AI security vendors, compared
AI security vendors split by the job they do. Of 56 compared, 38 document runtime guardrails, 35 agent security, 34 AI-SPM and 29 red teaming. Thirteen have bought an AI security company, among them Palo Alto Networks (Protect AI), Check Point (Lakera) and Cisco (Robust Intelligence). Every cell links its source.
| A10 Networks TrojAI | Yes | Yes | Yes | — | — | — | Yes | Bought an AI security company | 2026-11-11 |
|---|---|---|---|---|---|---|---|---|---|
| Adversa AI | — | Yes | Yes | — | — | — | — | — | 2026-11-11 |
| Akamai Firewall for AI | Yes | — | — | — | — | Yes | — | — | 2026-11-11 |
| Alice (ActiveFence) | Yes | — | Yes | — | — | Yes | — | — | 2026-11-11 |
| Amazon Bedrock Guardrails | Yes | — | — | — | — | Yes | — | — | 2026-11-11 |
| Arthur | Yes | Yes | — | Yes | — | — | — | — | 2026-11-11 |
| Aurascape | Yes | Yes | Yes | Yes | — | Yes | — | — | 2026-11-11 |
| Cato Networks AI Security | Yes | — | — | Yes | — | — | — | Bought an AI security company | 2026-11-11 |
| Check Point AI Security | Yes | Yes | Yes | — | — | — | — | Bought an AI security company | 2026-11-11 |
| Checkmarx LLM Scanner | — | — | — | Yes | Yes | — | — | — | 2026-11-11 |
| Cisco AI Defense | Yes | — | Yes | Yes | Yes | Yes | — | Bought an AI security company | 2026-11-11 |
| Cloudflare AI Security for Apps | Yes | — | — | — | — | Yes | — | — | 2026-11-11 |
| Coralogix AI Guardrails | Yes | Yes | — | — | — | Yes | — | Bought an AI security company | 2026-11-11 |
| Credo AI | — | Yes | — | Yes | — | — | — | — | 2026-11-11 |
| CrowdStrike Falcon AI security | — | Yes | — | Yes | Yes | — | — | Bought an AI security company | 2026-11-11 |
| Cyera AI Guardian | — | Yes | Yes | Yes | — | Yes | — | — | 2026-11-11 |
| DeepKeep | Yes | Yes | Yes | — | Yes | — | — | — | 2026-11-11 |
| Dreadnode | — | Yes | Yes | — | — | — | Yes | Deal pending | 2026-11-11 |
| Enkrypt AI | Yes | Yes | Yes | — | — | — | — | — | 2026-11-11 |
| F5 AI Guardrails | Yes | Yes | Yes | — | — | — | Yes | Bought an AI security company | 2026-11-11 |
| Fiddler AI | Yes | — | — | Yes | — | Yes | Yes | Deal pending | 2026-11-11 |
| Fortinet FortiAIGate | Yes | Yes | — | — | — | Yes | Yes | Bought an AI security company | 2026-11-11 |
| Giskard | — | Yes | Yes | — | — | Yes | — | — | 2026-11-11 |
| Google Cloud Model Armor | Yes | — | — | — | — | Yes | — | — | 2026-11-11 |
| Gray Swan | Yes | Yes | Yes | — | — | — | — | — | 2026-11-11 |
| Harmonic Security | — | Yes | — | Yes | — | — | — | — | 2026-11-11 |
| HiddenLayer | Yes | Yes | Yes | — | Yes | — | — | — | 2026-11-11 |
| Holistic AI | — | Yes | Yes | Yes | — | — | — | — | 2026-11-11 |
| IBM Guardium Exposure Manager | — | — | — | Yes | — | Yes | — | — | 2026-11-11 |
| Knostic | — | Yes | — | Yes | Yes | — | — | — | 2026-11-11 |
| Lasso Security | Yes | — | Yes | Yes | — | — | — | — | 2026-11-11 |
| Microsoft AI security | Yes | Yes | — | Yes | — | Yes | — | — | 2026-11-11 |
| Mindgard | — | Yes | Yes | Yes | — | — | — | — | 2026-11-11 |
| Netskope | Yes | Yes | Yes | — | — | — | Yes | — | 2026-11-11 |
| NeuralTrust | Yes | — | — | Yes | — | — | Yes | — | 2026-11-11 |
| Noma Security | Yes | Yes | Yes | — | Yes | — | — | — | 2026-11-11 |
| NVIDIA NeMo Guardrails | Yes | Yes | — | — | — | — | Yes | — | 2026-11-11 |
| Oligo Security | — | Yes | — | Yes | Yes | — | — | — | 2026-11-11 |
| Operant AI | Yes | Yes | — | Yes | — | — | — | — | 2026-11-11 |
| Orca Security | — | — | — | Yes | — | Yes | — | — | 2026-11-11 |
| Palo Alto Networks Prisma AIRS | Yes | Yes | Yes | Yes | Yes | — | — | Bought an AI security company | 2026-11-11 |
| Pillar Security | Yes | — | Yes | Yes | — | — | Yes | — | 2026-11-11 |
| PromptArmor | — | — | — | Yes | Yes | — | — | — | 2026-11-11 |
| Promptfoo (OpenAI) | — | — | Yes | — | — | — | Yes | Owned by a larger company | 2026-11-11 |
| Proofpoint AI Security | Yes | Yes | — | Yes | — | Yes | — | Bought an AI security company | 2026-11-11 |
| Qualys TotalAI | Yes | — | Yes | Yes | — | — | — | — | 2026-11-11 |
| SentinelOne Prompt Security | Yes | Yes | Yes | Yes | — | — | — | Bought an AI security company | 2026-11-11 |
| Snyk Agent Scan | — | Yes | — | — | Yes | — | — | Bought an AI security company | 2026-11-11 |
| Straiker | Yes | Yes | Yes | Yes | — | — | — | — | 2026-11-11 |
| Tenable One AI Exposure | Yes | — | — | Yes | — | — | — | — | 2026-11-11 |
| Trend Micro TrendAI Vision One | Yes | — | Yes | Yes | — | — | Yes | — | 2026-11-11 |
| Upwind | — | Yes | Yes | Yes | — | Yes | — | — | 2026-11-11 |
| WitnessAI | Yes | Yes | Yes | Yes | — | — | — | — | 2026-11-11 |
| Wiz | Yes | — | — | Yes | — | Yes | — | Owned by a larger company | 2026-11-11 |
| Zenity | Yes | Yes | — | Yes | — | — | — | — | 2026-11-11 |
| Zscaler AI Security | Yes | — | Yes | Yes | — | — | — | Bought an AI security company | 2026-11-11 |
Yes means the vendor documents the capability on its own pages. A dash means no source says so, not that the product lacks it. Click a header to sort, tick up to four rows to compare, and open a vendor for every field with its source.
Pick by the job you need done
- Runtime guardrails 38
- Inspect prompts and responses and block injection, jailbreaks and leaks before they land.
- Agent security 35
- Govern agents, MCP servers and tool calls: who an agent is, what it may touch, what it did.
- AI red teaming 29
- Attack your own models and agents before someone else does, with scored findings you can retest.
- AI-SPM and AI-BOM 34
- Find every model, agent and AI service in the estate, then check its posture and build the AI-BOM.
- Data security for AI 18
- Keep PII, secrets and training data out of prompts, responses and agent workflows.
- Who bought whom 17
- Many independent AI security startups of 2024 and 2025 now sit inside a platform vendor. The ledger names the buyer, the date and the page that says so.
Recent AI security deals
Full ledger| Target | Buyer | Status | Closed or announced | Source |
|---|---|---|---|---|
| Dreadnode | CrowdStrike | Pending | 3 Nov 2026 | CrowdStrike press release |
| Fiddler AI | CrowdStrike | Pending | 3 Nov 2026 | CrowdStrike investor release |
| Virtue AI | Fortinet | Completed | 17 Aug 2026 | Help Net Security |
| TrojAI | A10 Networks | Completed | 15 Jun 2026 | A10 Networks Q2 2026 10-Q |
| Wiz | Completed | 11 Mar 2026 | SecurityWeek | |
| Promptfoo | OpenAI | Completed | 9 Mar 2026 | Promptfoo about page |
What buyers ask before choosing an AI security vendor
What do AI security vendors actually sell?
Five jobs: runtime guardrails that filter prompts and responses, agent security for tools and MCP servers, red teaming that attacks your models before release, AI-SPM and AI-BOM for discovery and posture, and data protection for prompts and training data. Aurascape, Palo Alto Networks Prisma AIRS, SentinelOne Prompt Security, Straiker and WitnessAI document all four of the first four jobs. Use the filters above to find the vendors that cover the combination you need.
Which AI security startups have been acquired?
Palo Alto Networks completed its Protect AI deal on 22 July 2025. Check Point closed Lakera on 22 October 2025, and Cisco completed Robust Intelligence on 24 September 2024. SentinelOne closed Prompt Security on 5 September 2025 and CrowdStrike closed Pangea on 26 September 2025. F5 took CalypsoAI, Zscaler SPLX, Cato Aim Security, and Fortinet bought Virtue AI in August 2026. The full ledger lists 17 deals with sources. Two more are pending: CrowdStrike has agreed to buy Dreadnode and Fiddler AI.
Can I run AI guardrails in my own environment?
11 vendors document self-hosted, private-cloud or air-gapped deployment: A10 Networks TrojAI, Dreadnode, F5 AI Guardrails, Fiddler AI, Fortinet FortiAIGate, Netskope, NeuralTrust, NVIDIA NeMo Guardrails, Pillar Security, Promptfoo (OpenAI) and Trend Micro TrendAI Vision One. NVIDIA NeMo Guardrails is an open-source Python package you run yourself.
How fast are AI guardrails?
3 vendors publish a latency figure, all vendor claims rather than benchmarks: Check Point AI Security under 50 ms, Fiddler AI under 80 ms and NeuralTrust under 100 ms. Ask every vendor for p95 latency on your own prompt sizes before you sign.
Who is the best AI security vendor?
It depends on the job. For discovery and posture across a cloud estate, start with Wiz, Orca and Qualys TotalAI. For agent and MCP control, see the agent security list. For attack testing before launch, see red teaming. A platform vendor you already run, such as Prisma AIRS, Cisco AI Defense or Zscaler, wins on procurement; a specialist wins on depth.
How the table is built
Full methodologyVendor pages first. Every cell comes from the vendor's own product page, docs or press release, or a filing. The small number beside a value opens that page; hover it for the date we read it.
Dated, re-checked. Each row shows when we last verified it, newest 11 Nov 2026. Seen a changed product or a new deal? Send the link to hello@aisecurityvendors.com and the row updates.