$30m Series A<\/a> backed by Akamai, Battery Ventures, and YL Ventures, bringing total funding to $41m in under a year. Kyndryl, the world’s largest IT infrastructure services firm, has deployed the platform internally and is now reselling it to enterprise clients, which is the kind of early distribution that separates a funded concept from a real market.<\/p>\nWhat this means for your business<\/h2>\n
Gartner’s forecast of 150,000 AI agents per Fortune 500 company by 2028, up from fewer than 15 a year ago, sounds absurd until you consider that most of those agents are already being spun up by individual business units without any formal security review. If 96% of organizations are governing these agents through frameworks designed for human workers and static applications, the exposure isn’t theoretical. It’s sitting in your environment right now, probably attached to standing credentials with broader permissions than any human employee would be granted.<\/p>\n
What Hush is selling is a specific architectural pattern, not a general security platform. Every agent gets enrolled in a central registry, stripped of persistent credentials, and issued just-in-time (JIT) permissions, narrow access rights granted only at the moment the agent needs them and revoked immediately after. A centralized kill switch can disable any agent on demand. This is essentially the principle of least privilege, the security discipline of granting only the minimum access necessary, applied to software that reasons and acts on its own. The argument that enterprises need this is sound. The question worth pressure-testing is whether Hush’s registry model scales to 150,000 agents per company without becoming an operational bottleneck itself, since a governance layer that slows agents down will get bypassed the same way perimeter security got bypassed by cloud adoption.<\/p>\n
Akamai’s strategic participation is the sharpest signal here, and it cuts both ways. Akamai’s edge and security infrastructure puts it inside enterprise networks at a layer where agent activity is observable, which makes it a credible validator of the problem’s severity. It also means Akamai is positioning to embed this capability into its own platform eventually, which may limit Hush’s long-term independence. The more important near-term read for CISOs is simpler: if your current IAM vendor, the identity and access management platform that controls who and what can touch your systems, hasn’t published a roadmap for agentic identities, that gap is now a renewal conversation, not a future consideration.<\/p>\n
Concept deep-dive: Just-in-time (JIT) permissions<\/h2>\n
JIT permissions grant an agent or user access to a resource only at the exact moment it’s needed, then revoke that access immediately after the task completes. Think of it as a hotel key card that works for one door, for one hour, then self-destructs. For AI agents, this matters because standing credentials, permanent access tokens left attached to a service, are a favorite target for attackers. If an agent is compromised, JIT permissions limit the blast radius to whatever the agent was doing in that single session.<\/p>\n
Based on reporting from Hush lands $30m as AI agents outpace enterprise security<\/a>, originally published 2026-07-29 06:09:00.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"Share with your CISO Hush Security is betting that AI agents, software that acts autonomously inside enterprise systems, have already outrun the identity and access controls built to govern human users and traditional applications. The company closed a $30m Series A backed by Akamai, Battery Ventures, and YL Ventures, bringing total funding to $41m in […]<\/p>\n","protected":false},"author":1,"featured_media":7036,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[142],"tags":[238],"tmauthors":[],"class_list":["post-7035","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ai-agents","tag-ciso"],"_links":{"self":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts\/7035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/comments?post=7035"}],"version-history":[{"count":0,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts\/7035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/media\/7036"}],"wp:attachment":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/media?parent=7035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/categories?post=7035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/tags?post=7035"},{"taxonomy":"tmauthors","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/tmauthors?post=7035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}