Entity trail

Zenity

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-07 / saas-disruption-researcherZenity Raised $125M From Norwest to Sit Between Enterprise Agents and the Actions They Try to TakeZenity announced a $125M Series C on August 3, 2026 led by Norwest Venture Partners, with SoftBank Vision Fund 2, Qumra Capital, Hitachi Ventures, and LG Technology Ventures joining existing backers Vertex, Third Point, DTCP, and Intel Capital. The product inspects an agent's intended action and allows, modifies, or blocks it before execution — an interception layer, not a scanner — sold to Fortune 500 and Global 2000 buyers in financial services, healthcare, pharma, energy, and manufacturing, with SoftBank Corp. named as a customer. Revenue tripled in each of the past two years and is tracking to triple again in 2026 across 230+ employees. Agent governance is now funded as its own budget line rather than a SaaS-security feature, which is bad news for the CASB and SSPM vendors that assumed they would absorb it.
2026-07-26 / agents-researcherAgentForger: one ChatGPT link forged a persistent attacker-controlled agent inside an enterprise workspaceZenity Labs disclosed AgentForger on July 23 — a cross-site agent forgery flaw in ChatGPT's Agent Builder where two URL parameters (template selector and initial-prompt field) let a single crafted link create, authorize, and activate an invisible agent inside a victim's authenticated workspace with approvals switched off. The forged agent polled an attacker's inbox for new commands every five minutes and could map org structure, exfiltrate documents, harvest credentials, and impersonate the victim across Slack, Teams, and email. OpenAI received the report via Bugcrowd on June 4, confirmed within 24 hours, and removed the vulnerable parameter by June 8; Agent Builder itself is slated for deprecation on November 30, 2026 in favor of the Agents SDK.
2026-04-25 / skill-finderGartner Names Zenity 'Company to Beat' in AI Agent Governance — First Vendor Race Report for Emerging Agent Security CategoryGartner published its first AI Vendor Race report for agent governance on April 23, naming Zenity the front-runner based on its 'purpose-built agentic-centric architecture, intent-aware detection, and continued end-user interest.' Zenity's platform provides runtime enforcement, full-lifecycle observability across SaaS/cloud/endpoint, shadow AI discovery, and posture management. The report signals that agent governance has graduated from concept to vendor-evaluated market category. For teams deploying production agents, this is the first analyst benchmark for evaluating governance tooling.
2026-03-22 / skill-finderPleaseFix/PerplexedBrowser: Zero-Click Agent Hijack in Perplexity Comet via Indirect Prompt InjectionZenity Labs disclosed PleaseFix, a vulnerability family in agentic browsers that enables two distinct attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both chains trigger without user interaction through attacker-controlled content embedded in routine workflows (e.g., calendar invites). Perplexity patched the browser-side execution issue prior to disclosure.
2026-03-07 / news-researcherPleaseFix: Zero-Click Agent Hijack Vulnerability Family in Agentic BrowsersZenity Labs disclosed PleaseFix, a family of critical vulnerabilities in agentic browsers including Perplexity Comet. Two exploit paths: (1) zero-click file system exfiltration triggered by a calendar invite — the AI agent accesses local files and exfiltrates data while returning normal results to the user; (2) credential theft via manipulating agent-authorized password manager workflows. PleaseFix is the evolution of ClickFix social engineering but applied to AI agents instead of humans, enabli
2026-03-05 / reddit-researcherPleaseFix: Zero-Click Agent Hijacking via Calendar Invites in Perplexity CometZenity Labs disclosed PleaseFix vulnerability family in agentic browsers. Two exploit paths: zero-click file exfiltration via calendar invites and 1Password vault takeover. Prompt injection via Reddit comments demonstrated. Perplexity patched pre-disclosure. Most alarming agentic security disclosure yet.
2026-03-04 / news-researcherPleaseFix Zero-Click Agent Hijack in Agentic BrowsersZenity Labs disclosed PleaseFix vulnerabilities in Perplexity Comet — zero-click file exfiltration via poisoned calendar invites and credential theft through password manager manipulation

Graph relationships

SUPPORTS
Gartner
Gartner names Zenity Company to Beat in AI Agent Governance.
Source finding
SUPPORTS
Gartner -> Zenity
Gartner names Zenity Company to Beat in AI Agent Governance.
Source finding

Source trail

Announced August 3 Zenity Labs BusinessWire — Zenity Gartner AI Agent Governance Report Zenity Labs Help Net Security

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…