We raised a €1 million pre-seed round from Volta Ventures and the Brabant Development Agency (BOM). The announcement went out on 21 August and was picked up by IO+, Dutch IT Channel, Dealroom and JADS.
What we are building
An agent carries out a task as a sequence of actions. Each action can be permitted and the sequence can still be a breach: read a customer record, then send an email outside the organisation. Both steps pass their own check. Together they are a leak.
Identity systems check one action at a time. Content guardrails check one message at a time. A sandbox bounds where an agent can act, not the order in which it acts there. None of them can ask: given everything this agent has already done in this task, is this next action allowed?
That is the question Kyvvu’s Agent Security Kernel answers — a check that runs inside the agent’s own process, before the action runs. The reasoning is in our white paper and in Runtime Governance for AI Agents: Policies on Paths. The kernel is in use at financial services, insurance and healthcare organisations in the Netherlands, together with our integration partners.
Where the money goes
The team. We expanded engineering after the round closed and will keep adding people. The other two depend on it.
The partner network. Kyvvu reaches production systems through the parties that build and run agents for regulated organisations. Widening that network puts the kernel in more places than we could reach ourselves.
Security accreditation. Banks, insurers, healthcare providers and public bodies ask for evidence before a pilot becomes a deployment. ISO 27001 and SOC 2 work is underway.
What does not change
Kyvvu runs inside the agent. There is no proxy, no gateway, nothing your traffic passes through, and no sensitive data sent to us for checking. The SDK stays Apache-2.0 and the engine stays source-available, so you can read the code that enforces your policies. The Agent Action Grammar stays open and vendor-neutral, with RFC-0001 open for comment.
If you want to work on this, our open roles are here.