The Agent Trust-and-Governance Layer Keeps Raising: Baselayer's Agentic Identity Suite, Onyx $113M, Island $400M — AI Security Is RegTech's Dominant Category
The infrastructure layer that verifies, constrains, and audits AI agents — the trust layer between frontier labs, consumer agents, and financial institutions (prior revision: Reco's $55M, Palma.ai's $1.8M seed, Baselayer, Outerlimit) — got a decisive Q3 2026 capital infusion, and the money is now consolidating around agent identity specifically.
The most finance-relevant add: Baselayer, "an identity and risk infrastructure provider used by one in five US financial institutions, has secured $35m in Series A funding and unveiled a product designed to verify autonomous software before it transacts" (M13 led; Torch Capital, Picus, Afore). Alongside the raise, Baselayer introduced its Agentic Identity Suite, "which it describes as the first interoperable trust layer and agentic fraud consortium built for the global agentic economy" — a direct commercial answer to the question Meta/Sierra's Poppy draft raises (The Agentic Identity Standards War Arrives in Finance: Meta+Sierra's Personal Agent Protocol (Poppy)) and to Fed Governor Waller's framing that agentic payments require "proving that an agent has the authority to pay on the buyer's behalf" (see Regulatory Frameworks and Liability for Agentic Finance: AI Agent Governance, the FCA's Mills Review, and Live Testing Cohorts).
The control-plane category scaled in tandem, per FinTech Global's Q3 RegTech review — where "the most dominant sub-sector seen for investments was AI security" and September alone saw $1.74bn raised across top RegTech deals:
- Island — $400M Series F at $6.4B (Evolution Equity), positioning as "the agentic control plane" giving organizations "oversight, control and auditing capabilities required in the AI era."
- Zenity — $125M Series C (Norwest-led) for AI-agent security and governance.
- Onyx — $113M Series B (Bessemer-led) for its Secure AI Control Plane, built "to preserve human oversight as autonomous agents take on a rising share of enterprise work."
- HiddenLayer — $100M Series B (Delta-v led; Morgan Stanley, M12 participating), focused on Agentic Runtime Security and new "Agent Harness Security."
- Neo — $100M out of stealth (a16z + Bessemer) to help enterprises govern agent sprawl.
- Rein Security — $25M Series A (Glilot/Sienna), as "companies race to hand autonomous AI agents deeper access to their systems before the tools to police them have caught up."
- Socure — strategic growth round at $5.2B valuation (Summit-led; Goldman Sachs Alternatives, Wells Fargo) plus acquisition of Fravity, "an agentic platform built to automate fraud, risk and compliance operations" — an incumbent fraud-identity leader buying its way into agent-era risk.
Strategic read: the "who verifies the agent" layer is being pre-emptively claimed before agentic commerce scales — by startups (Baselayer consortium, Zenity, Onyx), by enterprise security platforms (Island, HiddenLayer), and now by fraud incumbents (Socure/Fravity). For banks and insurers, vendor selection here is becoming as consequential as cloud selection was a decade ago. It also complements the compliance-AI capital wave tracked in Compliance AI: Marble's €6.5M Agentic AML Round and RiskScout's Community-Bank Push — Even as RegTech Funding Falls 38% YoY — that note's subjects automate the regulatory work; these subjects police the automators.