Skip to content

Company

Zenity

Named competitor in the agent security category.

Known aliases

  • Zenity Labs

Current stories

buildConfirmed3 publishers

Zenity Labs: one prompt to a public AgentCore agent could return temporary credentials tied to a default role not scoped to that agent

Zenity Labs says one prompt to a public Bedrock AgentCore agent returned credentials for a role scoped to every agent in the account and region. AWS had removed the wider default permissions by September 29, 2026, but roles a team copied or widened sit in its own account.

Publishers:dev.to finance.yahoo.com labs.zenity.io zenity.io

Perspective Coverage

4 publishers
Builder
Builder 41%
Operator
Operator 41%
Investor
Investor 18%

Reality

Evidence55
Adoption
Not scored
Hype gap+30
Incentives60
Confidence58
buildConfirmed2 publishers

AgentCore's region-wide default role let one public agent's stolen credentials reach every agent in the account

Zenity Labs found that one prompt to a single public Amazon Bedrock AgentCore agent could take over every agent in the same AWS account and region. Zenity says the partial fix from AWS still leaves teams to cut each agent's role down to minimal access by hand.

Reality

Evidence50
Adoption
Not scored
Hype gap+15
Incentives65
Confidence55
investOne report1 publisher

Cyera's $1 billion Oasis deal puts a price on one of the AI risks in Anthropic's leaked S-1

Anthropic's leaked S-1 warns AI could resist shutdown or game tests, and only agent-control startups have found acquirers, Cyera paying $1 billion for Oasis. Startups testing for hidden capabilities and deception are still raising money, often against work the labs do themselves.

Publishers:cbinsights.com

Reality

Evidence35
Adoption35
Hype gap+10
Incentives55
Confidence35
productOne report1 publisher

HiddenLayer raises $100M into an AI-security market Gartner sizes at $2.83bn

Gartner has AI-security spending up 83% year over year, which turns HiddenLayer's Series B into a bet on budgets rather than on counted attacks, and leaves buyers grading runtime tools with almost no renewal data.

Publishers:techcrunch.com

Reality

Evidence38
Adoption46
Hype gap+30
Incentives72
Confidence44
buildOne report1 publisher

AIR Security raised $50M to inspect the skills an agent loads before it loads them

The founders' claim is that permissions describe an agent's reach while its context decides its behaviour, and their own scan of 142,836 public skills flagged roughly one in eight as leaning on an external resource they could not vouch for.

Publishers:runtimewire.com

Reality

Evidence45
Adoption22
Hype gap+30
Incentives80
Confidence55