Act Security Acquires Cloud Copilot Weeks After $60 Million Funding Round
Cybersecurity firm Act Security has announced its first acquisition, Cloud Copilot, just one month after securing $60 million in funding. Cloud Copilot developed open-source tools designed to help engineers understand and manage access permissions within Amazon Web Services (AWS) cloud environments.
The financial terms of the acquisition were not disclosed. Following the purchase, Act Security is launching Amphi, a free suite of seven open-source tools for cloud permission management. These tools enable users to read, test, simulate, reduce, and convert permission policies into code, while also verifying who can access specific cloud resources.
Access permissions dictate which employees, applications, workloads, and AI agents can interact with an organization's data and systems. Overly broad or misconfigured permissions can inadvertently grant unauthorized access to sensitive information and operations. In large organizations, managing thousands of interconnected permissions is complex, as minor policy changes can create new access pathways with unpredictable outcomes. Amphi aims to allow cloud engineers to test these changes before implementation, simulating access scenarios and identifying potential vulnerabilities based on existing cloud environments.
The Amphi tools are accessible via a web browser, command line, and GitHub. The command-line version can operate offline, and the browser version runs client-side, requiring no account creation or email submission. The source code remains open for community contributions. David Karger, the founder of Cloud Copilot, who developed the tools to clarify AWS permission behavior, will join Act Security as a cloud software architect to continue developing Amphi.
"Every CISO we speak to wants to address permission sprawl, but the teams actually managing access are the infrastructure and platform teams," said Yonatan Langer, co-founder and CEO of Act Security. He added that Cloud Copilot had earned engineers' trust, and the acquisition aims to further develop tools for cloud access management for them. Karger stated that he created Cloud Copilot's tools because he sought answers not readily available in AWS documentation, and Amphi will continue this mission as a free, open-source suite.
Act Security, founded in 2025 by Langer, CTO Itai Kirschenbaum, CPO Stefan Goldberg, and Head of R&D Eli Pelach, develops a system to reduce access for employees, software, and AI agents to cloud resources, aiming to block attack vectors before they are exploited. Langer and Kirschenbaum were co-founders of Medigate, a medical device security company acquired by Claroty for $400 million, and Goldberg was an early employee. The company's recent funding round included investors such as Team8, Bessemer Venture Partners, and Vertex Ventures.
