AI Security Security Tools

Cyera is provides a robust collection of tools for data discovery, classification, and obfuscation. They've expanded the platform via acquisition and product into AI Security and NHI capabilities, providing AI abuse detections and NHI monitoring.

AI-powered endpoint security platform that gives teams control over everything running on their endpoints so they can adopt AI safely.

Pluto is a leading AI security solution that specializes in securing endpoints and agentic building solutions like Lovable and Base44

Bloom discovers and governs AI agents, extensions, IDE plugins, and MCP servers on endpoints with contextual risk assessments.

Backslash offers a unique approach to reachability across SCA and SAST, as well as a suite of vibe-coding security features such as MCP risk assessments and cursor rules.

Acquired by Cato Networks. Aim has built a flexible offering in the LLM space. They offer a browser plugin, copilot wrappers, can connect to third party network logs, create privacy policies, their own chat, anonymizers, and an API for proxying application level calls.

Zenity has a holistic security offering for AI security, especially for common workforce use cases like Claude, Microsoft 365, and ChatGPT. They are especially strong at tracking permissioning across a workforce.

Corridor provides a holistic approach to securing AI generated code by helping secure developer endpoints, bringing organizational security context to coding agents, and doing in pipeline security code review.

Lasso offers a combination of solutions to offer governance over AI solutions - from plugins to endpoint agents for monitoring and blocking.

Snyk was the first to really do DevSecOps - fast, actionable, developer focused CI/CD security scanning. They also were early to consolidate scanners into a single place - IaC, Code, SCA, and Container. There are many platforms with small improvements over them - better reachability, workflows, etc. - but they remain a strong player in the space for having scaled so meaningfully across enterprises.

Akto has created an open source flavored approach to next generation DAST and API security with features like looking at log data for API discovery, sensitive data flows, and customized scanning. A uniquely helpful feature is the ability to easily edit and tweak tests from the UI.

Acquired by Palo Alto Networks. Koi offers full inventories and workflows for managing packages, extensions, AI tools, containers and other components that users and developers pull from public marketplaces and registries that MDM and EDR tools rarely see. Koi scores risk per and enforces policy with an agentless approach so even exempt developer machines stay governed.

Harmonic currently has the standard suite of LLM protection visibility via browsers, but has a long term focus on detecting the flow of sensitive data - a vision that aligns well with the team's history in detecting sensitive data across the internet.

Intent-aware workspace security platform that uses on-device AI reasoning to read human, AI, and app activity and intervene before risky actions complete.

Governance capabilities for MCP servers, skills, and AI agents with threat detection, fine-grained permissions, and full observability.

Acquired by Tenable, Apex offers visibility, configuration protection, and runtime detection and response for LLMs, both for corporate and application use cases. Everything from DLP to Injection detection, to LLM quarantining.

Acquired by SentinelOne. Prompt Security offers comprehensive solutions for LLM security. They have both corporate IT visibility with their browser plugin, alongside application visibility with API, SDK, and reverse proxy options. You can also trace user sessions and detect/redact/block numerous types of data and attacks.

Unbound offers a browser plugin for DLP and AI usage discovery, and a proxy based approach for data sanitization and visibility.