The Control Layer Got Funded

Ent left stealth with a $100 million seed — an extraordinary first round — led by Decibel Partners with Sequoia, Craft, and Crosspoint. Built by operators out of RiskIQ and Microsoft's Security Copilot, the company reads intent across both human and AI-agent behavior to stop threats before they execute. The size is the signal: investors are treating agent-aware workspace security not as a feature inside someone else's suite, but as a standalone, platform-scale category. When a seed is priced like a Series B, the market is saying the problem is already big.

NewCore came out of stealth with a $66 million seed led by Cyberstarts, at a reported ~$300 million valuation, to build identity infrastructure designed for AI agents rather than people. The premise, from a team that previously built Dome9: every agent should be a first-class identity with its own permissions, lifecycle, and revocation — the way employees are, not the way shared API keys are. As agents proliferate inside companies, the old model of shared service credentials breaks, and someone has to own who each agent is and what it can touch. Identity, not the model, becomes the control point.

Arcade raised a $60 million Series A (about $72 million total), led by SYN Ventures with Morgan Stanley and Wipro, to run the layer that lets AI agents actually do things in production — authorization, scoped access, and governance across more than 8,000 connected tools. The founding team, out of Okta, authored the authorization spec for the Model Context Protocol, the emerging standard for how agents call tools. That it's a Series A, not a seed, says the governance thesis has graduated from experiment to infrastructure. An agent doesn't create value until it acts — and Arcade is betting the money is in controlling the action.

Tenet Security launched with a $6 million seed, led by The Westly Group and MizMaa, from founders who helped build Cisco's AI Defense. Its approach — "agent-side simulation" — predicts and simulates an agent's next action to block risky paths before they execute, defending against what it calls "agentjacking," where an attacker hijacks an autonomous agent mid-task. It's the smallest round in this week's security cluster, but it names a concrete new attack surface that didn't exist before agents could act on their own. New capability, new exposure, new market.

Magnitude came out of stealth with a $10 million seed led by Ballistic Ventures, deploying a workforce of AI agents to handle third- and Nth-party risk management — continuous vendor risk assessment in place of the point-in-time security review. The founder previously built at Abnormal and Proofpoint. It's the week's pattern from the other side: agents aren't just the thing being governed, they're the thing doing the governing. The control layer is being automated as fast as it's being funded.

Andera raised a $37 million Series A led by Lightspeed to automate internal audit and compliance-control testing — using long-context models to read PDFs, screenshots, and ledgers, run control tests, and assemble the workpapers auditors used to build by hand. It points at a quieter front in the agent shift: the back-office knowledge work that was too unstructured to automate is now in range. For founders, it reframes where defensibility lives — when the testing is automated, the value moves to the judgment and the accountability, not the manual labor.

Alchemy launched AgentCard, a payments-and-identity stack built on Visa Intelligent Commerce that hands an AI agent its own Visa payment token — plus an email, phone, and wallet — through a single API, with spend controls and merchant limits so the agent can buy on a person's behalf. It's not a funding round; it's infrastructure, and that's what makes it a signal. When a network like Visa gives agents a sanctioned way to transact, autonomous commerce stops being a thought experiment. The rails are being laid for software to be a customer.

Adyen introduced Adyen Agentic — a set of modular APIs (Agentic Feed, Agentic Cart, Agentic Payments) that position the payments giant as a "universal translator" between merchants and conversational, agent-led commerce, with early partners including Amex, Mastercard, Visa, and Salesforce. Coming the same week as Alchemy's AgentCard, it's the second major signal that the payments layer is being rebuilt for buyers that aren't human. The distribution channel of the next few years may not have a face — and the incumbents are already building for it.

The same week capital flooded into agent infrastructure, the companies buying it started rationing. A widely-shared analysis framed the shift from "tokenmaxxing to ROI-maxxing": Uber now caps what each employee can spend per agentic coding tool at $1,500 a month after burning its annual AI budget in four months, and Meta is building centralized spend controls and usage dashboards as token consumption spikes, with formal per-department budgets on the way. The era of unmetered AI experimentation is closing. Enterprises will keep spending — but now they're counting, and they expect a return on each dollar.

Europe's Seedcamp closed $320 million across two funds — a roughly $220 million flagship and a $100 million follow-on vehicle — pushing its assets toward $1 billion and expanding its US footprint, with a notable thesis on AI in the physical world. The takeaway for founders isn't the headline number; it's what it confirms. Seed capital is not scarce — there is fresh, dedicated money looking for early companies. It is selective, and increasingly willing to back atoms, not just bits. The room has money; it's deciding what to spend it on.

Two of the largest strategic deals in memory landed in the same week: SpaceX agreed to acquire Anysphere, the company behind the AI coding tool Cursor, for roughly $60 billion in stock — described as the largest venture-backed acquisition ever — while Salesforce agreed to buy Fin (formerly Intercom) for about $3.6 billion all-cash. Last week SpaceX completed the largest IPO in history; this week it spent that new currency on AI. The exit window we flagged as opening last week ↗ hasn't just opened for listings — it's open for acquisitions, and strategic buyers are using fresh public stock to move.