XBOW

Security and governance for AI agents and copilots.

Zenity is a security platform for AI agents, copilots, and low-code/no-code apps built across enterprise platforms. It discovers agents in use, applies governance and security guardrails, and continuously monitors for risks and threats — giving security teams observability and runtime protection over autonomous and business-built applications.

AI security platform: model scanning, runtime defense, and automated red-teaming.

HiddenLayer's AISec Platform unifies AI supply-chain security, runtime detection and response, posture management, and automated red-teaming for generative, agentic, and predictive AI. Its Model Scanner inspects model files for malware and integrity issues, while AI Detection & Response monitors prompts and responses with deterministic classifiers.

Real-time guardrails against prompt injection and jailbreaks for AI apps.

Lakera Guard sits between users and LLMs as a low-latency security layer, detecting and blocking direct and indirect prompt injection, jailbreaks, and system-prompt extraction across 100+ languages. Its models are trained on adversarial data from Gandalf, Lakera's prompt-injection game. Acquired by Check Point in 2025.

End-to-end GenAI security: shadow-AI discovery, red-teaming, and runtime guardrails.

Lasso Security protects every LLM interaction across cloud and on-prem deployments, combining shadow-AI discovery, real-time threat detection, policy enforcement, and red-teaming with thousands of attack types. It deploys via gateway, API, or SDK to secure both internal LLM apps and employee use of third-party chatbots.

API-based security guardrails for AI apps: prompt injection, PII redaction, and access control.

Pangea provides composable, API-first security services for AI applications. AI Guard and Prompt Guard defend against prompt injection, sensitive-data disclosure, and malicious content, alongside AI access control and visibility products. Pay-as-you-go with a free monthly balance, integrable via LiteLLM and Portkey.

Runtime security for enterprise GenAI: shadow-AI visibility, data-leak and prompt-injection defense.

Prompt Security secures both employee use of GenAI tools and homegrown LLM applications, giving organizations visibility into shadow AI, blocking sensitive-data leakage, and preventing prompt injection in real time. Acquired by SentinelOne in 2025 and integrated into its Singularity platform.

End-to-end security for ML models, AI apps, and the AI supply chain.

Protect AI secures the AI/ML lifecycle from model selection through deployment and runtime: model scanning for serialization attacks, AI red teaming, posture management, and runtime protection. It also stewards open-source tools like ModelScan. Acquired by Palo Alto Networks in 2025 and integrated into the Prisma AIRS platform.

Developer security platform with DeepCode AI for SAST, SCA, and AI-generated fixes.

Snyk finds and fixes vulnerabilities in code, open-source dependencies, containers, and IaC. Its Snyk Code SAST engine, DeepCode AI, combines symbolic and machine-learning analysis with inter-file data-flow tracing to detect issues and auto-generate fixes. Integrates into IDEs, the CLI, and CI.