Solutions
Protect Against Data Risks
Advanced Data Security
Shadow AI
Data Surface Visibility
Customer Communications
Hybrid Workspaces
Secure AI Systems & Agents
AI Agents & MCP Security
Microsoft 365 Copilot
Contextual Data Enforcement
Contextual Data Enforcement for Claude
Al Governance & Compliance
Verticals
Financial Services
Healthcare
Insurance
Technology Companies
Product
Resources
About Us
Newsroom
In the News
Awards
Gidi's Substack
Contact
Careers
Blog
Schedule a Demo
Solutions
Protect Against Data Risks
Advanced Data Security
Shadow AI
Data Surface Visibility
Customer Communications
Hybrid Workspaces
Secure AI Systems & Agents
AI Agents & MCP Security
Microsoft 365 Copilot
Contextual Data Enforcement
Contextual Data Enforcement for Claude
Al Governance & Compliance
Verticals
Financial Services
Healthcare
Insurance
Technology Companies
Product
Resources
About Us
Newsroom
In the News
Awards
Gidi's Substack
Contact
Careers
Blog
Schedule a Demo
Bonfy Blog
Shadow AI
,
Data Governance
,
AI Data Security
,
Browser Security
Browser AI Extensions Are Breaching Enterprise Data
Gidi Cohen
Shadow AI
,
AI Agent Security
,
Identity Governance
,
Authorization
AI Agent Identity Sprawl Is an Authorization Crisis
Gidi Cohen
AI Governance
,
AI Agent Security
,
Access Control
,
Agentic AI
AI Labs Cannot Contain Their Own Test Agents
Gidi Cohen
Shadow AI
,
AI Security
,
Data Governance
,
AI Governance
Shadow AI's Governance Gap Starts at the Top
Gidi Cohen
MCP Security
,
AI Agent Security
,
Identity Security
,
Data Access Control
MCP Server Sprawl Is Outrunning Agent Security
Gidi Cohen
Shadow AI
,
AI Security
,
Data Governance
,
AI Governance
Shadow AI Adoption Is Outpacing Governance
Gidi Cohen
MCP Security
,
AI Agent Security
,
Cloud Security
,
Data Access
Exposed MCP Servers Are Breaching Cloud Infrastructure
Gidi Cohen
Data security
,
AI Governance
,
Access Control
,
Data Sovereignty
Data Sovereignty Is an Access Control Problem
Gidi Cohen
AI Governance
,
AI Agent Security
,
Data Access Control
,
AI Safety
An AI Safety Test Agent Attacked Real Targets Alone
Gidi Cohen
Data Governance
,
AI Governance
,
AI Agent Security
,
Access Control
When the AI Company Itself Cannot Control Data Access
Gidi Cohen
Data Governance
,
AI Governance
,
AI Agent Security
,
Identity Security
Offensive AI Agents Just Outran Bank Identity Security
Gidi Cohen
AI Governance
,
Healthcare Security
,
HIPAA Compliance
,
Data Encryption
The HIPAA Encryption Mandate Slipped to 2027. Your PHI Exposure Didn't.
Gidi Cohen
Shadow AI
,
AI Security
,
Data Governance
,
AI Governance
Blocking AI Apps Didn't Stop Shadow AI. It Made It Harder to See.
Gidi Cohen
AI Agents
,
MCP Security
,
AI Governance
,
OAuth Security
The MCP Python SDK’s OAuth Flaw Just Exposed the Real AI Agent Trust Problem
Gidi Cohen
AI Agents
,
Contextual Data Enforcement
,
AI Security
,
Data Governance
,
AI Governance
,
GPT-6 Astra
,
Boundary Enforcement
The AI Model That Said 'No' and Did It Anyway: Why Boundary Enforcement Must Live Outside the Model
Gidi Cohen
Compliance
,
Data Security Attacks
,
Data Governance
,
Data Visibility
,
Secure File Sharing
,
Cybersecurity
,
PII Security
What Nine Months of Undetected Exposure Teaches Us About File-Sharing Governance
Gidi Cohen
AI Agents
,
Contextual Data Enforcement
,
AI Security
,
Data Governance
,
AI Governance
,
GPT-6 Astra
,
AI Risk
Nobody Authorized the Attack. GPT-6 Astra Launched It Anyway.
Gidi Cohen
Data Governance
,
AI Agent Security
,
Prompt Injection
,
Salesforce Agentforce
Nobody Hacked Salesforce. The Agent Just Followed Instructions.
Gidi Cohen
Data Governance
,
AI Governance
,
AI Accountability
Naming an AI Owner Is Not the Same as Governing AI Data
Gidi Cohen
Contextual Data Enforcement
,
Data Governance
,
AI Agent Security
SalesBleed Proves Configured Access Is Not the Same as Actual Data Risk
Gidi Cohen
AI Agents
,
AI Governance
,
Critical Infrastructure
AI Assurance Compact: Why Critical Infrastructure Can't Wait on AI Agent Governance
Gidi Cohen
AI Agents
,
Data Governance
,
MCP Security
MCP Security Statistics 2026: What the Vulnerability Data Reveals About AI Agent Risk
Gidi Cohen
Compliance
,
AI Security
AI‑Driven Cyber Threats Are Accelerating — A Perspective on OpenAI’s Call for Collective Cyber Defense
Gidi Cohen
AI Agents
,
AI Security
The AI Agents Didn't Go Rogue. They Just Went Where No One Was Watching.
Gidi Cohen
AI Agents
Nobody Told It To. It Did It Anyway.
Gidi Cohen
AI Problems
,
AI Security
Copilot Just Proved Our Point: AI Assistants Are Now Your Biggest Data Exposure Risk
Gidi Cohen
AI Problems
,
AI Agents
,
AI Security
When AI Agents Turn on Each Other, Who's Watching?
Gidi Cohen
AI Agents
,
Data Security Attacks
The Taiwan Attack Wasn't a Warning Shot. It Was Proof of Concept.
Gidi Cohen
AI Agents
,
AI Security
Identity Knows Who. Data Knows What. Neither Knows Why.
Vishnu Varma
AI Agents
,
AI Security
AI Agents Won’t Secure Agentic AI: Why the Real Control Point Is the Data Layer
Gidi Cohen
AI Problems
The Fiction Inside Your AI Business Case — And Why Data Control Is Missing
Gidi Cohen
AI Problems
AI Has Redefined the Rules Data Security Was Built On
Gidi Cohen
AI Problems
,
Industry study
The AI ROI Problem Isn’t the Models — It’s Leadership
Gidi Cohen
AI Problems
,
AI Agents
,
Contextual Data Enforcement
Why Security Teams Need to Understand Relationships, Not Just Data
Gidi Cohen
AI Problems
,
AI Agents
,
Contextual Data Enforcement
The Authority Gap in AI Workflows
Gidi Cohen
AI Problems
,
AI Agents
,
Contextual Data Enforcement
Enterprise Data Needs an Identity Before AI Gives It (Or Assumes) One
Vishnu Varma
AI Problems
,
AI Agents
,
pharma
,
healthcare
Relevance Is Not Permission: The Hidden Way AI Agents Erode Pharma's IP
Vishnu Varma
Data security
,
AI Agents
The Security Assumption AI Agents Just Broke
Gidi Cohen
One Year In: What the Market Taught Us
Gidi Cohen
Contextual Data Enforcement
,
HIPAA
Teaching AI ‘Minimum Necessary’: How Bonfy Stops PHI Overexposure at the Source
Rosa Lear
AI Problems
,
Data security
,
AI Agents
,
Compliance
The Future of Data Security Is Continuous Control
Gidi Cohen
Guest blog
Guest Blog on Predictable Revenue: Product-Market Fit in AI Security with Gidi Cohen
Gidi Cohen
Compliance
,
FinServ
GLBA, Reg S-P, & FINRA Know What a Customer Relationship Is. Your AI Agent Doesn't. Bonfy Bridges the Gap.
Vishnu Varma
AI Problems
,
Data security
,
AI Agents
Real-Time Control Is What Makes AI Adoption Scalable
Gidi Cohen
AI Agents
Rebuilding the Judgment Layer Your AI Agents Never Inherited
Vishnu Varma
AI Problems
,
Data security
,
AI Agents
You Cannot Govern What You Cannot Attribute
Gidi Cohen
Data security
,
Contextual Data Enforcement
Three Builders, One Data Problem. Here's What the Enforcement Layer Actually Has to Do.
Vishnu Varma
AI Problems
,
AI Agents
,
Claude
,
Contextual Data Enforcement
Permissions Do Not Determine What AI Should Be Allowed to Use
Gidi Cohen
AI Problems
,
Data security
,
AI Agents
The Most Critical AI Risk Is How Data Gets Used
Gidi Cohen
AI Problems
,
Data security
,
AI Agents
What’s Missing Between Detection and Control
Gidi Cohen
Claude
,
Substack
'The Who' Is No Longer a Metadata Problem, It's an Enforcement Problem
Vishnu Varma
AI Problems
,
Data security
,
AI Agents
Security Fails When It Cannot Act in Real Time
Gidi Cohen
Data security
,
Shadow AI
,
Claude
Trusting Claude Is the Easy Part. Governing What It Does With Your Data Is Not.
Vishnu Varma
Data security
,
AI Agents
Why AI Agents Break Traditional Security Models
Gidi Cohen
AI Agents
,
Claude
Claude, Copilot, and the Pressure Test Your Security Wasn’t Built For
Vishnu Varma
Data security
,
AI Agents
The Shift to Trust-Centric Security
Gidi Cohen
Observations
,
Data security
,
Product
Relevance Is Not Permission: Turning the “Missing Who” Into Enforceable AI Guardrails
Vishnu Varma
AI Problems
,
Data security
,
AI Agents
Trust Boundaries Determine Whether AI Governance Holds Up
Gidi Cohen
Data security
,
Product
Why Google-first Organizations Need Different Protection
Vishnu Varma
Microsoft 365 Copilot
,
Observations
,
AI Agents
Operationalizing Accuracy: The Control Layer Enterprises Need for Copilots and Agents
Vishnu Varma
AI Problems
,
Data security
Trust-Aware Security Reduces Alert Fatigue and Operational Cost
Gidi Cohen
Data security
,
Product
Why Data Surface Visibility Matters Now
Vishnu Varma
AI Problems
,
AI Agents
Context Engineering Isn’t Just a Concept, It’s Bonfy’s Operating System
Vishnu Varma
AI Problems
,
Data security
Shadow AI Has Moved to the Browser—Security Needs to Follow
Gidi Cohen
DLP
,
Data security
,
AI Agents
“Claude Mythos” Isn’t the Story — AI Data Chaos Is
Gidi Cohen
Next-Gen DLP
,
Data security
Trust Boundaries Look Different in Every Industry
Gidi Cohen
AI Problems
,
Data security
,
AI Agents
Bonfy’s MCP Server Sets a New Standard for Securing AI Agents in Real Time
Gidi Cohen
Data security
,
Product
From Architectural Break to Practical Reality: How Bonfy Brings AI‑Native Data Security to Life
Vishnu Varma
DLP
,
Data security
,
Shadow AI
Shady AI Is Already Here: How Bonfy Keeps Sanctioned AI From Crossing the Line
Vishnu Varma
AI Problems
,
Data security
How AI Expands the Trust Boundary
Gidi Cohen
DLP
,
Next-Gen DLP
,
Data security
Why Accurate Risk Modeling Is the Only Way to Secure AI Without Slowing It Down
Gidi Cohen
AI Problems
,
Data security
From One-Dimensional Controls to Multi-Dimensional Protection
Vishnu Varma
Education
,
AI Problems
,
DLP
Solving the “Out‑of‑Body” Execution Problem: How Bonfy Keeps AI Agents, User Intent, and Data Risk Aligned
Vishnu Varma
Copilot by Microsoft 365
When AI Ignores Your Labels: What Copilot’s Confidential Email Bug Really Exposes
Gidi Cohen
Data security
What Breaks the Modern Trust Boundary — And Why Legacy Controls Don’t See It
Gidi Cohen
Next-Gen DLP
,
Data security
Defining the Modern Trust Boundary: Why Identity, Context, and Content Matter More Than Perimeters
Gidi Cohen
Data security
Scoring the Human and the Machine: Why Entity Risk Management is the New Frontier of Data Security
Gidi Cohen
AI Problems
,
Data security
Seamless Integration: Why Consistent Protection for AI-Generated and Human-Edited Content is Critical for Enterprise Governance
Gidi Cohen
Copilot by Microsoft 365
How to Enable Secure Copilot Adoption Without Blocking Innovation
Gidi Cohen
Copilot by Microsoft 365
AI Hallucinations, Compliance Risk, and the Need for Microsoft Copilot Oversight
Vishnu Varma
Copilot by Microsoft 365
The Over‑Permissioning Time Bomb Inside Microsoft 365 Copilot
Gidi Cohen
AI Problems
,
Data security
Understanding the OWASP Top 10 Risks for LLM & GenAI Apps, with a Focus on Data Security
Vishnu Varma
Education
,
AI Problems
,
Data security
Reducing Alert Fatigue: How Risk-Based Prioritization Lowers Security TCO
Gidi Cohen
AI Problems
,
DLP
,
Data security
Beyond Pattern Matching: Achieving Human-Grade Accuracy with Entity-Aware Risk Analysis
Gidi Cohen
Education
,
AI Problems
,
Data security
Shift Left vs. Shift Right in AI Governance: Why Post-Generation Supervision is Essential for Trustworthy AI Adoption
Gidi Cohen
Observations
An Alarm Bell: What the SitusAMC Hack Means for the Industry
Gidi Cohen
DLP
,
Data security
PII Under Siege: Protecting Customer Data and Achieving GDPR/CCPA Compliance in the GenAI Era
Gidi Cohen
DLP
,
Data security
The Executive Guide to HIPAA Compliance in the GenAI Era: Elevating PHI Protection from a Technical Problem to a Strategic Priority
Gidi Cohen
AI Problems
,
Copilot by Microsoft 365
,
Data security
Rethinking Data Security in the Age of GenAI: Why Contextual Intelligence Matters More Than Ever
Vishnu Varma
AI Problems
,
Next-Gen DLP
Executive Visibility: Providing CISOs with a Cockpit View of State of Protection and Risk Trends
Gidi Cohen
Copilot by Microsoft 365
Over-Permissioning and Data Leakage Risks with Microsoft Copilot: Navigating the New Reality
Gidi Cohen
Education
,
AI Problems
Shadow AI: The Hidden Cybersecurity Threat Lurking in Every Enterprise
Gidi Cohen
DLP
Navigating the Exponential Growth of AI-Generated Business Content
Gidi Cohen
Copilot by Microsoft 365
,
Microsoft 365 Copilot
Unmasking Microsoft Purview: Why CISOs Need More Than Legacy Data Protection
Gidi Cohen
Microsoft 365 Copilot
,
DLP
Legacy DLP Falls Short: Why Microsoft Enterprises Demand Adaptive, Risk-Aware Protection
Vishnu Varma
Observations
Is AI Making Us Smarter, Or Dumber?
Gidi Cohen
Next-Gen DLP
,
Observations
Bias, Ethics, and Woke AI: Controversy or Compliance Catastrophe for Corporate Data?
Gidi Cohen
Observations
Vibe Analysis in GenAI: Benefits, Risk, and Razor-Edge Reality
Gidi Cohen
Education
Why Entity Awareness Is the CISO’s New Superpower in AI-Driven Security
Gidi Cohen
Next-Gen DLP
You Think Your DLP Caught All the Risk in Emails, But Surprise...
Gidi Cohen
Observations
The End of Meritocracy? AI, Human Value, and What Comes Next
Gidi Cohen
Sharing Isn’t Caring: Why Unvetted GenAI Content Is Spreading Business Risk
Gidi Cohen
Observations
First Thoughts from Bonfy!
Vishnu Varma
Education
,
Next-Gen DLP
Ensuring GenAI Oversight with Bonfy Adaptive Content Security™
Gidi Cohen
Education
,
Next-Gen DLP
Best Practices for Evaluating Security Tools for GenAI Content
Gidi Cohen
AI Problems
,
Engineering
How to Build a Successful Data Organization: Steal Shamelessly from Engineering
Neta Gur-Ari Krakover
Education
,
AI Problems
Big Beautiful Bill AI Regulations: What it actually means for your business
Gidi Cohen
Education
How to Deal With the Hidden Dangers of Using GenAI for Outbound Emails
Gidi Cohen
Education
,
DLP
Turning Data Classification and Labeling on Its Head
Gidi Cohen
Education
The Risks and Benefits of AI Content Generation Tools for the Enterprise
Gidi Cohen
DLP
Traditional DLP Is Dead - It’s time for an alternative
Gidi Cohen
Education
,
AI Problems
The Hidden Risks of GenAI in Customer Communication—& How to Fix Them
Gidi Cohen
Education
,
Copilot by Microsoft 365
,
Microsoft 365 Copilot
Navigating the Security Risks and Challenges of Microsoft 365 Copilot
Gidi Cohen
Education
Embracing the Shift Right Approach in Supervising AI and Human-Generated Content
Gidi Cohen
Education
Content Security: What It Is, Who Needs It, and How It’ll Change Your Business
Gidi Cohen
AI Problems
GenAI’s Hallucinogenic Content Can Ruin Your Business
Gidi Cohen
AI Problems
Addressing Senior Leadership Concerns with GenAI
Gidi Cohen
AI Problems
,
Engineering
Code Review in the Age of AI: Best Practices for Reviewing AI-Generated Code
Neta Gur-Ari Krakover
Technology Comparison
Are Traditional Data Security Approaches and Tools Insanity?
Gidi Cohen
Engineering
,
Hiring
Designing the Engineering Hiring Process from the Ground Up
Neta Gur-Ari Krakover
1
2
Let's Chat
Get in Touch
.png)
.png)
.png)
.png)
.png)
%20(1).png){kind=logo}
.png){kind=logo}
.png)
%20(3).png?width=200&height=200&name=Bonfy-YB-Icon%20(200%20x%20200%20px)%20(3).png)
