Leading DLP Provider, Kitecyber, Extends Endpoint DLP to AI Agents with Real-Time Data Classification
SAN JOSE, Calif. – September 2, 2026 – Kitecyber, an endpoint-native cybersecurity company founded in 2022 that delivers data loss prevention and AI agent security through a single lightweight agent, today added real-time data loss prevention capabilities built specifically for AI agent activity. The update lets Kitecyber’s endpoint agent detect, classify and act on sensitive data at the moment an AI agent or application interacts with it on the device, rather than after the data has already moved. The company is SOC 2 Type II compliant and ISO 27001 certified, and counts AI-native technology companies including Scrut Automation and Sarvam AI among its customers.
Security teams have years of visibility into what employees do at a keyboard, and almost none into what the AI agents acting on their behalf do with the same data and access. Traffic from AI agents and agentic browsers grew 7,851% year over year, according to HUMAN Security’s 2026 State of AI Traffic and Cyberthreat Benchmark Report, and organizations now manage an average of 109 machine identities for every human identity, according to Palo Alto Networks’ 2026 Identity Security Landscape report. Among workers who use AI on the job, 43% have shared sensitive work information without their employer’s knowledge, according to the National Cybersecurity Alliance and CybSafe’s 2025-26 annual cybersecurity attitudes and behaviors report.
The update ships four capabilities that Kitecyber describes as industry firsts. Classification and enforcement now happen at the point of contact, so Kitecyber evaluates sensitive data the moment an AI agent, not only a human user, touches it, then applies an action, allow, warn or block, before the data leaves the device. When the agent detects a suspicious combination of AI activity and sensitive data, it generates a full incident report within minutes without requiring a pre-built threat database, a historical baseline, or prior knowledge of the agent or attack pattern. Kitecyber also tracks data lineage through transformation, so a spreadsheet of customer records converted to an image, encoded, or reformatted to defeat content-matching scanners is still recognized and governed. The fourth capability combines LLM-based understanding with pre-processing performed locally, improving classification accuracy while keeping sensitive content on the device rather than routing it to the cloud for every decision.
“Every DLP and network security tool on the market today was designed to watch a human sitting at a keyboard,” said Ajay Gulati, CEO and co-founder of Kitecyber. “That assumption is already out of date. Agents read, transform and move data at machine speed, often invisibly, under a person’s own session or API keys. If a security stack cannot see the moment an agent touches sensitive data, it can only investigate after the fact.”We built this so a security team gets a complete incident report in minutes, even the first time they encounter a given agent or attack pattern, because classification and enforcement happen on the endpoint before anything leaves the device,” Gulati said.
Kitecyber’s updates are available now to existing and new customers through the same lightweight agent Kitecyber already deploys across Windows, macOS and Linux, with a free trial and self-serve signup on the Kitecyber console and no separate agent or integration work.
About Kitecyber
Kitecyber is an endpoint-native cybersecurity company that puts data security at its source, the endpoint, where work happens. Headquartered in the San Francisco Bay Area, the company delivers data loss prevention, GenAI and AI agent security, endpoint management, secure web and SaaS access, and zero trust private access through a single lightweight agent. Kitecyber enables organizations to see data actions, make context-aware decisions, and enforce controls at the moment work happens. The company is venture-backed, supports compliance frameworks including HIPAA, GDPR, SOC 2, ISO 27001, CMMC, FINRA, PCI DSS and DPDP, and partners with Vouch on cyber insurance and Ryada on device procurement.
Media Contact
Company Name: Kitecyber
Contact Person: Ajay Gulati
Email: Send Email
City: San Francisco
State: California
Country: United States
Website: https://www.kitecyber.com/
