{ "name": "AI security vendors, compared", "url": "https://aisecurityvendors.com/", "license": "CC BY 4.0", "cite": "AI Security Vendors, https://aisecurityvendors.com/", "updated": "2026-11-11", "fields": [ { "key": "guardrails", "label": "Runtime guardrails", "type": "bool", "description": "Inspects prompts and model responses at runtime and blocks or redacts attacks such as prompt injection and jailbreaks. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "agent_security", "label": "Agent security", "type": "bool", "description": "Controls or tests AI agents and their tools, including MCP servers and tool calls. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "red_teaming", "label": "Red teaming", "type": "bool", "description": "Runs adversarial tests against models, applications or agents before or after deployment. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "ai_spm", "label": "AI-SPM and AI-BOM", "type": "bool", "description": "Discovers and inventories AI assets (models, agents, apps, shadow AI) and assesses posture, misconfigurations or AI-BOM. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "model_security", "label": "Model and supply-chain scanning", "type": "bool", "description": "Scans models, model files or the AI and agent supply chain for tampering and malicious code. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "data_controls", "label": "Data protection for AI", "type": "bool", "description": "Detects, redacts or governs sensitive data in prompts, responses, training data and AI workflows. Yes means the vendor documents it on its own pages; a dash means no source says so.", "filterable": true }, { "key": "acquisition", "label": "Deal status", "type": "enum", "description": "Whether the vendor has bought an AI security company, has a deal pending, or is now owned by a larger company, per press releases and vendor pages.", "filterable": true, "enumValues": [ "Bought an AI security company", "Deal pending", "Owned by a larger company" ] }, { "key": "self_host", "label": "Self-host or private cloud", "type": "bool", "description": "The vendor documents running the product on your own servers, in your own cloud or VPC, or air-gapped. Derived from the deployment text on the same source.", "filterable": true }, { "key": "ownership", "label": "Ownership and deals", "type": "string", "description": "The acquisition or ownership fact, as stated by the parties.", "sortable": false }, { "key": "products", "label": "Named modules", "type": "string", "description": "Named AI security modules the vendor lists.", "sortable": false }, { "key": "guardrails_detail", "label": "Runtime guardrails, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "agent_security_detail", "label": "Agent security, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "red_teaming_detail", "label": "Red teaming, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "ai_spm_detail", "label": "AI-SPM and AI-BOM, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "model_security_detail", "label": "Model and supply-chain scanning, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "data_controls_detail", "label": "Data protection for AI, as documented", "type": "string", "description": "What the vendor documents for this capability.", "sortable": false }, { "key": "frameworks_covered", "label": "Frameworks mapped", "type": "string", "description": "Security and compliance frameworks the vendor explicitly maps its testing, controls or reports to. A mapping, not a certification.", "sortable": false }, { "key": "integrations", "label": "Integrations and platforms", "type": "string", "description": "Named clouds, models, development tools, protocols or security tools the product supports.", "sortable": false }, { "key": "deployment", "label": "Deployment", "type": "string", "description": "Documented hosting and installation options.", "sortable": false }, { "key": "licensing", "label": "Licensing", "type": "string", "description": "Open-source status or paid packaging, where documented.", "sortable": false }, { "key": "content_modalities", "label": "Content inspected", "type": "string", "description": "Content formats the product inspects, where documented.", "sortable": false }, { "key": "latency_claim_ms", "label": "Vendor latency claim", "type": "number", "unit": "ms", "description": "Upper bound of the runtime latency the vendor claims (\"below N ms\"). Vendor-published, not independently benchmarked." }, { "key": "attack_scenarios_min", "label": "Attack library", "type": "number", "unit": "attacks", "description": "Lower bound of the attack simulations the vendor says it runs (\"more than N\"). Vendor-published." }, { "key": "pii_data_types", "label": "Sensitive data types detected", "type": "number", "unit": "types", "description": "Count of PII and confidential-data types the vendor says its detector covers." }, { "key": "languages_min", "label": "Languages monitored", "type": "number", "unit": "languages", "description": "Lower bound of languages the vendor says it monitors in real time." }, { "key": "ai_services_min", "label": "AI services covered", "type": "number", "unit": "services", "description": "Lower bound of the AI services the vendor says its discovery covers." }, { "key": "funding_round_usd_m", "label": "Latest disclosed round", "type": "number", "unit": "$M", "description": "Size of the most recent funding round the company or the press reported, in US$ millions." }, { "key": "funding", "label": "Funding", "type": "string", "description": "Latest round, lead investor and month, plus the total raised where the source states it.", "sortable": false } ], "records": [ { "id": "a10-networks-trojai", "name": "A10 Networks TrojAI", "url": "https://www.a10networks.com/", "summary": "TrojAI by A10 Networks provides AI runtime defense, agent-led red teaming, and MCP governance for enterprise agents, applications, and models.", "hq": "US", "founded": 2004, "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "guardrails": true, "guardrails_detail": "TrojAI Defend blocks prompt injection, jailbreaks, data leakage, and toxic content.", "red_teaming": true, "red_teaming_detail": "TrojAI Detect runs continuous single-turn, multi-turn, and agentic adversarial tests.", "agent_security": true, "agent_security_detail": "TrojAI Defend for MCP discovers servers/tools and enforces communication policies.", "frameworks_covered": "Findings map to OWASP, MITRE, and NIST frameworks.", "deployment": "Self-contained on-premises or customer-cloud deployment.", "self_host": true, "ownership": "Completed the TrojAI acquisition on June 15, 2026.", "acquisition": "Bought an AI security company", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.a10networks.com/products/trojai-by-a10/", "title": "A10 Networks TrojAI: a10networks.com/products/trojai-by-a10", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "frameworks_covered", "deployment", "self_host" ] }, { "url": "https://www.a10networks.com/news/press-releases/a10-networks-acquires-trojai-inc-expanding-ai-roadmap/", "title": "A10 Networks TrojAI: a10networks.com/news/press-releases/a10-networks-acquir", "accessed": "2026-11-11", "fields": [] }, { "url": "https://www.sec.gov/Archives/edgar/data/1580808/000158080826000045/aten-20260630.htm", "title": "A10 Networks 10-Q (quarter ended Jun 30, 2026)", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "adversa-ai", "name": "Adversa AI", "url": "https://adversa.ai/", "summary": "Adversa AI protects enterprise coding-agent workflows with behavior analysis, runtime blocking, and offensive AI security assessments.", "tags": [ "agent-security", "red-teaming" ], "fields": { "agent_security": true, "agent_security_detail": "Analyzes chains of coding-agent actions and blocks dangerous behavior before completion.", "deployment": "Uses a gateway plus a lightweight sensor on developer machines.", "integrations": "Supports Claude Code, Copilot, Cursor, and Codex.", "red_teaming": true, "red_teaming_detail": "Offers AI red teaming and agentic assessments.", "guardrails": null, "guardrails_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://adversa.ai/", "title": "Adversa AI: adversa.ai", "accessed": "2026-11-11", "fields": [ "agent_security", "agent_security_detail", "deployment", "self_host", "integrations", "red_teaming", "red_teaming_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "akamai-firewall-for-ai", "name": "Akamai Firewall for AI", "url": "https://www.akamai.com/products/firewall-for-ai", "summary": "Akamai Firewall for AI is an LLM firewall that inspects prompts and model responses at the Akamai edge or through an API.", "hq": "US", "tags": [ "guardrails", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Detects and blocks prompt injections, jailbreaks and harmful queries before they reach the model; inspects inputs and outputs in real time.", "data_controls": true, "data_controls_detail": "Inspects model responses for PII leaks and intellectual-property disclosure.", "deployment": "Runs at the Akamai edge or through a REST API; protects models hosted on-prem, in the cloud or hybrid.", "frameworks_covered": "OWASP Top 10 for LLM Applications", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.akamai.com/products/firewall-for-ai", "title": "Akamai Firewall for AI", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "deployment", "frameworks_covered" ] } ], "verifiedAt": "2026-11-11" }, { "id": "alice-activefence", "name": "Alice (ActiveFence)", "url": "https://alice.io/", "summary": "Alice provides AI safety and security for model labs, enterprises, and platforms through adversarial testing, custom guardrails, and threat intelligence.", "tags": [ "guardrails", "red-teaming", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "WonderFence inspects inputs and outputs and blocks or redacts policy violations, including injection and jailbreak attempts.", "data_controls": true, "data_controls_detail": "Redacts PII, credentials, internal system details, and other sensitive information.", "red_teaming": true, "red_teaming_detail": "WonderBuild automatically generates adversarial prompts, evaluates application responses, and reports safety/security findings.", "frameworks_covered": "WonderFence policies display OWASP LLM Top 10 and MITRE ATLAS risk-framework mappings.", "agent_security": null, "agent_security_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://docs.activefence.com/wondersuite/wonderfence/introducing-wonderfence", "title": "Alice (ActiveFence): docs.activefence.com/wondersuite/wonderfence/introducing-won", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail" ] }, { "url": "https://docs.activefence.com/wondersuite/wonderbuild/introducing-wonderbuild", "title": "Alice (ActiveFence): docs.activefence.com/wondersuite/wonderbuild/introducing-won", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail" ] }, { "url": "https://docs.activefence.com/wondersuite/wonderfence/wonderfence-key-features", "title": "Alice (ActiveFence): docs.activefence.com/wondersuite/wonderfence/wonderfence-key", "accessed": "2026-11-11", "fields": [ "frameworks_covered" ] } ], "verifiedAt": "2026-11-11" }, { "id": "amazon-bedrock-guardrails", "name": "Amazon Bedrock Guardrails", "url": "https://aws.amazon.com/", "summary": "Amazon Bedrock Guardrails provides configurable safeguards for enterprise generative AI applications and agent workflows, including models hosted outside Bedrock.", "tags": [ "guardrails", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Configurable content/word filters, prompt attack detection, denied topics, and hallucination checks.", "data_controls": true, "data_controls_detail": "Blocks or masks PII and custom regex matches in inputs and responses.", "integrations": "ApplyGuardrail API supports Bedrock, self-hosted models, OpenAI, Google Gemini, Strands Agents, and Bedrock AgentCore.", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://aws.amazon.com/bedrock/guardrails/", "title": "Amazon Bedrock Guardrails: aws.amazon.com/bedrock/guardrails", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "arthur", "name": "Arthur", "url": "https://www.arthur.ai/", "summary": "Arthur offers enterprise agent security and governance with discovery, behavioral analytics, runtime guardrails, and audit evidence.", "tags": [ "guardrails", "agent-security", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers agents on endpoints, cloud, and private data centers, including shadow agents.", "agent_security": true, "agent_security_detail": "Agent Behavioral Analytics detects anomalies and indicators of compromise.", "guardrails": true, "guardrails_detail": "Provides real-time guardrails and security-policy enforcement.", "integrations": "Streams security findings to CrowdStrike Falcon, Elastic, Splunk, and Datadog.", "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.arthur.ai/", "title": "Arthur: arthur.ai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "aurascape", "name": "Aurascape", "url": "https://aurascape.ai/", "summary": "Aurascape secures enterprise AI usage and AI agents with discovery, data protection, adversarial testing, and runtime controls.", "tags": [ "guardrails", "agent-security", "red-teaming", "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Automatically detects and risk-scores AI applications, copilots, and embedded models.", "red_teaming": true, "red_teaming_detail": "Tests agents and applications before deployment for injection, leakage, and policy violations.", "agent_security": true, "agent_security_detail": "Governs MCP activity and tool use with a Zero-Bypass MCP Gateway.", "guardrails": true, "guardrails_detail": "Enforces continuous runtime guardrails.", "data_controls": true, "data_controls_detail": "Uses real-time sensitive-data classification and fingerprinting.", "frameworks_covered": "Access and usage policy alignment includes GDPR, HIPAA, and PCI.", "model_security": null, "model_security_detail": null, "funding_round_usd_m": 50, "funding": "$50M at launch, led by Menlo Ventures and Mayfield, April 2025." }, "sources": [ { "url": "https://aurascape.ai/product/", "title": "Aurascape: aurascape.ai/product", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "data_controls", "data_controls_detail" ] }, { "url": "https://aurascape.ai/wp-content/uploads/2026/01/Aurascape-Product-Brief.pdf", "title": "Aurascape: aurascape.ai/wp-content/uploads/2026/01/Aurascape-Pr", "accessed": "2026-11-11", "fields": [ "frameworks_covered" ] }, { "url": "https://www.securityweek.com/aurascape-banks-hefty-50-million-to-mitigate-shadow-ai-risks/", "title": "SecurityWeek: Aurascape banks $50M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "cato-networks-ai-security", "name": "Cato Networks AI Security", "url": "https://www.catonetworks.com/", "summary": "Cato supplies enterprise AI security through its acquired Aim platform, covering employee AI use, private AI applications, and agent development.", "tags": [ "guardrails", "ai-spm" ], "fields": { "ownership": "Acquired Aim Security, announced as completed on September 3, 2025.", "acquisition": "Bought an AI security company", "guardrails": true, "guardrails_detail": "Aim AI Firewall enforces security policies on runtime interactions with private AI apps and agents.", "ai_spm": true, "ai_spm_detail": "Discovers and remediates lifecycle risks and scans internal AI model configurations.", "integrations": "Protects Microsoft Copilot, Cursor, and local agents using MCP servers.", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.catonetworks.com/news/cato-acquires-aim-security-to-extend-sase-leadership-and-secure-enterprise-ai-transformation/", "title": "Cato Networks AI Security: catonetworks.com/news/cato-acquires-aim-security-to-exte", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition", "guardrails", "guardrails_detail", "ai_spm", "ai_spm_detail", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "check-point-ai-security", "name": "Check Point AI Security", "url": "https://www.checkpoint.com/", "summary": "Check Point sells AI security controls for employee usage, applications, and autonomous agents, including runtime protection and adversarial assessment.", "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "guardrails": true, "guardrails_detail": "Detects prompt injection, jailbreaks, and data exfiltration.", "agent_security": true, "agent_security_detail": "Prevents tool/privilege abuse and blocks unsafe autonomous actions.", "red_teaming": true, "red_teaming_detail": "Continuously attacks models and agents with adversarial techniques.", "frameworks_covered": "Red-team techniques map to OWASP risks.", "latency_claim_ms": 50, "languages_min": 100, "ownership": "Announced the Lakera acquisition on September 16, 2025 and closed it on October 22, 2025.", "acquisition": "Bought an AI security company", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.checkpoint.com/ai-security/", "title": "Check Point AI Security: checkpoint.com/ai-security", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "red_teaming", "red_teaming_detail", "frameworks_covered", "latency_claim_ms", "languages_min" ] }, { "url": "https://www.checkpoint.com/downloads/investor/check-point-software-third-quarter-2025-financial-results.pdf?v=1.1", "title": "Check Point AI Security: checkpoint.com/downloads/investor/check-point-software", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "checkmarx-llm-scanner", "name": "Checkmarx LLM Scanner", "url": "https://checkmarx.com/", "summary": "Checkmarx LLM Scanner inspects code and artifacts bundled inside AI model packages before deployment and reports findings in Checkmarx One.", "tags": [ "ai-spm", "model-security" ], "fields": { "model_security": true, "model_security_detail": "Static scanning finds unsafe deserialization, command execution, trust-remote-code, and malicious pickle patterns without executing models.", "ai_spm": true, "ai_spm_detail": "Produces deterministic AI-BOM evidence with model provenance, findings, and risk posture.", "integrations": "Scans Hugging Face, Git repositories, local directories, and internal registries; CLI exports SARIF, JSON, YAML, and text.", "frameworks_covered": "AI-BOM evidence supports NIST AI RMF, EU AI Act, and ISO 42001 obligations.", "guardrails": null, "guardrails_detail": null, "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://checkmarx.com/platform/llm-scanner/", "title": "Checkmarx LLM Scanner: checkmarx.com/platform/llm-scanner", "accessed": "2026-11-11", "fields": [ "model_security", "model_security_detail", "ai_spm", "ai_spm_detail", "integrations", "frameworks_covered" ] } ], "verifiedAt": "2026-11-11" }, { "id": "cisco-ai-defense", "name": "Cisco AI Defense", "url": "https://www.cisco.com/", "summary": "Cisco AI Defense gives enterprises discovery, model validation, runtime protection, and access controls for AI they build and use.", "tags": [ "guardrails", "red-teaming", "ai-spm", "model-security", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI models and connected data sources across distributed environments.", "red_teaming": true, "red_teaming_detail": "Algorithmic red teaming identifies model safety and security vulnerabilities.", "guardrails": true, "guardrails_detail": "Network-embedded guardrails block attacks and harmful responses in production.", "model_security": true, "model_security_detail": "Includes AI supply-chain risk management for models and files.", "data_controls": true, "data_controls_detail": "Controls employee access to third-party AI applications.", "ownership": "Completed acquisition of Robust Intelligence on September 24, 2024.", "acquisition": "Bought an AI security company", "agent_security": null, "agent_security_detail": null }, "sources": [ { "url": "https://www.cisco.com/site/us/en/products/security/ai-defense/index.html", "title": "Cisco AI Defense: cisco.com/site/us/en/products/security/ai-defense", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "model_security", "model_security_detail", "data_controls", "data_controls_detail" ] }, { "url": "https://blogs.cisco.com/news/fortifying-the-future-of-security-for-ai-cisco-announces-intent-to-acquire-robust-intelligence", "title": "Cisco AI Defense: blogs.cisco.com/news/fortifying-the-future-of-security-", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "cloudflare-ai-security-for-apps", "name": "Cloudflare AI Security for Apps", "url": "https://www.cloudflare.com/", "summary": "Cloudflare AI Security for Apps adds model-independent LLM threat detection and blocking controls to its web application firewall.", "tags": [ "guardrails", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Detects prompt injection and unsafe or custom topics in incoming JSON prompts; WAF rules apply blocking or challenges.", "data_controls": true, "data_controls_detail": "Detects PII in incoming prompts including contact, financial, and identity information.", "licensing": "LLM endpoint discovery is on all plans; AI detection fields require an Enterprise paid add-on.", "integrations": "Requires an enabled Cloudflare WAF zone; supports JSON request bodies.", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://developers.cloudflare.com/waf/detections/ai-security-for-apps/", "title": "Cloudflare AI Security for Apps: developers.cloudflare.com/waf/detections/ai-security-for-apps", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "licensing", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "coralogix-ai-guardrails", "name": "Coralogix AI Guardrails", "url": "https://coralogix.com/", "summary": "Coralogix provides runtime AI guardrails alongside AI observability so enterprises can enforce prompt and response policies and investigate violations.", "tags": [ "guardrails", "agent-security", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Detects, blocks, rewrites, or flags unsafe prompts and responses.", "data_controls": true, "data_controls_detail": "Security guardrails prevent data and PII leaks and sanitize inputs.", "agent_security": true, "agent_security_detail": "Supports customized guardrail rules per agent and continuous AI interaction monitoring.", "integrations": "The cx-guardrails SDK applies policy checks in application code; OpenTelemetry exports correlate guardrail spans with LLM traces.", "ownership": "Acquired Aporia, announced as completed on December 23, 2024.", "acquisition": "Bought an AI security company", "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://coralogix.com/platform/ai-guardrails/", "title": "Coralogix AI Guardrails: coralogix.com/platform/ai-guardrails", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "agent_security", "agent_security_detail" ] }, { "url": "https://coralogix.com/docs/user-guides/ai/guardrails/", "title": "Coralogix AI Guardrails: coralogix.com/docs/user-guides/ai/guardrails", "accessed": "2026-11-11", "fields": [ "integrations" ] }, { "url": "https://coralogix.com/blog/coralogix-acquires-aporia/", "title": "Coralogix AI Guardrails: coralogix.com/blog/coralogix-acquires-aporia", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "credo-ai", "name": "Credo AI", "url": "https://www.credo.ai/", "summary": "Credo AI sells an AI governance platform: a registry of AI systems, agents and vendors, continuous risk assessment and compliance mapping.", "tags": [ "agent-security", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "AI Registry catalogs AI systems, agents, vendors and models, with shadow AI discovery and risk classification.", "agent_security": true, "agent_security_detail": "Agent registry with agent cards and dependency maps; an agentic risk library covers tool misuse, scope drift and inter-agent risk.", "frameworks_covered": "EU AI Act, NIST AI RMF, ISO/IEC 42001, OMB M-25, Colorado ADMT, NAIC AI", "integrations": "Snowflake, Databricks, AWS, Azure, ServiceNow, Jira, Confluence, Slack, GitHub, MLflow", "funding_round_usd_m": 21, "funding": "$21M Series B led by CrimsoNox Capital, Mozilla Ventures and FPV Ventures, July 2024; $41.3M raised in total.", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.credo.ai/", "title": "Credo AI: credo.ai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "frameworks_covered", "integrations" ] }, { "url": "https://siliconangle.com/2024/07/30/credo-ai-raises-21m-help-enterprises-deploy-ai-safely-responsibly-compliant-way/", "title": "SiliconANGLE: Credo AI raises $21M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "crowdstrike-falcon-ai-security", "name": "CrowdStrike Falcon AI security", "url": "https://www.crowdstrike.com/", "summary": "CrowdStrike provides enterprise AI agent discovery, identity controls, supply-chain protection, and gateway response through its Falcon platform.", "tags": [ "agent-security", "ai-spm", "model-security" ], "fields": { "ai_spm": true, "ai_spm_detail": "Falcon Guardian discovers known and shadow AI agents across endpoints, cloud, and SaaS.", "agent_security": true, "agent_security_detail": "Agentic Identity Provider establishes verifiable agent identities and continuous access authorization.", "model_security": true, "model_security_detail": "Endpoint protection stops malicious packages and install scripts introduced by coding agents.", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "data_controls": null, "data_controls_detail": null, "ownership": "Closed the Pangea acquisition on September 26, 2025. Agreements to buy Fiddler AI and Dreadnode, signed November 3, 2026, are pending.", "acquisition": "Bought an AI security company" }, "sources": [ { "url": "https://www.crowdstrike.com/en-us/solutions/ai-agent-security/", "title": "CrowdStrike Falcon AI security: crowdstrike.com/en-us/solutions/ai-agent-security", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "model_security", "model_security_detail" ] }, { "url": "https://www.sec.gov/Archives/edgar/data/1535527/000153552726000010/crwd-20260131.htm", "title": "CrowdStrike FY2026 10-K, Note 12", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "cyera-ai-guardian", "name": "Cyera AI Guardian", "url": "https://www.cyera.com/ai-guardian", "summary": "Cyera is a data security platform; AI Guardian adds AI-SPM, agent controls and prompt-level data protection built on its data classification.", "hq": "US", "tags": [ "agent-security", "red-teaming", "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers and catalogs AI models, agents, apps and pipelines, including shadow AI, and maps them to identities, data and access paths.", "agent_security": true, "agent_security_detail": "Maps each agent’s links to models, tools, MCP servers and data stores; can quarantine agents or block risky actions.", "red_teaming": true, "red_teaming_detail": "Red-teams agents against prompt injection, jailbreaks and other exploitation methods.", "data_controls": true, "data_controls_detail": "Checks prompts against identity and intent to keep data access authorized and stops sensitive data reaching public models.", "deployment": "Cloud integrations, logs, EDR and MDM plugins, an AI gateway plugin, platform APIs, Cyera Endpoint and Browser Shield.", "integrations": "Microsoft Copilot, Claude Cowork, Anthropic Marketplace", "funding_round_usd_m": 600, "funding": "$600M round led by Evolution Equity Partners at a $12B valuation, June 2026; more than $2B raised in total.", "guardrails": null, "guardrails_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.cyera.com/ai-guardian", "title": "Cyera AI Guardian", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "red_teaming", "red_teaming_detail", "data_controls", "data_controls_detail", "deployment", "integrations" ] }, { "url": "https://itbrief.co.uk/story/cyera-raises-usd-600-million-at-usd-12-billion-valuation", "title": "IT Brief: Cyera raises $600M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "deepkeep", "name": "DeepKeep", "url": "https://www.deepkeep.ai/", "summary": "DeepKeep sells AI security for enterprise applications, agents, models, and employee AI use, including language and computer-vision systems.", "tags": [ "guardrails", "agent-security", "red-teaming", "model-security" ], "fields": { "guardrails": true, "guardrails_detail": "AI Firewall supplies runtime detection and guardrails.", "red_teaming": true, "red_teaming_detail": "Adaptive evaluation tests model and AI application robustness.", "agent_security": true, "agent_security_detail": "AI Agent Scanner scans agent attack surfaces.", "model_security": true, "model_security_detail": "Model Scanning performs static and dynamic supply-chain checks.", "ai_spm": null, "ai_spm_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.deepkeep.ai/", "title": "DeepKeep: deepkeep.ai", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "model_security", "model_security_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "dreadnode", "name": "Dreadnode", "url": "https://www.dreadnode.io/", "summary": "Dreadnode provides security teams with self-hosted agent evaluation and AI red-teaming infrastructure for traditional ML through multi-agent systems.", "tags": [ "agent-security", "red-teaming" ], "fields": { "red_teaming": true, "red_teaming_detail": "Red teams traditional ML models through multi-agent systems.", "agent_security": true, "agent_security_detail": "Combines task evaluations, LLM judges, and adversarial testing to assess agent behavior.", "deployment": "Runs inside customer-controlled infrastructure and routes inference to approved or self-hosted models.", "self_host": true, "ownership": "CrowdStrike signed an agreement to acquire Dreadnode on November 3, 2026. The deal is pending, with closing expected in CrowdStrike Q4 FY27.", "acquisition": "Deal pending", "guardrails": null, "guardrails_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 14, "funding": "$14M Series A, February 2025." }, "sources": [ { "url": "https://www.dreadnode.io/", "title": "Dreadnode: dreadnode.io", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "deployment", "self_host" ] }, { "url": "https://www.crowdstrike.com/en-us/press-releases/crowdstrike-to-acquire-dreadnode-advance-ai-trust/", "title": "Dreadnode: crowdstrike.com/en-us/press-releases/crowdstrike-to-acq", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] }, { "url": "https://www.securityweek.com/offensive-ai-startup-dreadnode-secures-14m-to-stress-test-ai-systems/", "title": "SecurityWeek: Dreadnode secures $14M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "enkrypt-ai", "name": "Enkrypt AI", "url": "https://www.enkryptai.com/", "summary": "Enkrypt AI sells an agent security and compliance platform with adaptive red teaming, runtime guardrails, and policy enforcement.", "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "red_teaming": true, "red_teaming_detail": "Continuously adapts attacks to the AI application's use case.", "guardrails": true, "guardrails_detail": "Real-time guardrails stop threats and adapt using prompts.", "agent_security": true, "agent_security_detail": "Offers an MCP scanner and MCP gateway.", "products": "Agent Red Teaming, Agent Guardrails, Agent Policy Engine, AI Data Risk Audit, MCP Scanner, and MCP Gateway.", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 2.35, "funding": "$2.35M seed led by Boldcap, February 2024." }, "sources": [ { "url": "https://www.enkryptai.com/", "title": "Enkrypt AI: enkryptai.com", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "products" ] }, { "url": "https://venturebeat.com/ai/exclusive-enkrypt-raises-seed-round-to-create-a-control-layer-for-generative-ai-safety", "title": "VentureBeat: Enkrypt raises seed round", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "f5-ai-guardrails", "name": "F5 AI Guardrails", "url": "https://www.f5.com/", "summary": "F5 AI Guardrails supplies runtime threat protection, data controls, and agent-action enforcement for enterprise AI models and applications.", "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "guardrails": true, "guardrails_detail": "Defends against prompt injection, jailbreaks, data leakage, and harmful outputs.", "agent_security": true, "agent_security_detail": "Audits and blocks unauthorized tool calls and agent actions.", "deployment": "Supports public/private clouds, on-premises, and fully air-gapped environments.", "self_host": true, "frameworks_covered": "Automated auditing templates support GDPR, HIPAA, and EU AI Act alignment.", "ownership": "Announced the CalypsoAI acquisition on September 11, 2025 and closed it on September 26, 2025.", "acquisition": "Bought an AI security company", "red_teaming": true, "red_teaming_detail": "F5 AI Red Team uses autonomous agent swarms to simulate attack patterns and identify vulnerabilities.", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.f5.com/products/ai-guardrails", "title": "F5 AI Guardrails: f5.com/products/ai-guardrails", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "deployment", "self_host", "frameworks_covered" ] }, { "url": "https://www.f5.com/company/blog/what-are-ai-guardrails", "title": "F5 AI Guardrails: f5.com/company/blog/what-are-ai-guardrails", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail" ] }, { "url": "https://www.sec.gov/Archives/edgar/data/1048695/000104869525000157/ffiv-20250930.htm", "title": "F5 FY2025 10-K, Note 3", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "fiddler-ai", "name": "Fiddler AI", "url": "https://www.fiddler.ai/", "summary": "Fiddler provides enterprise agent monitoring, evaluations, runtime enforcement, and governance in a single AI control plane.", "tags": [ "guardrails", "ai-spm", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Enforces policy inline on the agent request and response path.", "data_controls": true, "data_controls_detail": "Detects and redacts PII, PHI, and secrets before model input and response delivery.", "ai_spm": true, "ai_spm_detail": "Maintains a living inventory of connected agents and enforcement decisions.", "deployment": "Offers SaaS, VPC, and AWS GovCloud options.", "self_host": true, "latency_claim_ms": 80, "ownership": "CrowdStrike signed a definitive agreement to acquire Fiddler on November 3, 2026. The deal is pending, with closing expected in CrowdStrike Q4 FY27.", "acquisition": "Deal pending", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "funding_round_usd_m": 30, "funding": "$30M Series C led by RPS Ventures, January 2026; $100M raised in total." }, "sources": [ { "url": "https://www.fiddler.ai/", "title": "Fiddler AI: fiddler.ai", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "ai_spm", "ai_spm_detail", "deployment", "self_host", "latency_claim_ms" ] }, { "url": "https://ir.crowdstrike.com/news-releases/news-release-details/crowdstrike-acquire-fiddler-deliver-agent-observability-ai-trust", "title": "Fiddler AI: ir.crowdstrike.com/news-releases/news-release-details/crow", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] }, { "url": "https://www.businesswire.com/news/home/20260127042634/en/Fiddler-Raises-$30M-Series-C-to-Power-the-Control-Plane-for-AI-Agents", "title": "Business Wire: Fiddler raises $30M Series C", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "fortinet-fortiaigate", "name": "Fortinet FortiAIGate", "url": "https://www.fortinet.com/", "summary": "Fortinet FortiAIGate is a self-hosted runtime security and governance gateway for enterprise AI applications and agents.", "tags": [ "guardrails", "agent-security", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Inspects text, images, audio, video, and code for prompt injection, jailbreaks, and data leaks.", "agent_security": true, "agent_security_detail": "Blocks harmful agent tool calls and inspects MCP tool traffic.", "deployment": "Runs on customer infrastructure using Kubernetes and NVIDIA GPUs.", "self_host": true, "frameworks_covered": "Protections align with OWASP Top 10 lists for LLM, MCP, and agentic apps.", "data_controls": true, "data_controls_detail": "DLP detects 35 PII/confidential-data types, redacts responses, and blocks tool-call leaks.", "pii_data_types": 35, "ownership": "Acquired Virtue AI, announced as completed on August 17, 2026.", "acquisition": "Bought an AI security company", "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.fortinet.com/products/fortiaigate", "title": "Fortinet FortiAIGate: fortinet.com/products/fortiaigate", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "deployment", "self_host", "frameworks_covered", "data_controls", "data_controls_detail", "pii_data_types" ] }, { "url": "https://investor.fortinet.com/news-releases/news-release-details/fortinet-advances-continuous-ai-protection-acquisition-virtue-ai", "title": "Fortinet FortiAIGate: investor.fortinet.com/news-releases/news-release-details/fort", "accessed": "2026-11-11", "fields": [] }, { "url": "https://www.helpnetsecurity.com/2026/08/17/fortinet-virtue-ai-acquisition/", "title": "Help Net Security: Fortinet acquires Virtue AI", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "giskard", "name": "Giskard", "url": "https://www.giskard.ai/", "summary": "Giskard assesses enterprise AI agents for security and quality risks, supplies deployment verdicts, and manages remediation and retesting.", "tags": [ "agent-security", "red-teaming", "data-controls" ], "fields": { "red_teaming": true, "red_teaming_detail": "Tests AI agents for prompt injection and confidential or personal data disclosure.", "deployment": "Customers can choose EU or US data processing with isolation guarantees.", "data_controls": true, "data_controls_detail": "RBAC, audit trails, identity-provider integration, and a zero-training policy.", "agent_security": true, "agent_security_detail": "Provides agent go/no-go reports and retests fixes through remediation.", "guardrails": null, "guardrails_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.giskard.ai/", "title": "Giskard: giskard.ai", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "deployment", "self_host", "data_controls", "data_controls_detail", "agent_security", "agent_security_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "google-cloud-model-armor", "name": "Google Cloud Model Armor", "url": "https://cloud.google.com/", "summary": "Google Cloud Model Armor screens prompts and model responses to protect AI applications running on Google Cloud or other clouds.", "tags": [ "guardrails", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Blocks prompt injection and jailbreak attempts.", "data_controls": true, "data_controls_detail": "Scans and redacts sensitive IP and PII from prompts and responses.", "integrations": "Provides a LangChain integration.", "content_modalities": "Scans unstructured documents including PDFs for malicious payloads.", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://docs.cloud.google.com/model-armor/overview", "title": "Google Cloud Model Armor: docs.cloud.google.com/model-armor/overview", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "integrations", "content_modalities" ] } ], "verifiedAt": "2026-11-11" }, { "id": "gray-swan", "name": "Gray Swan", "url": "https://www.grayswan.ai/", "summary": "Gray Swan sells adversarial assessment and runtime behavior enforcement for enterprises deploying AI and laboratories building models.", "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "red_teaming": true, "red_teaming_detail": "Shade uses adversarial agents to attack models, agents, and guardrails in their deployment context.", "guardrails": true, "guardrails_detail": "Cygnal classifies and blocks adversarial inputs and unsafe agent outputs in production.", "agent_security": true, "agent_security_detail": "Supports AI agents with tool access and MCP/tool integrations.", "products": "Shade, Cygnal, Arena, and adversarial evaluation services.", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 40, "funding": "$40M Series A co-led by Wing Venture Capital and Madrona, May 2026." }, "sources": [ { "url": "https://www.grayswan.ai/", "title": "Gray Swan: grayswan.ai", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "products" ] }, { "url": "https://grayswan.ai/news/gray-swan-announces-series-a", "title": "Gray Swan: Series A announcement", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "harmonic-security", "name": "Harmonic Security", "url": "https://www.harmonic.security/", "summary": "Harmonic governs workforce AI use and agent activity with contextual discovery, data classification, and inline controls across supported applications and endpoints.", "tags": [ "agent-security", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers how employees and agents use AI across desktop apps, CLI tools, IDEs, APIs, and MCP workflows.", "agent_security": true, "agent_security_detail": "Governs autonomous workflows at the MCP and tool layers.", "deployment": "Browser extension and MCP Gateway; gateway supports Windows, macOS, and Linux.", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 17.5, "funding": "$17.5M Series A led by Next47, October 2024; more than $26M raised in total." }, "sources": [ { "url": "https://www.harmonic.security/", "title": "Harmonic Security: harmonic.security", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "deployment", "self_host" ] }, { "url": "https://helpnetsecurity.com/2024/10/02/harmonic-security-funding-17-5-million/", "title": "Help Net Security: Harmonic Security raises $17.5M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "hiddenlayer", "name": "HiddenLayer", "url": "https://www.hiddenlayer.com/", "summary": "HiddenLayer supplies an AI security platform for enterprises protecting agentic, generative, and predictive AI across their lifecycle.", "tags": [ "guardrails", "agent-security", "red-teaming", "model-security" ], "fields": { "model_security": true, "model_security_detail": "Scans third-party and proprietary models for hidden risks.", "red_teaming": true, "red_teaming_detail": "Offers continuous defense validation and AI attack simulation.", "guardrails": true, "guardrails_detail": "Uses policy controls against misuse, data leakage, and adversarial attacks.", "agent_security": true, "agent_security_detail": "Protects agentic systems and MCP interactions.", "integrations": "Prebuilt integrations for CI/CD, MLOps, data pipelines, and SIEM/SOAR.", "ai_spm": null, "ai_spm_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 100, "funding": "$100M Series B led by Delta-v Capital, September 2026." }, "sources": [ { "url": "https://www.hiddenlayer.com/", "title": "HiddenLayer: hiddenlayer.com", "accessed": "2026-11-11", "fields": [ "model_security", "model_security_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "integrations" ] }, { "url": "https://hiddenlayer.com/news/hiddenlayer-100m-series-b-ai-security", "title": "HiddenLayer: $100M Series B", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "holistic-ai", "name": "Holistic AI", "url": "https://www.holisticai.com/", "summary": "Holistic AI combines enterprise AI governance with AI discovery, security testing, and policy enforcement for models and agents.", "tags": [ "agent-security", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers models, agents, and applications across cloud, code, and SaaS.", "red_teaming": true, "red_teaming_detail": "Tests for prompt injection and jailbreaks.", "frameworks_covered": "Controls mapped to EU AI Act, NIST AI RMF, and ISO/IEC 42001.", "agent_security": true, "agent_security_detail": "Guardian Agents supervise and intervene in autonomous agent actions.", "guardrails": null, "guardrails_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.holisticai.com/", "title": "Holistic AI: holisticai.com", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "frameworks_covered", "agent_security", "agent_security_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "ibm-guardium-exposure-manager", "name": "IBM Guardium Exposure Manager", "url": "https://www.ibm.com/", "summary": "IBM Guardium Exposure Manager helps enterprises identify and investigate sensitive-data exposure across AI agents, applications, databases, and endpoints.", "tags": [ "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Maps sensitive-data movement across AI agents, applications, databases, and endpoints.", "data_controls": true, "data_controls_detail": "Alerts on risky sharing, AI-generated outputs, and policy violations involving sensitive data.", "integrations": "Provides visibility into data connected to RAG pipelines, vector databases, and model inference.", "products": "IBM Guardium Exposure Manager.", "guardrails": null, "guardrails_detail": null, "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.ibm.com/products/guardium/guardium-exposure-manager", "title": "IBM Guardium Exposure Manager: ibm.com/products/guardium/guardium-exposure-man", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "data_controls", "data_controls_detail", "integrations", "products" ] } ], "verifiedAt": "2026-11-11" }, { "id": "knostic", "name": "Knostic", "url": "https://www.knostic.ai/", "summary": "Knostic secures enterprise coding assistants and agent endpoints with runtime action controls, posture management, and agent supply-chain scanning.", "tags": [ "agent-security", "ai-spm", "model-security" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers shadow AI and centrally governs agent policies and configurations.", "agent_security": true, "agent_security_detail": "Kirin blocks prompt injection and rogue actions inline before execution.", "model_security": true, "model_security_detail": "AgentMesh scans skills, MCP servers, and VS Code extensions for supply-chain threats.", "integrations": "Kirin works with Cursor, Claude Code, GitHub Copilot, and Windsurf.", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 11, "funding": "$11M round led by Bright Pixel Capital, March 2025; $14M raised in total." }, "sources": [ { "url": "https://www.knostic.ai/", "title": "Knostic: knostic.ai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "model_security", "model_security_detail", "integrations" ] }, { "url": "https://siliconangle.com/2025/03/05/knostic-raises-11m-strengthen-enterprise-ai-security-need-know-access-controls/", "title": "SiliconANGLE: Knostic raises $11M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "lasso-security", "name": "Lasso Security", "url": "https://www.lasso.security/", "summary": "Lasso sells an enterprise AI security platform linking AI discovery, posture management, red teaming, and runtime enforcement.", "tags": [ "guardrails", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI agents and applications, maps their components, and assesses misconfigurations.", "red_teaming": true, "red_teaming_detail": "Automated adversarial testing includes multi-turn attacks and tool-chain manipulation.", "guardrails": true, "guardrails_detail": "Enforces policies inline through proxy, API, or AI Gateway.", "frameworks_covered": "Posture alignment with NIST and OWASP; threat detection includes MITRE and OWASP.", "agent_security": null, "agent_security_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 30, "funding": "$30M Series A led by ClearSky, September 2026." }, "sources": [ { "url": "https://www.lasso.security/", "title": "Lasso Security: lasso.security", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "frameworks_covered" ] }, { "url": "https://siliconangle.com/2026/09/02/lasso-security-launches-cpu-only-ai-guardrail-raises-30m/", "title": "SiliconANGLE: Lasso Security raises $30M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "microsoft-ai-security", "name": "Microsoft AI security", "url": "https://www.microsoft.com/", "summary": "Microsoft supplies Azure AI Content Safety guardrails and Defender for Cloud AI posture management for enterprise models, applications, and agents.", "tags": [ "guardrails", "agent-security", "ai-spm", "data-controls" ], "fields": { "guardrails": true, "guardrails_detail": "Prompt Shields scans text for user-input attacks on LLMs.", "agent_security": true, "agent_security_detail": "Task adherence API detects misaligned, unintended, or premature agent tool use.", "deployment": "Available inside Microsoft Foundry or standalone through Content Safety Studio and APIs.", "data_controls": true, "data_controls_detail": "Detects known protected text material in AI-generated responses.", "ai_spm": true, "ai_spm_detail": "Defender CSPM discovers cross-cloud AI BOMs, identifies misconfigurations and attack paths, and supports AI agents in Preview.", "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://learn.microsoft.com/en-us/azure/ai-services/content-safety/overview", "title": "Microsoft AI security: learn.microsoft.com/en-us/azure/ai-services/content-safety/", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "deployment", "self_host", "data_controls", "data_controls_detail" ] }, { "url": "https://learn.microsoft.com/en-us/azure/defender-for-cloud/ai-security-posture", "title": "Microsoft AI security: learn.microsoft.com/en-us/azure/defender-for-cloud/ai-secur", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "mindgard", "name": "Mindgard", "url": "https://mindgard.ai/", "summary": "Mindgard provides an offensive AI security platform for security and engineering teams to discover, validate, remediate, and continuously reassess AI vulnerabilities.", "tags": [ "agent-security", "red-teaming", "ai-spm" ], "fields": { "red_teaming": true, "red_teaming_detail": "Autonomous red teaming combines reconnaissance and adaptive attacks against AI systems.", "agent_security": true, "agent_security_detail": "Assesses tool-using agents and systems connected through MCP or A2A servers.", "integrations": "Supports APIs, CI/CD pipelines, and Burp Suite.", "ai_spm": true, "ai_spm_detail": "Maps AI systems, models, agents, tools, and behaviors before attacks.", "guardrails": null, "guardrails_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 30, "funding": "$30M Series A led by Album VC, August 2026." }, "sources": [ { "url": "https://mindgard.ai/", "title": "Mindgard: mindgard.ai", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "integrations", "ai_spm", "ai_spm_detail" ] }, { "url": "https://www.securityweek.com/mindgard-raises-30-million-to-protect-ai-systems/", "title": "SecurityWeek: Mindgard raises $30M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "netskope", "name": "Netskope", "url": "https://www.netskope.com/", "summary": "Netskope supplies enterprise AI discovery, runtime guardrails, red teaming, gateway controls, and agent/MCP governance.", "tags": [ "guardrails", "agent-security", "red-teaming" ], "fields": { "guardrails": true, "guardrails_detail": "Inline module protects against prompt injection, jailbreaks, and unsafe content.", "red_teaming": true, "red_teaming_detail": "Assesses LLM vulnerabilities before deployment and identifies production drift.", "agent_security": true, "agent_security_detail": "Agent Action Control applies intent-, risk-, and access-based policies to agent actions.", "frameworks_covered": "AI products map to OWASP Top 10 LLM and MITRE ATLAS.", "deployment": "AI Gateway can be deployed in customer VPC/on-premises, with AWS and VMware ESXi support.", "self_host": true, "integrations": "AI Gateway supports OpenAI, Google Gemini, and Anthropic Claude.", "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://docs.netskope.com/en/ai-security", "title": "Netskope: docs.netskope.com/en/ai-security", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "red_teaming", "red_teaming_detail", "agent_security", "agent_security_detail", "frameworks_covered", "deployment", "self_host", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "neuraltrust", "name": "NeuralTrust", "url": "https://neuraltrust.ai/", "summary": "NeuralTrust provides AI agent runtime security and a gateway for enterprise access to models, MCP servers, and APIs.", "tags": [ "guardrails", "ai-spm" ], "fields": { "guardrails": true, "guardrails_detail": "Centrally enforces prompt/content filters, DLP, and tool-use permissions.", "ai_spm": true, "ai_spm_detail": "Maintains a real-time inventory of agents, connected tools, and execution workflows.", "deployment": "Supports on-premises, SaaS, private cloud/VPC, and split-plane deployment.", "self_host": true, "latency_claim_ms": 100, "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://neuraltrust.ai/", "title": "NeuralTrust: neuraltrust.ai", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "ai_spm", "ai_spm_detail", "deployment", "self_host", "latency_claim_ms" ] } ], "verifiedAt": "2026-11-11" }, { "id": "noma-security", "name": "Noma Security", "url": "https://noma.security/", "summary": "Noma provides enterprise agent security and governance, combining runtime behavior controls, access policy, and adversarial testing.", "tags": [ "guardrails", "agent-security", "red-teaming", "model-security" ], "fields": { "agent_security": true, "agent_security_detail": "Approves, reviews, or blocks agents, MCP servers, and skills; scopes allowed actions.", "guardrails": true, "guardrails_detail": "Can stop destructive actions, steer agents, alert humans, mask data, or trigger a kill switch.", "red_teaming": true, "red_teaming_detail": "Uses multi-turn attacks to find weaknesses in AI applications.", "model_security": true, "model_security_detail": "Finds agent supply-chain risks and misconfigurations.", "ai_spm": null, "ai_spm_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 100, "funding": "$100M Series B led by Evolution Equity Partners, July 2025; $132M raised in total." }, "sources": [ { "url": "https://noma.security/", "title": "Noma Security: noma.security", "accessed": "2026-11-11", "fields": [ "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "red_teaming", "red_teaming_detail", "model_security", "model_security_detail" ] }, { "url": "https://www.calcalistech.com/ctechnews/article/s19xaaudxl", "title": "Calcalist: Noma Security raises $100M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "nvidia-nemo-guardrails", "name": "NVIDIA NeMo Guardrails", "url": "https://www.nvidia.com/", "summary": "NVIDIA NeMo Guardrails lets developers add programmable safety and security controls to LLM applications and tool-using agents.", "tags": [ "guardrails", "agent-security" ], "fields": { "licensing": "NeMo Guardrails library is an open-source Python package.", "guardrails": true, "guardrails_detail": "Input, retrieval, dialog, execution, and output rails support policy enforcement.", "agent_security": true, "agent_security_detail": "Validates tool inputs and outputs around tool invocation.", "deployment": "Self-managed Python library or microservice deployed on Kubernetes with Helm.", "self_host": true, "integrations": "Integrates with LangGraph for multi-agent safety.", "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://docs.nvidia.com/nemo/guardrails/about-nemo-guardrails-library/overview", "title": "NVIDIA NeMo Guardrails: docs.nvidia.com/nemo/guardrails/about-nemo-guardrails-l", "accessed": "2026-11-11", "fields": [ "licensing", "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "deployment", "self_host", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "oligo-security", "name": "Oligo Security", "url": "https://www.oligo.security/", "summary": "Oligo protects enterprise AI runtime infrastructure, open-source models, LLM frameworks, and agent workflows using execution-level visibility and response.", "tags": [ "agent-security", "ai-spm", "model-security" ], "fields": { "model_security": true, "model_security_detail": "Inspects model files and dependencies loaded into GPU/CPU memory for integrity risks.", "agent_security": true, "agent_security_detail": "Prevents AI agents from making unvetted outbound API calls.", "ai_spm": true, "ai_spm_detail": "Discovers shadow AI components running in clusters.", "integrations": "Protects frameworks including LangChain and Hugging Face.", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 50, "funding": "$50M Series B led by Greenfield Partners, January 2025; $80M raised in total." }, "sources": [ { "url": "https://www.oligo.security/", "title": "Oligo Security: oligo.security", "accessed": "2026-11-11", "fields": [ "model_security", "model_security_detail", "agent_security", "agent_security_detail", "ai_spm", "ai_spm_detail", "integrations" ] }, { "url": "https://www.businesswire.com/news/home/20250129117162/en/Oligo-Security-Raises-50M-Series-B-to-Redefine-Security-for-Modern-Applications", "title": "Business Wire: Oligo Security raises $50M Series B", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "operant-ai", "name": "Operant AI", "url": "https://www.operant.ai/", "summary": "Operant protects enterprise AI stacks, agents, MCP connections, and employee endpoints with runtime discovery and enforcement.", "tags": [ "guardrails", "agent-security", "ai-spm" ], "fields": { "guardrails": true, "guardrails_detail": "Semantic Firewall makes inline allow, block, or redact decisions using agent-action intent.", "agent_security": true, "agent_security_detail": "Agent Protector detects threats and blocks zero-click exploits, data exfiltration, and rogue agents.", "ai_spm": true, "ai_spm_detail": "Endpoint Protector discovers shadow AI, coding agents, and MCP clients on employee devices.", "integrations": "MCP Gateway supplies registries, allow/block lists, and nonhuman-identity access controls.", "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 10, "funding": "$10M Series A co-led by SineWave Ventures and Felicis, September 2024." }, "sources": [ { "url": "https://www.operant.ai/", "title": "Operant AI: operant.ai", "accessed": "2026-11-11", "fields": [ "guardrails", "guardrails_detail", "agent_security", "agent_security_detail", "ai_spm", "ai_spm_detail", "integrations" ] }, { "url": "https://vmblog.com/bylines/operant-ai-secures-10m-series-a-to-protect-the-modern-cloud-across-apis-applications-and-ai/", "title": "VMblog: Operant AI secures $10M Series A", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "orca-security", "name": "Orca Security", "url": "https://orca.security/", "summary": "Orca provides agentless AI security posture management within its cloud security platform for enterprises using managed and self-hosted AI.", "tags": [ "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI/ML assets and checks misconfigurations, exposed access keys, and shadow AI.", "deployment": "Uses agentless SideScanning technology.", "integrations": "Covers Azure OpenAI, Amazon Bedrock and SageMaker, Google Vertex AI, and commonly used AI packages.", "data_controls": true, "data_controls_detail": "Scans AI projects and model-training data for sensitive information.", "guardrails": null, "guardrails_detail": null, "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://orca.security/platform/ai-security/ai-spm/", "title": "Orca Security: orca.security/platform/ai-security/ai-spm", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "deployment", "self_host", "integrations", "data_controls", "data_controls_detail" ] } ], "verifiedAt": "2026-11-11" }, { "id": "palo-alto-networks-prisma-airs", "name": "Palo Alto Networks Prisma AIRS", "url": "https://www.paloaltonetworks.com/", "summary": "Prisma AIRS secures enterprise AI applications, agents, models, and data from development through deployment.", "tags": [ "guardrails", "agent-security", "red-teaming", "ai-spm", "model-security" ], "fields": { "model_security": true, "model_security_detail": "Scans third-party models for tampering, malicious scripts, and deserialization attacks.", "red_teaming": true, "red_teaming_detail": "Simulates attacks against AI agents and applications.", "guardrails": true, "guardrails_detail": "Enforces runtime safeguards against manipulation, data exposure, and unsafe actions.", "ai_spm": true, "ai_spm_detail": "Provides AI posture management for training/inference data, agents, applications, and model access.", "agent_security": true, "agent_security_detail": "Includes agent identity and endpoint security modules.", "ownership": "Completed acquisition of Protect AI on July 22, 2025; its capabilities contribute to Prisma AIRS.", "acquisition": "Bought an AI security company", "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www2.paloaltonetworks.com/ai-security/prisma-airs", "title": "Palo Alto Networks Prisma AIRS: www2.paloaltonetworks.com/ai-security/prisma-airs", "accessed": "2026-11-11", "fields": [ "model_security", "model_security_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail" ] }, { "url": "https://www.paloaltonetworks.com/company/press/2025/palo-alto-networks-completes-acquisition-of-protect-ai", "title": "Palo Alto Networks Prisma AIRS: paloaltonetworks.com/company/press/2025/palo-alto-networks-c", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "pillar-security", "name": "Pillar Security", "url": "https://www.pillar.security/", "summary": "Pillar provides enterprise AI agent discovery, security testing, runtime protection, and governance across the agent lifecycle.", "tags": [ "guardrails", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Catalogs agents, models, prompts, tools, MCP servers, and skills through agentless integrations.", "red_teaming": true, "red_teaming_detail": "Offers agentic red teaming and attack-surface exposure testing.", "guardrails": true, "guardrails_detail": "Provides runtime guardrails and agent runtime protection.", "deployment": "Offers cloud, self-hosted, and hybrid deployment options.", "self_host": true, "agent_security": null, "agent_security_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 9, "funding": "$9M seed led by Shield Capital, April 2025." }, "sources": [ { "url": "https://www.pillar.security/", "title": "Pillar Security: pillar.security", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "deployment", "self_host" ] }, { "url": "https://siliconangle.com/2025/04/16/pillar-security-raises-9m-address-growing-ai-specific-security-risks", "title": "SiliconANGLE: Pillar Security raises $9M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "promptarmor", "name": "PromptArmor", "url": "https://www.promptarmor.com/", "summary": "PromptArmor gives third-party risk and security teams AI risk reports on vendors and AI tools in the agent supply chain, with continuous monitoring.", "tags": [ "ai-spm", "model-security" ], "fields": { "ai_spm": true, "ai_spm_detail": "Finds which vendors use AI and scores AI-specific risk across 26 risk vectors, then monitors vendors for changes.", "model_security": true, "model_security_detail": "Assesses new AI assets in the agent supply chain, including connector scope and data flows to AI subprocessors.", "frameworks_covered": "NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS", "integrations": "ServiceNow, ProcessUnity, Zscaler, Netskope, Archer, API", "guardrails": null, "guardrails_detail": null, "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.promptarmor.com/", "title": "PromptArmor: promptarmor.com", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "model_security", "model_security_detail", "frameworks_covered", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "promptfoo-openai", "name": "Promptfoo (OpenAI)", "url": "https://www.promptfoo.dev/", "summary": "Promptfoo provides enterprise AI security testing and open-source tools for application-specific attacks against agents, RAG systems, models, and guardrails.", "hq": "US", "founded": 2024, "tags": [ "red-teaming" ], "fields": { "red_teaming": true, "red_teaming_detail": "Generates application-specific tests for injection, jailbreaks, leaks, business-rule violations, and insecure agent tool use.", "integrations": "Integrates with CI/CD, GitHub, GitLab, Jenkins, MCP, and agent frameworks.", "deployment": "Supports on-premises or cloud workflows.", "self_host": true, "ownership": "OpenAI announced the acquisition on March 9, 2026. Promptfoo states it is now part of OpenAI and keeps its open-source tools.", "acquisition": "Owned by a larger company", "guardrails": null, "guardrails_detail": null, "agent_security": null, "agent_security_detail": null, "ai_spm": null, "ai_spm_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.promptfoo.dev/", "title": "Promptfoo (OpenAI): promptfoo.dev", "accessed": "2026-11-11", "fields": [ "red_teaming", "red_teaming_detail", "integrations", "deployment", "self_host" ] }, { "url": "https://www.promptfoo.dev/about/", "title": "Promptfoo (OpenAI): promptfoo.dev/about", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] }, { "url": "https://www.promptfoo.dev/blog/promptfoo-joining-openai/", "title": "Promptfoo (OpenAI): promptfoo.dev/blog/promptfoo-joining-openai", "accessed": "2026-11-11" } ], "verifiedAt": "2026-11-11" }, { "id": "proofpoint-ai-security", "name": "Proofpoint AI Security", "url": "https://www.proofpoint.com/", "summary": "Proofpoint supplies an enterprise AI security platform to govern employee AI use, agent behavior, and MCP connections with data and intent context.", "tags": [ "guardrails", "agent-security", "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "AI Access Security discovers AI tools active in the environment.", "agent_security": true, "agent_security_detail": "Inspects intent and behavior across multi-step agent transactions.", "guardrails": true, "guardrails_detail": "Enforces context-aware policies during AI interactions.", "integrations": "MCP Security authenticates and inspects MCP traffic and maintains approved-server registries.", "data_controls": true, "data_controls_detail": "Applies controls to prompts, responses, tool calls, and workflows.", "ownership": "Acquired Acuvity, announced as completed on February 12, 2026.", "acquisition": "Bought an AI security company", "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.proofpoint.com/us/platform/ai-security", "title": "Proofpoint AI Security: proofpoint.com/us/platform/ai-security", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "integrations", "data_controls", "data_controls_detail" ] }, { "url": "https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-acquires-acuvity-deliver-ai-security-and-governance-across", "title": "Proofpoint AI Security: proofpoint.com/us/newsroom/press-releases/proofpoint-a", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "qualys-totalai", "name": "Qualys TotalAI", "url": "https://www.qualys.com/", "summary": "Qualys TotalAI combines enterprise AI asset discovery, posture assessment, remediation, red teaming, and governance within its TruRisk platform.", "tags": [ "guardrails", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discovers sanctioned/shadow AI across clouds, SaaS, GPUs, endpoints, pipelines, models, agents, and MCP servers.", "red_teaming": true, "red_teaming_detail": "Automated LLM red teaming includes MCP probing and adversarial prompt injection.", "guardrails": true, "guardrails_detail": "Provides live guardrails and a prompt firewall with container behavior protection.", "frameworks_covered": "Aligns evidence to NIST AI RMF, EU AI Act, OWASP Top 10 for LLM, and MITRE ATLAS.", "agent_security": null, "agent_security_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.qualys.com/apps/totalai", "title": "Qualys TotalAI: qualys.com/apps/totalai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "frameworks_covered" ] } ], "verifiedAt": "2026-11-11" }, { "id": "sentinelone-prompt-security", "name": "SentinelOne Prompt Security", "url": "https://www.sentinelone.com/", "summary": "SentinelOne's Prompt Security protects enterprise employee AI use, developer assistants, custom applications, and autonomous agents.", "tags": [ "guardrails", "agent-security", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI tools and code assistants, including shadow AI.", "agent_security": true, "agent_security_detail": "Discovers MCP servers and agents, enforces least privilege, and logs agent actions.", "red_teaming": true, "red_teaming_detail": "Tests for prompt injection, jailbreaks, and data poisoning before deployment.", "guardrails": true, "guardrails_detail": "Blocks adversarial prompts and scrubs sensitive outputs through a runtime AI firewall.", "integrations": "Supports developer assistants including GitHub Copilot, Cursor, and Claude Code.", "ai_services_min": 15000, "acquisition": "Bought an AI security company", "ownership": "Completed the Prompt Security acquisition on September 5, 2025, after announcing it on August 5, 2025. Prompt Security is built into the Singularity Platform.", "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.sentinelone.com/platform/securing-ai-prompt/", "title": "SentinelOne Prompt Security: sentinelone.com/platform/securing-ai-prompt", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "integrations", "ai_services_min" ] }, { "url": "https://www.sec.gov/Archives/edgar/data/1583708/000158370825000159/s-20251031.htm", "title": "SentinelOne 10-Q (quarter ended Oct 31, 2025), Note 4", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "snyk-agent-scan", "name": "Snyk Agent Scan", "url": "https://snyk.io/", "summary": "Snyk Agent Scan inspects agents, MCP servers, and skills for supply-chain risks, with local scanning and enterprise observability through EVO.", "tags": [ "agent-security", "model-security" ], "fields": { "model_security": true, "model_security_detail": "Scans agent supply chains for injection, tool poisoning, cross-origin escalation, and toxic flows.", "agent_security": true, "agent_security_detail": "Detects malicious skills and security vulnerabilities before installation.", "integrations": "Automatically discovers Claude Code/Desktop, Cursor, Gemini CLI, and Windsurf configurations.", "deployment": "Local CLI with MDM-based enterprise rollout and EVO platform observability.", "ownership": "Acquired Invariant Labs, announced as completed on June 24, 2025.", "acquisition": "Bought an AI security company", "guardrails": null, "guardrails_detail": null, "red_teaming": null, "red_teaming_detail": null, "ai_spm": null, "ai_spm_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://labs.snyk.io/experiments/skill-scan/", "title": "Snyk Agent Scan: labs.snyk.io/experiments/skill-scan", "accessed": "2026-11-11", "fields": [ "model_security", "model_security_detail", "agent_security", "agent_security_detail", "integrations", "deployment", "self_host" ] }, { "url": "https://snyk.io/news/snyk-acquires-invariant-labs-to-accelerate-agentic-ai-security-innovation/", "title": "Snyk Agent Scan: snyk.io/news/snyk-acquires-invariant-labs-to-ac", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "straiker", "name": "Straiker", "url": "https://www.straiker.ai/", "summary": "Straiker gives enterprise security teams AI agent discovery, adversarial testing, and runtime defense against agent-specific attacks.", "tags": [ "guardrails", "agent-security", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Discover AI maps agents, MCP servers, and workflows with posture and misconfiguration monitoring.", "red_teaming": true, "red_teaming_detail": "Ascend AI tests prompt injection, goal hijacking, tool misuse, and inter-agent manipulation.", "guardrails": true, "guardrails_detail": "Defend AI blocks identity abuse, memory poisoning, data exfiltration, and resource exploitation.", "agent_security": true, "agent_security_detail": "Runtime response includes an agentic kill switch.", "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 64, "funding": "$64M Series A led by Marathon Management Partners, June 2026; $85M raised in total." }, "sources": [ { "url": "https://www.straiker.ai/", "title": "Straiker: straiker.ai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "agent_security", "agent_security_detail" ] }, { "url": "https://www.securityweek.com/straiker-raises-64-million-for-ai-security-platform/", "title": "SecurityWeek: Straiker raises $64M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "tenable-one-ai-exposure", "name": "Tenable One AI Exposure", "url": "https://www.tenable.com/", "summary": "Tenable One AI Exposure helps enterprises discover AI usage, remediate misconfigurations, govern agents, and stop AI-specific attacks.", "tags": [ "guardrails", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Tracks employee/agent AI use and identifies unsafe platform settings and integrations.", "guardrails": true, "guardrails_detail": "Detects and stops prompt injection and jailbreak attempts.", "frameworks_covered": "Supports NIST CSF and EU AI Act compliance workflows.", "integrations": "Supports OpenAI ChatGPT Enterprise, Microsoft Copilot, 365 Copilot, and Studio Copilot.", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.tenable.com/products/ai-exposure", "title": "Tenable One AI Exposure: tenable.com/products/ai-exposure", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "guardrails", "guardrails_detail", "frameworks_covered", "integrations" ] } ], "verifiedAt": "2026-11-11" }, { "id": "trend-micro-trendai-vision-one", "name": "Trend Micro TrendAI Vision One", "url": "https://www.trendmicro.com/", "summary": "TrendAI Vision One AI Security gives enterprises AI inventory, model scanning, runtime prompt protection, and access controls for third-party AI services.", "tags": [ "guardrails", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI services, models, workloads, storage, entitlements, repositories, and images.", "red_teaming": true, "red_teaming_detail": "AI Scanner tests models for known attack techniques and objectives before deployment.", "guardrails": true, "guardrails_detail": "AI Guard inspects prompts and responses for harmful outputs, injection, and sensitive-data leakage.", "deployment": "AI Scanner and AI Guard support vendor-hosted and self-hosted operation.", "self_host": true, "agent_security": null, "agent_security_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://docs.trendmicro.com/en-us/documentation/article/trend-vision-one-ai-security", "title": "Trend Micro TrendAI Vision One: docs.trendmicro.com/en-us/documentation/article/trend-visio", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "deployment", "self_host" ] } ], "verifiedAt": "2026-11-11" }, { "id": "upwind", "name": "Upwind", "url": "https://www.upwind.io/", "summary": "Upwind is a runtime-first cloud security platform that adds AI-SPM, an AI-BOM, MCP security and AI security testing for AI workloads.", "tags": [ "agent-security", "red-teaming", "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "AI-SPM flags exposed model endpoints, unversioned models, permissive IAM roles and exposed keys; the AI-BOM inventories libraries, frameworks, model registries and cloud AI services.", "agent_security": true, "agent_security_detail": "MCP Security traces agent prompts, decision chains, tool calls, file changes and downstream API calls end to end.", "red_teaming": true, "red_teaming_detail": "AI security testing runs prompt-injection and jailbreak tests and checks unsafe tool bindings.", "data_controls": true, "data_controls_detail": "Detects sensitive data in prompts and inference payloads in real time.", "integrations": "OpenAI, Amazon Bedrock, Azure OpenAI, Google Vertex AI; AWS, Azure and Google Cloud", "frameworks_covered": "OWASP Top 10 for LLM Applications", "funding_round_usd_m": 400, "funding": "$400M Series C led by Bessemer Venture Partners, October 2026; more than $800M raised in total.", "guardrails": null, "guardrails_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.upwind.io/feed/introducing-upwinds-unified-ai-protection-built-for-modern-cloud-environments", "title": "Upwind: unified AI protection", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "red_teaming", "red_teaming_detail", "data_controls", "data_controls_detail", "integrations", "frameworks_covered" ] }, { "url": "https://helpnetsecurity.com/2026/10/28/upwind-400-million-series-c-funding", "title": "Help Net Security: Upwind raises $400M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "witnessai", "name": "WitnessAI", "url": "https://witness.ai/", "summary": "WitnessAI supplies enterprise AI security and governance for employee AI usage, models, applications, and agents.", "tags": [ "guardrails", "agent-security", "red-teaming", "ai-spm" ], "fields": { "ai_spm": true, "ai_spm_detail": "Inventories AI applications, agents, and MCP servers.", "agent_security": true, "agent_security_detail": "Enforces approved MCP server and tool access across agents and IDEs.", "guardrails": true, "guardrails_detail": "Blocks jailbreaks and prompt injection at runtime.", "red_teaming": true, "red_teaming_detail": "Automates predeployment AI red teaming.", "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null, "funding_round_usd_m": 58, "funding": "$58M round led by Sound Ventures, January 2026; more than $85M raised in total." }, "sources": [ { "url": "https://witness.ai/", "title": "WitnessAI: witness.ai", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "red_teaming", "red_teaming_detail" ] }, { "url": "https://www.securityweek.com/witnessai-raises-58-million-for-ai-security-platform/", "title": "SecurityWeek: WitnessAI raises $58M", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "wiz", "name": "Wiz", "url": "https://www.wiz.io/", "summary": "Wiz secures cloud AI applications with asset discovery, posture checks, sensitive training-data protection, and runtime threat detection.", "tags": [ "guardrails", "ai-spm", "data-controls" ], "fields": { "ai_spm": true, "ai_spm_detail": "Builds an agentless AI-BOM and detects AI service misconfigurations and attack paths.", "guardrails": true, "guardrails_detail": "Detects prompt injection, rogue agents, and malicious AI behavior at runtime.", "data_controls": true, "data_controls_detail": "DSPM capabilities identify sensitive training data and exposure paths.", "integrations": "Detects AWS SageMaker, OpenAI, and TensorFlow Hub technologies.", "ownership": "Google closed its acquisition of Wiz on March 11, 2026. Wiz keeps its brand.", "acquisition": "Owned by a larger company", "agent_security": null, "agent_security_detail": null, "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null }, "sources": [ { "url": "https://www.wiz.io/solutions/ai-spm", "title": "Wiz: wiz.io/solutions/ai-spm", "accessed": "2026-11-11", "fields": [ "ai_spm", "ai_spm_detail", "guardrails", "guardrails_detail", "data_controls", "data_controls_detail", "integrations" ] }, { "url": "https://cloud.google.com/blog/products/identity-security/google-completes-acquisition-of-wiz", "title": "Wiz: cloud.google.com/blog/products/identity-security/google-", "accessed": "2026-11-11", "fields": [] }, { "url": "https://www.securityweek.com/wiz-joins-google-cloud-as-landmark-acquisition-closes/", "title": "SecurityWeek: Wiz joins Google Cloud as acquisition closes", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition" ] } ], "verifiedAt": "2026-11-11" }, { "id": "zenity", "name": "Zenity", "url": "https://zenity.io/", "summary": "Zenity secures and governs enterprise AI agents across SaaS platforms, custom agent builds and endpoints, from inventory to runtime blocking.", "hq": "IL", "tags": [ "guardrails", "agent-security", "ai-spm" ], "fields": { "agent_security": true, "agent_security_detail": "Governs every agent-to-MCP connection at the tool level and evaluates each agent action against policy.", "guardrails": true, "guardrails_detail": "AI detection and response blocks unsafe agent actions in real time or shuts the agent down.", "ai_spm": true, "ai_spm_detail": "Keeps a live inventory of agents across SaaS, custom and endpoint deployments and checks their configuration and permissions.", "integrations": "Microsoft Copilot Studio, Salesforce Agentforce, AWS Bedrock, Google Vertex AI, Okta, Microsoft Entra", "frameworks_covered": "OWASP, MITRE ATLAS", "funding_round_usd_m": 125, "funding": "$125M Series C led by Norwest, August 2026; $180M raised in total.", "red_teaming": null, "red_teaming_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://zenity.io/platform", "title": "Zenity platform", "accessed": "2026-11-11", "fields": [ "agent_security", "agent_security_detail", "guardrails", "guardrails_detail", "ai_spm", "ai_spm_detail", "integrations" ] }, { "url": "https://zenity.io/", "title": "Zenity: zenity.io", "accessed": "2026-11-11", "fields": [ "frameworks_covered" ] }, { "url": "https://www.securityweek.com/zenity-raises-125-million-in-series-c-funding/", "title": "SecurityWeek: Zenity raises $125M Series C", "accessed": "2026-11-11", "fields": [ "funding_round_usd_m", "funding" ] } ], "verifiedAt": "2026-11-11" }, { "id": "zscaler-ai-security", "name": "Zscaler AI Security", "url": "https://www.zscaler.com/", "summary": "Zscaler's AI security offering combines asset discovery, automated red teaming, runtime guardrails, and governance across enterprise AI workflows.", "tags": [ "guardrails", "red-teaming", "ai-spm" ], "fields": { "ownership": "Acquired SPLX, announced as completed on November 3, 2025.", "acquisition": "Bought an AI security company", "ai_spm": true, "ai_spm_detail": "Discovers models, workflows, code repositories, RAG systems, and MCP servers.", "red_teaming": true, "red_teaming_detail": "Automated testing with more than 5,000 attack simulations.", "guardrails": true, "guardrails_detail": "Runtime guardrails and prompt hardening protect data and block malicious interactions.", "attack_scenarios_min": 5000, "agent_security": null, "agent_security_detail": null, "model_security": null, "model_security_detail": null, "data_controls": null, "data_controls_detail": null }, "sources": [ { "url": "https://www.zscaler.com/press/zscaler-secures-enterprise-ai-lifecycle-acquisition-innovative-ai-security-pioneer-splx", "title": "Zscaler AI Security: zscaler.com/es/press/zscaler-secures-enterprise-ai-", "accessed": "2026-11-11", "fields": [ "ownership", "acquisition", "ai_spm", "ai_spm_detail", "red_teaming", "red_teaming_detail", "guardrails", "guardrails_detail", "attack_scenarios_min" ] } ], "verifiedAt": "2026-11-11" } ] }