Lasso Security
Taking control of AI across a large enterprise platform requires a breadth of knowledge and the tools to control it. Lasso Security begins with a comprehensive census of AI implementations driven by automated tools that can find the various LLMs through techniques such as scanning source code repositories and continuous integration pipelines. This inventory becomes the foundation for red teaming and runtime enforcement.
Pricing: Custom pricing for each deployment.
Standout feature: Agentic tools aimed at multi-step workflows.
Best suited for: Teams securing relatively open environments that encourage experimentation.
LogicGate
CISOs in need of a no-code approach to governance, risk, and compliance can turn to the Risk Cloud from LogicGate. The tool fills a graph database with information and an assessment of all the services in the enterprise. One aspect tracks potential problems exacerbated by LLMs. Its tool reaches out through prebuilt connections to create what the company calls a “Risk Cloud Quantify,” a value that estimates the potential danger using a mixture of data collection and Monte Carlo simulations. LogicGate also tackles more general problems of management such as evaluating business tradeoffs with its Value Realization Tool. Together, this gives leadership the centralized reporting system for making data-informed decisions.
Pricing: Pricing available after a demonstration.
Standout feature: Deep integration with governance models for traditional stacks.
Best suited for: Full-stack implementations that need governance control over AI and traditional code.
Mindgard
The AI attack surface is broad, varied, and largely unknown. Mindgard’s platform is designed to be an “automated red team,” a set of programs and AIs that constantly poke and try to disrupt the target. Through a constant cycle of discovery, recon, attacking, and defense re-evaluation, the system searches for risks and proposes guardrail improvements to eliminate them. Designed to work with the major LLMs and agents, the system can be deployed quickly to deliver a fast security assessment and — often — a set of new holes to plug.
Pricing: Sandboxed free tier and interactive pricing for larger workflows.
Standout feature: Automated red-teaming simulator deploys hundreds of potential threats for testing.
Best suited for: Security researchers maintaining a high tempo of vigilance.
OneTrust
Managing personal information and other legal restrictions are increasingly important for anyone developing an AI solution. Once you start mixing private data into the training corpus, the DevOps team needs a plan. OneTrust offers what the company calls “Continuous Governance,” which largely means a platform that mixes cataloging, monitoring, and filtering for an entire enterprise stack. AI is just part of a larger system that also manages databases and other compliance challenges. The goal is to offer the right legal filters so that AI developers can get back to wrestling with prompts and context windows.
Pricing: Pricing available by request.
Standout feature: Global privacy compliance database aimed at tracking worldwide compliance issues.
Best suited for: Large, regulated multinational companies.
Prompt Security
When the right solution is to put one gatekeeper for access to an LLM, Prompt Security offers a proxy gateway that will filter the data flowing in and out, watching for any kind of malfeasance. The approach is said to be “LLM agnostic,” which means that it focuses on scrutinizing the input and output, not the internal state of the agents. Prompt Security promises deep content inspection of these data flows, something essential for detecting leaks of PII or other protected information. This architecture also makes it easier to integrate the tool with a variety of AI-driven applications, both internal and external.
Pricing: Open-source tools for developers; full support for deployment available from the sales team.
Standout feature: AI Security Academy for building a depth of knowledge.
Best suited for: Teams able to leverage the power of open source.
Protect AI
Sometimes dangers lurk deep inside a stack, often in hidden locations. The collection of tools from Protect AI examines the whole pipeline for flaws, weaknesses, or hidden problems. The most outward-facing tool, Guardian, is a collection of scanners that use a configurable set of rules to dig deep into the data flows as part of your CI/CD pipeline. Its partner, Recon, offers an automated red team with a predefined collection of attacks to be tested immediately. A third part, Layer, integrates AI security with general cybersecurity tools to build a comprehensive defense. Finally, two open-source project — LLM Security and ModelScan — offer localized, model-agnostic answers.
Pricing: Custom pricing based on the number of models, pipelines, and agents
Standout feature: End-to-end integration for protecting the entire data pipeline.
Best suited for: Teams defending complex pipelines and workflows.
Securiti.ai
One of the top goals for anyone working with AI is to make sure that the same rules of sharing data from, say, a database also apply to all the LLMs running on the same platforms. Security.ai calls this process data security posture management (DSPM). Its centralized platform searches out, identifies, and tracks all the agents running inside the enterprise and then controls their behavior with tools such as Context-Sensitive Firewalls, Data Minimization, and Data Flow Governance. Several dozen tools work together in a constellation that harmonizes governance with privacy awareness and data management.
Pricing: Custom pricing based on volume.
Standout feature: Data command Center for linking all security issues.
Best suited for: Enterprises with complex workflows with custom data governance issues.
