Kiteworks Buys Bonfy.AI to Block Data Leaks in the Age of Artificial Intelligence

Kiteworks Buys Bonfy.AI to Block Data Leaks in the Age of Artificial Intelligence

2026-09-10 companies

San Mateo, Thursday, 10 September 2026.
By acquiring Bonfy.AI, Kiteworks addresses the growing risk of data leaks during real-time movement, marking the cybersecurity firm’s eighth strategic acquisition in under five years.

Strategic Acquisition Announcement and Timeline

On September 10, 2026, San Mateo-based cybersecurity firm Kiteworks announced the acquisition of Bonfy.AI, an AI-native runtime data classification platform [1]. Some reports indicate the announcement occurred on September 9, 2026, highlighting a minor discrepancy in public reporting timelines [alert! ‘conflicting announcement dates’][2]. The strategic deal integrates Bonfy.AI’s automated data classification and repository connectors directly into the Kiteworks Data Control Plane [1]. This move addresses growing regulatory compliance and data governance challenges by enhancing automated visibility across fragmented enterprise systems [1]. For enterprise leaders, the acquisition shifts the security focus from data at rest to data in motion, covering email, file sharing, SaaS, and AI agents [2].

Consolidation Through Disciplined M&A Strategy

This transaction marks the eighth acquisition completed by Kiteworks in under five years, demonstrating a disciplined merger and acquisition strategy [1]. The company has built its platform through a combination of in-house innovation and operational excellence, with each acquisition expanding its data security and compliance capabilities [1]. Prior to this deal, Kiteworks already protected over 100 million end users and more than 1,500 large enterprises and government agencies globally [2]. The consolidation aims to deliver the most comprehensive data security and compliance platform available in the market [1]. By executing eight acquisitions in this timeframe, the firm signals aggressive growth to meet evolving AI-era security demands [2].

Runtime Classification and AI Security Integration

Bonfy.AI’s platform utilizes adaptive knowledge graphs to learn organizational structures, business relationships, and policies from CRM, IAM, and HRIS integrations [1]. This technology provides contextual enforcement for tools including Microsoft 365 Copilot, Claude, and ChatGPT [1]. The acquisition aims to solve the AI security gap by ensuring generative AI tools only access authorized, classified data [2]. Kiteworks will continue to offer Bonfy.AI as a standalone solution while concurrently integrating the technology into the broader Kiteworks platform [1]. This dual approach ensures continuity for existing Bonfy.AI clients while enhancing the unified Data Control Plane for the wider customer base [2].

Executive Perspectives on Data Control

Amit Toren, Chief Business Officer at Kiteworks, stated that Bonfy.AI’s technology expands coverage to deliver the control customers need in the AI era [1]. Gidi Cohen, CEO and Founder of Bonfy.AI, noted that risk is created when data moves, not when it sits, emphasizing the need for runtime context [1]. Jonathan Yaron, CEO of Kiteworks, described the acquisition as a game-changer for enabling customers to embrace AI while maintaining security standards [2]. Tim Freestone, Chief Strategy Officer at Kiteworks, highlighted that inline classification closes the gap of proving data decisions to regulators months later [1]. These leadership insights underscore the strategic priority of controlling data exchanges before they are completed [2].

Sources


Data Governance Cybersecurity Acquisitions