German AI-security startup Kontext has raised $4 million to expand software designed to stop workplace agents from taking actions that their credentials technically allow but their assigned task does not justify.
The Munich company places a policy layer between an AI agent and the systems it can reach, according to SiliconANGLE's report. Each requested action is evaluated using the agent's identity, the resource involved and the job the agent was actually given.
Kontext's example is a coding agent assigned to fix a bug. Reading the relevant repository fits the task. Sending that code to an outside service or changing unrelated infrastructure does not, even if the same credentials permit those actions.
From observation to enforcement
Teams can first run the product in an observe mode to see how proposed policies would affect agents without blocking work. When enforcement is enabled, Kontext says unauthorized actions are denied before execution and each decision is written to an audit log.
That task-aware layer addresses a gap in conventional identity and access management. Human-oriented systems often decide whether a credential can reach a resource; an autonomous agent may authenticate once and then perform many actions across several systems without a person approving each step.
42CAP led the funding round. Andreessen Horowitz's a16z CSX accelerator and High-Tech Gründerfonds also participated. Kontext plans to use the capital to expand its engineering team. The company says its software currently works with coding agents including Anthropic's Claude Code and OpenAI's Codex; individual developers can use it free, while team plans start at $149 per month.
Those product and pricing details come from the company and have not been independently tested here. The investment is a bet that agent security will need to evaluate purpose and behavior, not just whether a tool call came from an authenticated identity.