Cognni
Last updated: Jul 31, 2026
Cognni is an Israeli information-intelligence and data-security startup that uses contextual AI to discover, classify, and govern sensitive unstructured information across enterprise collaboration environments. Its current product centers on data context for Microsoft Purview and Google Workspace, insider-risk reduction, shadow-AI controls, and faster investigation of information exposure.
Visit WebsiteCompany Overview
Cognni provides an information-intelligence layer for enterprise security and governance teams. Its platform is designed to map unstructured and regulated information, infer the meaning and business sensitivity of documents, email, chats, prompts, and related assets, and then turn that context into labels, policies, alerts, and investigation workflows. The company's current methodology is explicitly organized around agentless discovery, contextual classification, and enforcement. It positions this approach against regex- and keyword-heavy controls that can miss business-critical information when the relevant sensitivity is contextual rather than a simple identifier. Public product materials also describe behavioral mapping, anomaly detection, shadow-AI monitoring, timeline reconstruction, and blast-radius analysis. These are plausible capabilities for a data-security platform, but Cognni does not publicly provide enough independent benchmark detail to establish accuracy across languages, industries, repositories, or rapidly changing enterprise content.
The primary buyer context is enterprise information security, data governance, compliance, insider-risk, and Microsoft 365 administration. Cognni says it can operate across email, documents, chats, and AI prompts, with specific integration surfaces for Microsoft Purview, Gmail, and Google Drive. Its current website advertises deployment in under 15 minutes and claims that its contextual layer can increase Purview label coverage by up to 500%; those figures are company claims and should be validated under a defined customer test rather than treated as independently verified performance. A SoftwareOne case study identifies Cognni as a Microsoft co-sell partner and describes a Purview-related engagement for a manufacturer with 8,000 employees. Cognni's own case study describes automated labeling and policy support in that setting. Together these are useful ecosystem and commercialization signals, but they do not establish recurring revenue, retention, deployment scale, customer concentration, or repeatability across tenants.
Competition is structurally difficult because Microsoft and Google control much of the installed collaboration and security surface. Microsoft Purview, Varonis, BigID, Concentric AI, Nightfall AI, Proofpoint, Securiti, and other data-security-posture-management or insider-risk vendors address overlapping problems. Cognni's proposed edge is semantic understanding of information flow and business context, potentially reducing manual rule maintenance and improving coverage for sensitive content that does not match a fixed pattern. The important diligence question is whether this semantic lift is measurable and durable enough to justify another control plane alongside native DLP, sensitivity labels, permissions analytics, and AI-governance features. Buyers should request precision and recall by content class, false-positive rates, supported languages and repositories, latency and cost at scale, model-evaluation methodology, remediation depth, and evidence of expansion from an initial assessment into recurring production use.
Cognni has credible but bounded national-security relevance. The core product is defensive information assurance: discovering exposed material, applying governance before sensitive data reaches collaboration systems or AI assistants, identifying unusual information-sharing behavior, and reconstructing an incident's likely data path. These functions can matter to government, defense, intelligence-support, and critical-infrastructure organizations with large volumes of operationally sensitive unstructured information. The public record reviewed here does not establish defense customers, government contracts, classified-environment accreditation, or offensive cyber capability, so the dual-use case should not be overstated. Strategic applicability will depend on deployment architecture, data residency, identity and audit integrations, language coverage, procurement posture, and the ability to support restricted or disconnected environments. The company appears commercially active and productized, while still requiring material diligence on technical validation, current traction, financing history, and readiness for high-assurance deployments.
Dual-Use Assessment
Cognni's contextual discovery, classification, anomaly-detection, and incident-reconstruction capabilities have substantive defensive applicability to government, defense, intelligence-support, and critical-infrastructure information assurance. The case is limited to protection and governance: reviewed public materials do not establish defense deployments, classified accreditation, government contracts, or offensive capability.
Strategic Fit Assessment
Priority signal means this entry may be worth researching within the Claw & Talon thesis. It does not mean investable, suitable, endorsed, available, or likely to produce returns.
Cognni is a credible strategic-priority signal because its AI-native data-context layer addresses a concrete weakness in enterprise security stacks and has public ecosystem activity around Microsoft Purview, SoftwareOne, and Microsoft security channels. The Series C announcement and current product surface indicate continued commercialization, but the public record remains thin on financing terms, recurring revenue, retention, customer scale, independent model benchmarks, and restricted-environment readiness. Diligence should therefore test measurable classification lift, deployment economics, expansion behavior, competitive displacement, security architecture, and durability against bundled platform features. This is a strategic diligence assessment, not an investment recommendation.
Strategic Value to U.S.-Israel Alliance
Cognni could improve visibility and control over sensitive information that conventional DLP and governance tools miss in unstructured content. Its strongest strategic value is defensive: classifying information before it is exposed through collaboration tools or AI assistants, highlighting unexpected access and sharing, and reducing investigation time after an incident. The same functions are relevant to public-sector and critical-infrastructure information assurance, but public evidence does not confirm defense adoption or high-assurance certification. Strategic value therefore depends on integrations, residency and access controls, language coverage, deployment options, and evidence that the product delivers a material operational advantage over native suites.
Key Technologies
- Contextual natural-language understanding for unstructured enterprise content
- Agentless discovery and mapping across documents, email, chats, and AI prompts
- Semantic classification of business-critical and regulated information
- Automated sensitivity labeling and policy-enforcement integration
- Behavioral mapping and anomaly detection for insider-risk signals
- Shadow-AI and Copilot prompt-governance controls
- Timeline reconstruction and blast-radius analysis for information incidents
Use Cases & Applications
- Contextual discovery and classification of sensitive documents, email, and collaboration data
- Automated preparation and enrichment of Microsoft Purview labels and policies
- Google Workspace discovery across Gmail and Drive
- Detection and triage of unusual internal or external information-sharing behavior
- Guardrails against sensitive data entering Copilot and external generative-AI tools
- Rapid investigation of exposed assets, data paths, and incident blast radius
- Information assurance for regulated enterprises, government, defense, and critical infrastructure
Sources and verification
This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work.
This record lists 8 public references used for company identity, status, positioning, or material-claim review.
Public sources
The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.
- cognni.ai Public source used for profile verification.
- cognni.ai Public source used for profile verification.
- cognni.ai Public source used for profile verification.
- cognni.ai Public source used for profile verification.
- softwareone.com Public source used for profile verification.
- Company announcement Public source used for profile verification.
- einpresswire.com Public source used for profile verification.
- checkid.co.il Public source used for profile verification.
- Profile update timestamp Last updated in the Claw & Talon database on Jul 31, 2026.
Investor Lens
What this entry is
Private startup
Why it may matter
Cognni may matter as a Cybersecurity entry with not currently an investable standalone company for Israeli technology research.
How an independent investor should read this
Not currently an investable standalone company. Read this profile as a starting point for independent verification, not as a recommendation or suitability assessment.
Evidence to verify
- Verify current status
- Verify traction
- Verify cap table/funding
- Verify technical claims
- Verify regulatory/export-control issues
- Verify customer concentration
Main investor questions
- Is the company currently active, independently financeable, and raising or not raising on terms you can verify?
- What customer, revenue, product, and technical evidence supports the company story?
- What valuation, cap table, rights, and follow-on assumptions would govern any private exposure?
- Does the dual-use claim map to actual commercial and government/defense/resilience buyer evidence?
- What evidence would change the thesis or show that the profile is stale?
What not to infer
- Inclusion does not imply endorsement.
- Inclusion does not imply allocation availability or current fundraising.
- Scores do not indicate investment suitability or expected returns.
- Strategic importance does not automatically imply venture return potential.
Diligence questions
- What evidence verifies Cognni's current customer traction, deployment status, and revenue concentration?
- Which technical claims are independently demonstrable today, and which remain roadmap or pilot-stage assertions?
- Where does the product create real defense, intelligence, critical-infrastructure, or emergency-response value beyond ordinary commercial adoption?
- How does the platform integrate into existing SOC, cloud, identity, or compliance workflows without adding operational burden?
- What would disconfirm the priority signal: weak customer references, thin technical differentiation, poor capital efficiency, or limited allied-market access?
Related sector
See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.
Related companies
Need a diligence readout?
Use the profile and related checklists as a starting point. If the decision needs more context, request a company screen, founder-call prep, diligence memo, or sector readout.