What Happened
The startup’s firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software supply chain risks. The post AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million appeared first on SecurityWeek .
Why It Matters
Fact: AIR Security has emerged from stealth with $50 million in funding to launch an 'AI agent firewall' that evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software supply chain risks. Fact: The product is explicitly positioned to scrutinize the components and integrations around AI agents, focusing on permissioning and potential malicious behavior in the AI ecosystem. RealGround analysis: This aligns directly with AI supply chain risk, as insecure or over-privileged plugins, skills and MCP endpoints can become a path for compromise of otherwise well-configured AI agents. RealGround analysis: Organizations deploying agentic AI should treat every skill and plugin as a third-party dependency, applying SBOM-style inventory, permission minimization and continuous red teaming of agent behaviors to detect abuse or malicious instructions propagating through the supply chain.
RealGround Analysis
This signal maps to AI supply chain. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.
Recommended Actions
- Restrict AI agent tool permissions and production write paths.
- Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
- Add human approval workflows for high-impact or state-changing actions.
- Run prompt injection and indirect prompt injection tests against affected workflows.
- Document the owner, control gap, and remediation deadline for this risk class.