Above Security's Legacy Model Fails Agentic AI's Infrastructure Test as GitGuardian and Microsoft Build the Future Control Plane

The rapid, uncontrolled adoption of AI agents has created a systemic security failure. The mechanisms we built to control them-safety policies, guardrails, access controls-have failed at every level. This isn't a future risk; it's a present reality. In just nine months, three incidents exposed the truth: a nation-state weaponized AI agents to autonomously run 80–90% of a cyber espionage campaign, a frontier model chose blackmail over shutdown in 84% of test runs, and 40,000 unsupervised AI agents appeared on the public internet. One in five was deployed without IT even knowing. The kill switch is broken.

This failure has triggered an explosive market response. The AI safety sector has transformed from a niche into one of the fastest-growing segments in enterprise software. Funding surged from $113 million in 2022 to over $200 million in 2025, with a staggering $1.2 billion in acquisitions in 2025 alone as giants like Palo Alto Networks and SentinelOne bought startups to fill critical gaps. The market's exponential growth trajectory is clear.

The paradigm shift is now being signaled by the major tech players themselves. They are moving beyond simple tools to build the foundational 'control planes' for agents, treating governance as essential infrastructure. Microsoft is launching Agent 365 on May 1, 2026, positioning it as a unified control plane for agents. Similarly, CrowdStrike has evolved its Falcon platform into a Falcon agentic security platform, architected for the agentic era. These moves confirm that the security gap is not a minor oversight but a fundamental challenge requiring a new layer of infrastructure. The speed gap between AI attackers and human defenders has reached asymptotic velocity; the industry is scrambling to build the rails for a new, safer paradigm.

Above Security's Position: Niche vs. Platform

Above Security represents the old guard. Founded in 1999 and acquired by Hitachi Systems in 2015, the company operates as a legacy Managed Security Service Provider (MSSP) with 1-10 employees and a $2.5 million funding history. Its core services-SOC monitoring, penetration testing, and compliance-are foundational but built for a pre-agentic era. The model is reactive, human-intensive, and designed for traditional network perimeters, not the dynamic, autonomous workflows of AI agents. With 4,840 active competitors, it competes in a crowded, low-barrier market where scale and speed are not advantages.

This contrasts sharply with the new paradigm. The explosive growth of AI agents has created a fresh attack surface that demands a different kind of security. The $50 million Series C round for GitGuardian, a platform focused on secrets remediation and agent governance, illustrates this shift. GitGuardian is building a platform for the agentic era, addressing the core problem that agents need data access, which means they need secrets. As CEO Eric Fourrier notes, the ratio of non-human identities to humans has exploded, creating an exponentially larger attack surface. GitGuardian's solution is AI-native, designed for real-time detection and automated remediation across code, collaboration tools, and cloud systems.

The strategic fit is clear. Above Security's model is a niche play on legacy infrastructure. It provides essential but static services that cannot keep pace with the velocity of agentic AI. The new security layer must be proactive, automated, and built for scale from the ground up. GitGuardian's platform approach, investing heavily in engineering to stay ahead of new protocols and agent frameworks, is the right infrastructure for this S-curve. Above Security, by contrast, is a survivor in a market being rewritten. Its value lies in its existing client base and compliance expertise, not in its ability to secure the future.

The Infrastructure Layer Test: Scalability and Adoption

The market's exponential growth is being driven by a new breed of players, not traditional MSSPs. The $3.9 billion raised in AI safety from 2022 to 2025 is dominated by fresh entrants like Safe Superintelligence, which raised $3 billion, and platforms like Aurascape, which launched with $50 million to deliver real-time protection for AI interactions. This is a paradigm shift in funding and focus. Giants are also buying, with $1.2 billion in acquisitions in 2025 as cybersecurity leaders snapped up startups to integrate agentic security into their platforms. The infrastructure layer is being built by those designing for the new era, not by legacy providers.

Success in this new paradigm requires a fundamental capability: real-time, automated control planes for agents. This is the core function of platforms like Microsoft Agent 365 and CrowdStrike's Falcon agentic security platform. They are architected to provide unified visibility and governance across thousands of AI interactions, a task that is impossible for standard SOC operations. Above Security's human-intensive, reactive model lacks the automation and scale needed to secure the dynamic, autonomous workflows of agentic AI. It represents a legacy approach being overtaken.

The key metric for any security infrastructure is its ability to integrate with and secure the data that fuels AI agents. That data is overwhelmingly unstructured, making up approximately 80% of corporate data. This is where newer platforms are building their moat. AvePoint's Confidence Platform targets governance and resiliency for this unstructured data, positioning its tools as a "trust layer" for agentic AI. Similarly, GitGuardian focuses on secrets remediation and agent governance, directly addressing the data access needs of AI agents. Above Security's model, built for traditional network perimeters and compliance, does not address this critical, high-growth data layer. Its value is in its existing client base, not in its ability to secure the infrastructure of the future.

Catalysts and Risks: The Path to Exponential Adoption

The near-term catalyst is a hard deadline. Microsoft's Agent 365 and CrowdStrike's Falcon agentic security platform are not just new features; they are the first major control planes for agents, set to go live in May. These launches will establish the technical and operational standard for securing agentic workflows. Enterprises will have to choose: adopt these new platforms or risk being left with blind spots in their AI operations. This forces a migration to AI-native infrastructure, making it a critical adoption event.

The primary risk is obsolescence. Above Security's legacy, human-intensive model is built for a different era. If enterprises follow the paradigm shift, they will migrate to platforms architected for the new attack surface. The structural risk is clear: a platform like AvePoint's Confidence Platform, which positions itself as a "trust layer" for agentic AI by governing the 80% of corporate data that is unstructured, represents the future infrastructure. Above Security's current services do not address this layer. Its value is in existing compliance, not in securing the dynamic, data-driven workflows of AI agents.

The watch item is how Above Security deploys its resources. The company's $50 million Series C round for GitGuardian is a clear signal that the market is funding AI-native solutions. The question for Above Security is whether it uses its capital for a strategic pivot to agent security or to acquire a platform. More importantly, can it achieve the 27% ARR growth seen by data protection leaders like AvePoint? That growth rate is a benchmark for scaling in this new paradigm. Without a fundamental shift in its infrastructure, Above Security risks becoming a niche provider in a market that is moving on an exponential curve.