We're proud to be named to the 2026–27 Fortune Cyber 60, the annual list from Fortune, Lightspeed Venture Partners, and AWS of the venture-backed cybersecurity companies to watch. Thank you to Fortune and Lightspeed for the recognition, and to the customers, partners, and researchers who made it possible.
AIR was founded in early 2026. Being recognized this soon, and alongside a list of great companies, means a lot to our team. It's also a sign of how fast the ground has shifted: AI agents are now doing real work inside enterprises, and the skills, plugins, and MCP servers they install have become a security problem that didn't exist a year ago.
Lightspeed built this year's list from data on hundreds of venture-backed security startups, grouped by stage, and AIR appears among the early-stage companies. We take the recognition as encouragement to keep going, and as confirmation that giving security teams control over what their agents consume is work that matters.
The problem moved faster than the tools
A year ago, most enterprises were piloting a chat assistant. Today their employees run coding agents, browser agents and SaaS agents, and those agents install skills, MCP servers and plugins on their own or at a user's request. Each add-on brings new instructions into the agent's context, and most security teams can't say which ones their agents have installed.
That is a software supply chain without an inventory, a review process, or a way to pull something back once it's deployed. AIR exists to give security teams all three.
What we've built since launch
AIR came out of stealth in September with $50 million from Sequoia Capital, Greenoaks and other amazing partners. Since then:
- Research AIR research lab published a 0-click remote code execution flaw in the four most popular coding agents, a sandbox escape in Vercel's hardened sandbox, and a vulnerability in an official OpenAI skill that sent live production tokens to a domain nobody owned.
- Scale of the problem We've analyzed more than 17,800 public AI add-ons with 6.7 million installations. Roughly 27% get filtered out.
- Product Four products that work as one: AIR Control governs the agent fleet, AIR Filter vets every add-on, AIR Defend secures agent actions at runtime, and AIR Marketplace supplies pre-vetted add-ons.


%20(1).png)


.png)


.png)
