Spin.AI Announces Acquisition of DoControl to Deliver Comprehensive SaaS and AI Security
Spin.AIAcquirer
DocontrolTarget
Spin.AI announced on September 22, 2026 that it has acquired Israeli cybersecurity firm DoControl. The undisclosed‑value deal combines DoControl’s data loss prevention and AI governance tools with Spin.AI’s SaaS security posture management, browser security, and ransomware resilience offerings, expanding the combined platform across five distinct layers of SaaS and AI risk.
Spin.AI has acquired DoControl, an Israeli‑based cybersecurity company, in a deal announced on September 22, 2026. The transaction, whose financial terms were not disclosed, brings together two complementary security stacks to create a unified platform that spans five layers of SaaS and AI risk.
Deal Terms
The acquisition does not involve any product migration, contract changes, or brand consolidation; both Spin.AI and DoControl will continue to operate under their existing names. Existing customers of each company will retain their current support teams and roadmaps, while DoControl’s product team gains access to Spin.AI’s broader engineering resources.
Strategic Rationale
Spin.AI’s platform already protects more than 2,000 organizations with capabilities in SaaS security posture management (SSPM), browser and extension security, and ransomware resilience. DoControl adds automated data access governance and data loss prevention (DLP) that have already delivered measurable impact for customers such as Vox Media and StackAdapt. By layering DoControl’s DLP and AI governance on top of Spin.AI’s SSPM, browser security, insider‑identity risk, and ransomware defenses, the combined offering delivers a defense‑in‑depth model that addresses the full spectrum of SaaS and AI threats.
The move also leverages the backing of K1 Investment Management, whose March 2026 investment in Spin.AI helped fund the acquisition. Spin.AI’s CEO Dmitry Dontov emphasized that the addition of DoControl’s capabilities provides “an even clearer view of identities accessing data and how it’s moving within SaaS and AI.” DoControl’s co‑founder Omri Weinberg highlighted the cultural fit and the continuity for customers.
Industry analysts have noted that DoControl’s research on non‑human identities—automated systems that now generate the majority of activity on platforms like SharePoint—has become a reference point for an emerging SaaS risk category. Integrating that insight with Spin.AI’s existing risk‑assessment engine, which has evaluated over 550,000 browser extensions, positions the combined company to address a growing segment of the cybersecurity market focused on AI‑driven workloads.
Why It Matters
For Spin.AI, the acquisition instantly fills a functional gap in its portfolio by adding mature DLP and AI governance capabilities, enabling it to compete more aggressively with larger players that already offer end‑to‑end SaaS security suites. The expanded stack also creates cross‑sell opportunities across its existing 2,000‑plus customer base, potentially accelerating ARR growth and improving net revenue retention.
DoControl benefits from Spin.AI’s scale, engineering depth, and global go‑to‑market infrastructure, which should accelerate product development and broaden its reach beyond its current niche. Competitors that focus on single‑layer solutions—such as pure‑play DLP vendors or SSPM specialists—may feel pressure to pursue similar integrations or partnerships to avoid being out‑matched on breadth and depth of coverage.
Key Points
- Spin.AI announced the acquisition of DoControl on September 22, 2026.
- The financial terms of the deal were not disclosed.
- The combined platform now covers five layers of SaaS and AI risk, from access governance to ransomware resilience.
- DoControl’s DLP and AI governance complement Spin.AI’s SSPM, browser security, and cyber‑resilience offerings.
- Both brands will remain independent, with existing customers seeing no product or contract changes.
Analysis
The Spin.AI‑DoControl deal underscores a broader consolidation trend in the SaaS security market, where vendors are stitching together layered defenses to meet the complexity of AI‑driven workloads. By uniting DLP, AI governance, and SSPM under a single roof, the combined entity can pursue higher ARR multiples that investors typically award to platforms offering comprehensive risk coverage. For operators, the integration promises a more defensible value proposition that can boost net revenue retention through cross‑selling and reduce churn by addressing multiple security pain points in one contract. Investors will likely view the move as a signal that capital is flowing toward companies that can demonstrate end‑to‑end coverage across the emerging AI risk surface, positioning them for premium valuations in a market that increasingly values breadth of protection as a moat.