# WhiteFin

WhiteFin is a cybersecurity company based in Israel, founded in 2026. It has 1 product listed on CybersecTools.

> Authority layer platform governing power delegation to autonomous AI agents.

Source: https://cybersectools.com/companies/whitefin · Updated September 2026

## Quick facts

- Category: [AI Security](https://cybersectools.com/categories/ai-security)
- Type: Product vendor
- Headquarters: Israel
- Founded: 2026
- Products listed: 1
- Website: [whitefin.ai](https://whitefin.ai/)

## What does WhiteFin do?

WhiteFin provides an "Authority Layer" for autonomous AI systems, focused on defining, enforcing, and verifying the bounded power that organizations delegate to autonomous software agents.

The core problem WhiteFin addresses is the gap between what an AI system is technically permitted to do (via credentials and IAM) and what an organization actually intends to authorize it to do. As autonomous systems can deploy code, modify infrastructure, move data, and use credentials at machine speed, WhiteFin argues that identity alone does not establish whether a specific action was within the power the organization meant to delegate.

The platform operates across five functional areas:
- Observe: Discovers autonomous execution activity on supported Linux infrastructure without requiring agent instrumentation
- Authority: Translates organizational intent into explicit, bounded authority definitions without requiring policy engineering expertise
- Enforce: Applies committed authority through deterministic, inline controls at execution boundaries
- Proof: Produces cryptographically protected, signed evidence linking active authority to specific actions or prevented actions
- Learn: Uses verified execution history to recommend improved authority boundaries over time

WhiteFin is designed to operate in customer-hosted or air-gapped environments, meaning enforcement decisions do not depend on external vendor cloud availability. The system uses kernel-native capabilities on supported Linux hosts and claims a deterministic (non-model-based) path for authority decisions.

Target environments include regulated production systems, financial institutions, autonomous coding and DevOps pipelines, critical infrastructure, and defense or sovereign environments. The company positions its product as complementary to existing IAM, gateway, runtime security, observability, and GRC tools rather than a replacement.

Categories: [AI Security](https://cybersectools.com/categories/ai-security)

## WhiteFin products

- [WhiteFin](https://cybersectools.com/tools/whitefin): Authority layer that bounds and verifies what AI agents are permitted to do. (commercial)

---

More on WhiteFin: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md