusion in Fortune's Cyber 60 list provides a reputational boost [News-Press, October 2026], but the real test is whether it can become a non-negotiable line item in the budget for any company rolling out AI agents at scale.
The product asks a subtle cultural question. For decades, enterprise security has been about defending perimeters and governing human access. AIR's premise is that we are entering an era where the primary user of a software tool is not a person, but another piece of software acting with delegated authority. The firewall is no longer just for the network; it's for the agent's toolkit. The success of this bet hinges on whether the industry comes to see the AI agent not as a smart chatbot, but as a new kind of automated employee,one that needs its own, very specific, set of locks and keys.
Sources
- [AIR Security, retrieved 2026] Plugin4Shell - Zero Click RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected | https://www.air.security/blog-posts/plugin4shell
- [BankInfoSecurity, September 2026] Air Launches With $50M to Keep Enterprise AI Agents Safe | https://www.bankinfosecurity.com/air-launches-50m-to-keep-enterprise-ai-agents-safe-a-32733
- [Yahoo Finance, September 2026] AIR raises $50M to help companies vet the skills and add-ons AI agents use | https://finance.yahoo.com/technology/ai/articles/air-raises-50m-help-companies-154551250.html
- [The Globe and Mail, October 2026] AIR Emerges from Stealth With $50M to Build a Firewall for Agents | https://www.theglobeandmail.com/investing/markets/markets-news/ACCESS%20Newswire/4380070/air-emerges-from-stealth-with-50m-to-build-a-firewall-for-agents/
- [Fortune, retrieved 2026] Air Security (AIR) Company Profile, Stock Price, News, Rankings | https://fortune.com/company/air-security-air/
- [Ilan Pe'er - Air | LinkedIn, retrieved 2026] Ilan Pe'er - Air | LinkedIn | https://www.linkedin.com/in/ilan-pe/
- [ValueAdd VC, September 2026] AIR raises $50M seed for AI agent security platform | https://valueaddvc.com/pulse/air-50-million-seed-ai-agent-security-2026
- [News-Press, October 2026] AIR Named to Fortune’s Fourth Annual Cyber 60 List, Recognizing Innovation in Cybersecurity | https://www.news-press.com/press-release/story/140070/air-named-to-fortunes-fourth-annual-cyber-60-list-recognizing-innovation-in-cybersecurity/