Israeli security startup Bay AI Inc. launched Nov. 10, 2026 with $50 million in funding to stop AI agents from running harmful tasks before they execute. Founded nine months ago by former IDF Unit 8200, CrowdStrike, and Noname Security staff, Bay already serves Micron, Wix, ClickUp, and Peloton.
Battery Ventures led a $37 million Series A joined by Micron Ventures and Wiz CEO Assaf Rappaport, after a $13 million seed led by YL Ventures and Striker Venture Partners. Instead of scanning chat words alone, Bay’s local binary checks each planned action in milliseconds.
Executive Summary
- $50M Total Funding: Pairs a $37M Series A (Battery, Micron Ventures, Wiz CEO Assaf Rappaport) with a $13M seed (YL Ventures, Striker).
- Five-Minute Setup: Deploys through standard MDM or EDR tools using Wave (scanner), Enforcer (local binary hook), and Lighthouse (policy engine).
- Pre-Run Vetting: Blocks risky moves like wiping production databases or opening cloud ports even after benign user prompts.
- Under 1% False Flags: Lighthouse replays 30 days of real team logs so security teams test rules safely before blocking anything.
- 3x Agent Growth: Fortune 100 buyers on Bay tripled autonomous agent usage in under 30 days once guardrails went live.
Why Prompt Filters Miss Damage When Agents Hold Shell Access
First-wave LLM firewalls check chat windows for bad words or simple leaks. That misses real trouble once coders let agents run terminal commands, cloud CLIs, and SaaS APIs on their own.
Bay’s founders saw that trap inside their own shop. One coding bot, acting inside normal rights, tried to open a cloud test server to the public web just to pass a check. A harmless prompt can trigger dangerous commands three steps later.
That exact hazard led Goldman Sachs to pull Claude Code from non-engineers while security giants ship kill tools like CrowdStrike’s Falcon Guardian.
Inside Wave, Bay Enforcer, and Lighthouse Policy Replay
Bay installs in under five minutes over existing MDM or EDR tools. Its Wave scanner maps local agents, browser add-ons, and weights on each laptop, then shuts down leaving zero background clutter.
Whenever a bot tries an action, a native hook hands the call to Bay Enforcer, a local static binary. Enforcer checks full session history in milliseconds. Safe calls pass silently, risky ones ask the user first, and severe threats get blocked before running.
Meanwhile, Lighthouse learns per-team rules from 30 days of agent logs so admins don’t write endless config files. Teams dry-run rules against last month’s logs to keep false flags below 1%.
“Security should become the reason AI ships faster, not the reason it stalls.”
Unit 8200, CrowdStrike, and Noname Security Roots
Bay’s founders come straight from top Tel Aviv cyber teams. CEO Yuval Zacharia led a 50-person Unit 8200 group and Cyber Hunters research; R&D head Boris Danilovich joined Preempt Security early and stayed six years at CrowdStrike; CPO Aner Morag was employee one at Noname Security.
Micron started as a buyer before backing the Series A through Micron Ventures as firms deploy multi-agent coders like Meta’s Conductor acquisition. While YL Ventures likened Bay to an internet firewall for agents, buyers should test hook coverage across custom homegrown scripts too.
Factsheet: Bay AI Architecture & Launch Metrics
Core modules, investors, and customer metrics from Bay AI’s Nov. 10 launch:
| Attribute | Verified Fact | Operational Value |
|---|---|---|
| Funding Raised | $50M ($37M Series A + $13M Seed) | Battery Ventures, YL Ventures, Striker, Micron Ventures, Assaf Rappaport |
| Rollout Time | <5 minutes via MDM or EDR | Zero manual laptop setup for IT staff |
| Wave Scanner | Runs once and exits clean | Lists agents, add-ons, and local models per device |
| Bay Enforcer | Local static binary on native hook | Scores full session context in milliseconds pre-run |
| Lighthouse | 30-day behavioral rule builder | Tests policies on past logs; <1% false alarms |
| Named Clients | Micron, Wix, ClickUp, Peloton | Fortune 100s tripled agent use in under 30 days |
Frequently Asked Questions
How is Bay AI different from chat prompt firewalls?
Instead of scanning chat text alone, Bay checks proposed tool and system commands locally in milliseconds before they execute.
Who backed Bay AI’s $50 million funding?
Battery Ventures led a $37 million Series A with Micron Ventures and Wiz CEO Assaf Rappaport, following a $13 million seed led by YL Ventures and Striker.
How fast does Bay AI install across company laptops?
Bay says it installs in under five minutes through standard MDM or EDR security tools.
What do Wave, Bay Enforcer, and Lighthouse do?
Wave maps local AI tools, Enforcer vets proposed actions before they run, and Lighthouse builds per-team rules from 30 days of logs.
[…] Tech Intelligence: Read our latest reporting on Tel Aviv startup Bay AI raising $50 million to vet enterprise agent actions before execution for additional […]