AI security companies
We list 92 companies active in AI and LLM security, and 38 of them have it as their main focus. 1 is public, 8 are owned by another company and 83 are private. Most are based in the United States (62). The oldest, MarkAny, was founded in 1999. By revenue from annual reports, the largest company here is Palo Alto Networks ($11.5bn in FY2026).
By countryUnited States 62Israel 8United Kingdom 8
Companies focused on AI and LLM security
38 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Acium Acium provides an AI security and governance platform that makes AI usage visible, secure, and governed across users, browsers, agents, and devices. | Miami, United States | 2024 | Private | ||
Agentic Fabriq Agentic Fabriq sells a control layer for AI agents. | San Francisco, United States | 2025 | Private | ||
AIUC Sets standards, audits and insures frontier AI systems and agents for security, safety and reliability. | San Francisco, United States | Private | |||
altaniche altaniche is a security practice that helps organisations adopt AI safely. | Melbourne, Australia | 2024 | Private | ||
Arcjet Arcjet provides runtime security for AI agents, enforcing policies at the action boundary. | San Francisco, United States | 2023 | Private | ||
Capsule Security Capsule Security provides a runtime security platform that monitors and intervenes in AI agent behavior. | Tel Aviv, Israel | Private | |||
Enoki Labs Enoki Labs makes Enoki, a platform that attacks AI agents to find security and safety weaknesses. | Ghent, Belgium | 2026 | Private | ||
Fendr Fendr provides AI usage controls for businesses. | London, United Kingdom | 2025 | Private | ||
Ferentin Ferentin provides runtime governance for AI agents. | San Ramon, United States | 2025 | Private | ||
Harmonic Security Harmonic Security provides software that discovers, classifies and controls how employees use AI tools at work. | San Francisco, United States | 2023 | Private | ||
HiddenLayer HiddenLayer provides a security platform for AI applications, protecting against adversarial threats. | Austin, United States | 2022 | Private | ||
Lakera Lakera provides security software that protects enterprise AI applications from prompt attacks and data leakage. | Zurich, Switzerland | 2021 | Part of Check Point | ||
Lasso Security Lasso Security provides a platform to secure AI agents and applications at enterprise scale. | Tel Aviv, Israel | 2023 | Private | ||
Noma Security Noma Security provides a platform to discover, govern, test, and protect AI applications and agents. | New York, United States | 2023 | Private | ||
Opaque Systems Provides a trust layer that lets organisations run AI on sensitive data with hardware-enforced governance and verifiable proof. | San Francisco, United States | Owned by Anthropic | |||
OpenOrigins OpenOrigins provides trust infrastructure for the AI internet. | San Francisco, United States | 2021 | Private | ||
Outerlimit Outerlimit provides a security and authorization layer for agentic AI systems. | London, United Kingdom | Private | |||
Pillar Security Pillar Security provides a platform to discover, test, secure and govern AI agents across organisations. | Tel Aviv, Israel | 2023 | Private | ||
Prompt Security Prompt Security provides an AI security platform that protects enterprise AI usage, applications, and agents. | Tel Aviv, Israel | 2023 | Part of SentinelOne | ||
ranwhat Open-source command-line tool that reads AI coding agent transcripts to find credential leaks and irreversible actions. | Zagreb, Croatia | 2026 | Private | ||
Reality Defender Reality Defender provides deepfake detection to stop AI-generated media from causing harm. | New York City, United States | 2021 | Private | ||
Reco Reco provides an AI agent security platform that maps, governs, and protects AI agents across enterprise applications. | Altamonte Springs, United States | Private | |||
Sealgate SealGate provides a security gateway that governs how AI agents access company data. | London, United Kingdom | 2025 | Private | ||
Tragentics Tragentics is a security and operations layer for AI agents that customers already run on their own infrastructure. | United States | 2026 | Private | ||
Trent AI Provides an AI security engineer that finds and fixes software risks using coding agents. | London, United Kingdom | 2025 | Private | ||
VeriSwarm VeriSwarm provides a trust layer for AI agents. | Phoenix, United States | 2026 | Private | ||
Virtue AI Virtue AI provides an enterprise AI safety platform for securing AI agents and applications. | San Francisco, United States | Part of Fortinet | |||
Zenity Zenity provides security and governance for AI agents and low-code applications. | Tel Aviv, Israel | 2021 | Private | ||
Akto Akto provides a platform to secure AI agents, MCPs, and LLMs for enterprises. | San Francisco, United States | Private | |||
BlueRock Security BlueRock provides observability and guardrails for AI agents in production. | San Mateo, United States | 2017 | Private | ||
Cantina Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues. | Miami, United States | Private | |||
GetReal Security GetReal Security provides deepfake detection and identity verification software for enterprises. | Austin, United States | 2022 | Private | ||
Mountain Theory Mountain Theory provides an execution-layer security system that checks and controls autonomous AI actions before they run. | Denver, United States | 2024 | Private | ||
Quint Security Quint monitors AI agents at the operating system level and compares their actions against what they declared. | United States | 2026 | Private | ||
securagen.ai Builds cryptographic validation, information intelligence, regulatory assurance and sovereign AI products for defence and government. | Athens, Greece | 2025 | Private | ||
Straiker Straiker provides security teams with tools to discover, test, and defend AI agents in enterprises. | Mountain View, United States | 2025 | Private | ||
TrustGate AI Self-hosted gateway that inspects and governs AI agent traffic inside a company's own network. | United States | 2026 | Private | ||
Vireo Sentinel Vireo Sentinel provides browser-based AI governance to monitor and protect sensitive data. | Perth, Australia | 2025 | Private |
Also active in AI and LLM security
54 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
Bishop Fox Tempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform. | Tempe, United States | 2005 | 201-500 staff | Private | |
Tines Tines provides a secure environment where teams can build AI agents, applications and automations. | Dublin, Ireland | 2018 | 200 staff | Private | |
Lares Consulting Denver-based offensive security boutique with a community-first red team culture. Home of PTES co-authors and the Continuous Red Team retainer. | Denver, United States | 2008 | 51-200 staff | Owned by Damovo | |
Redbot Security Denver-based boutique pen testing firm with senior-only testers. Personalised engagements across penetration testing, red teaming, and vulnerability management. | Denver, United States | 2016 | 11-50 staff | Private | |
Stingrai Toronto-based PTaaS provider delivering continuous penetration testing for Canadian fintech, SaaS, and OSFI-regulated organisations. | Toronto, Canada | 2019 | 11-50 staff | Private | |
AppOmni AppOmni provides a platform to secure SaaS applications and AI environments for enterprises. | San Mateo, United States | 2018 | Private | ||
Atredis Partners Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks. | United States | Private | |||
Auxilium Cyber Security Ettlingen consultancy pentesting vehicles, ADAS, gateways, infotainment and on-board chargers, plus R155 CSMS consulting. | Ettlingen, Germany | 2015 | Private | ||
BigID BigID provides a data intelligence platform for discovering, classifying, and governing enterprise data and AI. | New York City, Israel | 2016 | Private | ||
Breach Secure Now Provides cybersecurity awareness, AI readiness, and compliance training to employees through managed service providers. | Morristown, United States | Private | |||
CAI Technology CAI Technology is a Romanian company that builds specialised AI tools for regulated sectors. | Bucharest, Romania | 2024 | Private | ||
Cequence Security Cequence Security protects applications, APIs, and AI agents from attacks and abuse. | Santa Clara, United States | 2014 | Private | ||
Copper Horse UK security consultancy doing threat modelling, training and research for connected vehicles, IoT and mobile products. | Monmouth, United Kingdom | 2011 | Private | ||
Cyberhaven Cyberhaven provides a data security platform that traces data lineage to protect information across human and AI workflows. | Austin, United States | Private | |||
CyberSentien CyberSentien provides a compliance assurance engine that assesses organisations against multiple security and AI governance frameworks. | Australia | 2025 | Private | ||
Cyera Cyera provides a data security platform that discovers and protects sensitive data across cloud environments. | New York, United States | 2021 | Private | ||
Cymphony Cymphony provides an AI-native workforce security platform that maps identities, data, and permissions to reduce risk. | Tel Aviv, Israel | Private | |||
Darwinium Darwinium provides edge-based intent intelligence to prevent digital fraud and abuse across customer journeys. | San Francisco, United States | Private | |||
DataBahn DataBahn provides an agentic data control plane for managing and optimizing enterprise telemetry. | Dallas, United States | 2023 | Private | ||
Diopter AI Diopter AI sells software that watches live video and voice calls for signs of AI-driven social engineering. | Oakbrook Terrace, United States | 2026 | Private | ||
Drata Drata provides a platform that automates security compliance, risk management and trust assurance for companies. | San Francisco, United States | 2020 | Private | ||
Edge Delta Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work. | Seattle, United States | Private | |||
Endor Labs Endor Labs provides an agentic application security platform for AI-generated and open source code. | Palo Alto, United States | 2021 | Private | ||
Harness Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization. | San Francisco, United States | 2017 | Private | ||
Immersive Labs Immersive Labs sells a platform called Immersive One that helps organisations show how ready they are for cyber threats. | Bristol, United Kingdom | 2017 | Private | ||
KnowBe4 KnowBe4 provides a platform for security awareness training and AI agent security to reduce human risk. | Clearwater, United States | Owned by Vista Equity Partners | |||
Legit Security Legit Security provides application security for AI-generated code and software development. | Boston, United States | Private | |||
Mend.io Mend.io provides application security and AI security software for code and AI systems. | Burlington, United States | 2011 | Private | ||
Netarx Netarx provides real-time deepfake detection across video, voice, email and messaging for businesses. | Farmington Hills, United States | Private | |||
Obsidian Security Obsidian Security provides security for third-party applications and AI agents. | Palo Alto, United States | Private | |||
OmniTrust Provides a platform for managing cryptographic trust across devices, systems and AI. | Ashburn, United States | 2010 | Private | ||
Optro Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products. | United States | Private | |||
Paravision Paravision builds identity AI software. | United States | Private | |||
Pindrop Pindrop provides deepfake detection and identity verification for voice and video interactions. | Atlanta, United States | 2011 | Private | ||
Private.Me Private.Me provides identity infrastructure for AI agents and machine-to-machine systems. | Los Angeles, United States | 2014 | Private | ||
Salt Security Salt Security provides a platform to discover and secure AI agents, MCP servers, and APIs. | Palo Alto, United States | 2018 | Private | ||
Saviynt Saviynt provides identity governance and security for human and non-human identities across applications and data. | El Segundo, United States | 2010 | Private | ||
Securiti Securiti provides a platform for data security, privacy, governance and compliance across hybrid multicloud environments. | San Jose, United States | 2018 | Part of Veeam | ||
Sentra Sentra provides data security solutions to discover and protect sensitive data from AI applications. | New York, United States | Private | |||
Sevii Sevii provides an autonomous defense and remediation platform that stops cyber adversaries without human intervention. | Mooresville, United States | Private | |||
Siemba Siemba provides autonomous and expert-led penetration testing for security teams. | Alpharetta, United States | Private | |||
Soken Soken is a Web3 services firm based in London. | London, United Kingdom | 2023 | Private | ||
SonarSource Sonar provides a platform that verifies code quality and security for developers. | Geneva, Switzerland | 2008 | Private | ||
Sysdig Sysdig provides cloud security built on the open-source Falco project, with an emphasis on runtime detection inside running workloads. | United States | 2013 | Private | ||
Upwind Security Upwind provides a runtime-powered cloud security platform that uses live workload behaviour to prioritise posture findings. | Israel | Private | |||
Wiz Wiz provides a cloud and AI security platform that connects code, cloud, and runtime for risk reduction and threat response. | New York City, United States | 2020 | Part of Google | ||
42Crunch 42Crunch provides security governance for MCP servers and APIs used by AI agents. | London, United Kingdom | Private | |||
Ansvar Systems AB Ansvar Systems AB provides evidence and validation infrastructure for AI agents in regulated work. | Fränsta, Sweden | 2025 | Private | ||
Fortanix Provides a data and AI security platform built on confidential computing to protect data in use. | Santa Clara, United States | Private | |||
MarkAny MarkAny develops document security, forgery prevention, content protection, and AI video surveillance software. | Seoul, South Korea | 1999 | Private | ||
OneTrust Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools. | Atlanta, United States | Private | |||
TigerByte Cyber TigerByte Cyber provides cyber hardening for AI and edge devices in mission-critical environments. | Hanover, United States | Private | |||
Wallarm Wallarm provides an AI security and API security platform for enterprises running AI on AWS. | Austin, United States | Private |
Recent deals in AI and LLM security
All AI and LLM security dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.