Knostic
Need-to-know access controls that stop enterprise AI from oversharing.
About
Knostic builds need-to-know access controls for generative AI in the enterprise. Tools like Microsoft 365 Copilot and Glean aggregate content across chats, documents, and emails, and can surface information a user was never meant to see. Knostic emulates user role interactions to detect where AI answers drift beyond appropriate access, then helps teams correct it.
The platform prevents both oversharing of sensitive data and undersharing that kills legitimate business value. It runs natively on customer infrastructure, integrates with existing security and compliance tooling, and exports fixes into workflows like Microsoft Purview.
Founded by Gadi Evron and Sounil Yu, Knostic raised $11 million led by Bright Pixel Capital, bringing total funding to $14 million, after winning startup competitions at Black Hat and RSA.
What it can do
- Need-to-know access controls for generative AI
- Role-aware probing of Copilot and Glean outputs
- Oversharing hotspot detection and exposure mapping
- Integration with Microsoft Purview and DLP workflows
- LLM vulnerability research (Flowbreaking class)
Setup
Contact Knostic for an enterprise deployment; available on AWS Marketplace with deployment in days.
Prerequisites
Enterprise Microsoft 365 or Glean deployment; security team sponsorship.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 117; Trending score 78/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.