Proofpoint acquires Acuvity for AI security
Proofpoint has acquired Acuvity to bolster its AI-native enterprise security offerings. The move addresses the growing need for security, governance, and compliance as insurers deploy generative AI and autonomous agents in workflows like claims processing. The acquisition signals an increased focus on securing sensitive claims and underwriting data within AI-driven environments.
- [Acuvity's technology](https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQF0B89ukonAaOsLRwtAXe7zd40Q4qt0wOm0im0xYJQF9fYEgEart9WUYdPdpJwAg1GuQDPJyvakvM39D9QEqg2UYKi_QeLYm5LRI9hw11597RjL6KdjvP2LDtOZHlLonE-hVCVNg-mZcNXeati_TYbd6bxV3RXLUGWB00BVI00-rOAsUnE-yrXc7jgOl-3zZiVWDRED6NC8uWVB3SWxsw==) is designed to monitor the behavior of AI agents and how they interact with data in real-time, which is crucial for insurers who are increasingly using AI to analyze sensitive policyholder information for underwriting and to process complex claims. This addresses the risk of "hallucinations," where an AI might generate factually incorrect information that could lead to flawed risk assessments or improper claims decisions. - A key security threat for insurers is "prompt injection," where malicious instructions are embedded in documents like a PDF loss run. This could trick an AI into approving a fraudulent claim or exposing confidential data. Acuvity's platform inspects and analyzes both the prompts sent to AI models and the responses received, helping to detect and block such adversarial attacks. - For Special Investigations Units (SIU) focused on fraud, generative AI presents a double-edged sword: it can be used to detect fraud, but criminals can also use it to create more convincing fraudulent claims, such as by generating fake medical evidence. Acuvity provides tools to help govern how AI is used, ensuring the integrity of data used in fraud detection models. - The acquisition addresses the challenge of "shadow AI," where employees use unauthorized AI tools to handle sensitive customer data, creating significant compliance risks with regulations like GDPR and HIPAA. Acuvity's platform is built to discover and provide visibility into all AI usage across an organization, from web browsers to locally installed tools. - Proofpoint's acquisition of Acuvity is a direct response to the growing use of autonomous "agentic" systems in the enterprise. In an insurance context, this refers to AI agents that don't just analyze data but also take action, such as initiating a payment or modifying a policy. Acuvity's technology is designed to provide oversight and governance for these autonomous actions. - The combined Proofpoint and Acuvity platform aims to provide a unified solution for security and compliance teams in regulated industries like insurance. It offers auditable records of AI interactions, which is critical for demonstrating regulatory compliance and for forensic analysis after a security incident. This is a response to the "black box" problem in AI, where it can be difficult to explain how an AI-driven decision was made. - Acuvity was founded in 2023 by Satyam Sinha, who previously co-founded the microsegmentation startup Aporeto and sold it to Palo Alto Networks. The company emerged from stealth in September 2024 with a $9 million seed funding round led by Foundation Capital before being acquired by Proofpoint.
