Enterprise Security in the Agentic AI Era

Capsule Security

2 min read

Capsule Security

Sources: Capsule Security (homepage) · CTech launch coverage

Capsule’s coverage at funding was thin (single primary article). Homepage URL above is unverified; re-validate when more material lands. Per the gateway-vs-instrumentation note, this is the cohort’s only explicit-anti-proxy positioning, so additional sources will materially update this page.

What

Tel Aviv-based AI agent security startup founded in 2025 by Naor Paz (CEO; ex-F5, ex-Unit 8200) and Lidan Hazout (CTO; ex-Securedtouch, ex-Transmit Security). Builds a runtime trust layer that monitors and controls autonomous agents accessing data, executing workflows, and interacting with business systems, with the explicit positioning that no proxies, gateways, SDKs, or browser extensions are required (Source: CTech).

Funding

$7M seed round, April 15, 2026, led by Lama Partners and Forgepoint Capital International. Seventh-largest agentic-AI-security seed in the 12-month window.

Relevance

Maps to the RA Runtime plane (primary, by explicit positioning) with cross-cutting Observability coverage. CMM evidence supports D4 L3-L4 (runtime guardrails) and D7 L3 (observability via runtime hooks).

Architecturally explicit counter to gateway-style products (Runlayer, Helmet Security, AgentGateway): Capsule’s whole pitch is no gateway, no proxy, no SDK. This is a direct instance of the gateway vs. runtime-instrumentation fork in the seed cohort.

Released ClawGuard as an open-source tool: adds checkpoints before agent tool execution, comparable in shape to Lakera Guard but at the tool-call moment rather than at content layer. ClawGuard is conceptually a HITL confirm-tier primitive embedded into agent runtimes (Cursor, Claude Code, Copilot Studio, ServiceNow, Salesforce Agentforce are named integrations).

Product

Per the launch announcement:

  • Runtime trust layer: sits inside the agent runtime, not in the network path
  • Monitors: visibility into autonomous-agent activity in production
  • Blocks unsafe actions in real time
  • No proxy / gateway / SDK / browser-extension deployment: the differentiator vs. the gateway camp
  • Integrations: Cursor, Claude Code, Microsoft Copilot Studio, ServiceNow, Salesforce Agentforce

OSS spinoff: ClawGuard, providing pre-tool-execution checkpoints.

Notable Statements

  • Microsoft data point cited at funding: “more than 80% of Fortune 500 companies now use active AI agents”, which sized the market.
  • The “no proxy/gateway/SDK” framing is distinctive enough to be a category claim, not just a feature claim. If Capsule’s deployment model holds in production, it suggests the seed-stage market may be over-indexed on gateway-shaped products.

See Also

Graph View

Backlinks