Hush Security raises $30M to tackle AI agent governance as non-human identity security heats up

Hush Security has raised $11 million in a seed round to build out its AI agent governance platform. The company specializes in identity-based access controls for what the industry calls non-human identities, or NHIs. Think AI agents, automated workflows, and machine-to-machine connections that operate without a person at the keyboard. Why non-human identity security matters now AI agents need credentials to do their jobs. They access databases, call APIs, trigger workflows, and authenticate with cloud services. Most enterprises manage these non-human identities with static secrets, long-lived API keys, and permissions that are far broader than necessary. Hush Security’s platform addresses this by offering continuous discovery of AI agents and NHIs across an organization, paired with runtime risk scoring. Instead of relying on static secrets that sit in configuration files waiting to be stolen, the company employs frameworks like SPIFFE to enable what it calls “secretless” identity management: rather than giving an AI agent a password it uses forever, the system issues short-lived, scoped credentials that are verified in real time. CEO Micha Rave has pointed to the fundamental diffi...