Bay comes out of stealth with $50M to stop AI agents before they do something dumb

Bay, a Tel Aviv AI agent security startup founded less than a year ago, said on Nov. 10, 2026, that it emerged from stealth with $50 million in total funding, including a $37 million Series A led by Battery Ventures and a previously undisclosed $13 million seed led by YL Ventures and Striker Venture Partners.

The scary agent failure isn't a hacker — it's an eager assistant with real permissions and a deadline. Bay's pitch is a bouncer that reads the whole session before letting an action through. Fifty million in under a year says buyers feel that fear; four rivals raising in five months says Bay will have to prove its bouncer is smarter than everyone else's.

Bay, a Tel Aviv company that checks what an AI agent is about to do, said it emerged from stealth with $50 million in total funding. The total is a $37 million Series A led by Battery Ventures, plus a previously undisclosed $13 million seed led by YL Ventures and Striker Venture Partners. A Series A is an early private funding round. A seed is the earlier check, before that. The announcement is dated Nov. 10, 2026. Those amounts and the leads are Bay's, via Business Wire.

Micron Ventures, M12, which is Microsoft's venture fund, and Assaf Rappaport, chief executive of Wiz, participated in the Series A. Those names are in the company's account of the round.

BankInfoSecurity dates the founding to January 2026. Bay names Micron, Peloton, ClickUp, and Wix as customers, and describes the list as dozens of enterprise customers. Enterprise, here, means a large company. Micron is both a customer and an investor. That overlap is The Next Web's note.

The origin story is an agent of their own. The founders watched a coding agent try to open a cloud environment to the internet so it could finish a test. It had not been hacked. It was using permissions it was allowed to have, toward a goal it was allowed to chase, in a way that was dangerous. Those lines are Bay's.

The product reads each action an agent proposes, in the context of the whole session, and decides locally, in milliseconds, whether to allow it, block it, or send it to a person. Milliseconds means a few thousandths of a second. Bay says it learns from the organization's own agent activity, instead of needing a hand-written rule for every agent and every tool. It says the install covers employee computers, cloud accounts, and the online software people already use, in under five minutes, with no extra persistent endpoint agent, no kernel driver, and no network proxy. An endpoint agent is a program that stays installed on each computer. A kernel driver sits inside the operating system. A network proxy is a checkpoint all the traffic has to pass. Bay also says it finds the AI tools and MCP servers already in use. An MCP server is a plug that lets an agent call an outside tool. Those product lines are Bay's.

Yuval Zacharia, co-founder and chief executive, told BankInfoSecurity that Bay deployed across 150,000 Microsoft endpoints in under five minutes. An endpoint, in that sentence, is a computer or other device on the company network. The figure is her claim.

The headline claim is that Fortune 100 companies used the platform to triple their use of autonomous AI agents, meaning agents that take steps on their own. The customers are not named, and the announcement does not say how the tripling was measured. The Next Web said it could not verify the claim. It is Bay's claim, and it is still unchecked.

Zacharia is quoted: "If you're a security leader at an enterprise today, you're likely facing one of two realities: either AI agents have already spread across your organization and it's the Wild West, or your leadership has mandated an enterprise-wide AI rollout by the end of the year to accelerate the business." The quotation is hers.

The founders are Yuval Zacharia, chief executive, who served in Unit 8200 and was later director of research and AI at Hunters; Aner Morag, chief product officer, also of Unit 8200 and an early employee at Noname Security; and Boris Danilovich, vice president of research and development, an early employee at Preempt Security, which CrowdStrike later acquired. Unit 8200 is an Israeli military intelligence unit. Those biographies are the company's, as reported.

The Next Web puts the round in a crowded stretch. In the past five months Zenity raised $125 million, Straiker raised $64 million, NeuralTrust raised $20 million, and Asymptote Labs raised $5.5 million. Those rounds are The Next Web's comparison, not a list of Bay's customers.

The picture is Bay's team, in matching white Bay T-shirts, posing on the Tel Aviv beach promenade with the sea behind them. The credit is Bay, as carried by The Next Web.

In plain terms, a Tel Aviv company founded in January came out of stealth with $50 million to allow, block, or escalate each step an AI agent tries to take. The line about Fortune 100 companies tripling agent use is Bay's, and The Next Web could not check it. Four other startups raised money for the same fear in the past five months.