Skip to content
TrustList
PS
IT Product Company

Pillar Security

New· 4

Security platform that discovers, red teams, protects at runtime and governs AI agents, models, MCP servers and skills across an organisation. Founded in 2023; Vanta agreed to acquire it in November 2026.

TrustList summary

Agents that read customer records, call tools and act for a company create risks that a chatbot filter never had to consider, and Pillar Security was started in 2023 to deal with them. The platform covers the lifecycle of AI applications and agents, from finding what exists, through testing it, to blocking unauthorised actions while it runs. On 9 November 2026 its founders wrote that Vanta had signed a definitive agreement to acquire it.

A map of agents, models and MCP servers

Discovery comes first. Using agentless integrations, Pillar catalogues agents, models, prompts, frameworks, tools, MCP servers, skills and coding agents, including shadow systems deployed without approval. Posture checks then trace dependencies across models and agent harnesses and scan configurations, permissions and identities for the exposures attackers reach first. Approved models, frameworks and data sovereignty standards can be defined so that violations are flagged.

Attacks run against the whole system

For testing, the product runs multi turn adversarial attacks on complete AI systems, covering tool orchestration, permission escalation and agentic workflows. Findings are proved with attack transcripts, recordings and reproduction steps, and validated results feed adaptive guardrails. At runtime those guardrails detect malicious intent, monitor tool calls and decisions, and mask or block personal data, credentials and secrets before they reach a model.

Research and the SAIL framework

The company's research team has reported critical flaws, including a sandbox escape in n8n and an issue in Google's Gemini CLI, both described by the founders as rated CVSS 10. Pillar also published SAIL, a framework that maps 91 AI risks across seven lifecycle phases and which the founders say has passed 50,000 downloads. The platform runs in the cloud, self hosted or in a hybrid arrangement, and the site lists compliance reporting mapped to common standards.

Key facts

Founded: 2023 Founders: Dor Sarig and Ziv Karliner Recognition stated by the company: 2026 Gartner Cool Vendor in AI Software Security; CRN 10 Hottest AI Security Startups of 2026 Ownership event stated by the company: definitive agreement for Vanta to acquire Pillar Security, announced 9 November 2026

Summary written by TrustList from the business's own published information, Nov 2026.

Categories & features

Trust Score

4/ 100
Trust Score: New

An earned signal from verification, reviews, awards, transparency and engagement - the vendor can't buy it.

Verification
0/100 · 20%
Reviews
0/100 · 30%
Awards
0/100 · 15%
Transparency
18/100 · 20%
Engagement
0/100 · 15%
Joining soon
Recommendations
Coming soon
Complaints
Coming soon

Updated 11/10/2026

Request a demo or quote from Pillar Security

Protected by reCAPTCHA - Google Privacy Policy and Terms apply.

By sending, you agree we may share your request and contact details with the provider once you confirm your email.

Reviews

Write the first review of Pillar Security

Used it? Your experience helps other buyers decide.

Write a review

Questions & answers

No questions yet. Be the first to ask about Pillar Security.

Pillar Security alternatives

Similar listings buyers compare against this one.

Product security platform that analyzes the compiled firmware inside connected devices to inventory components, prioritize exploitable flaws and produce compliance evidence. Serves device makers; based in Columbus, Ohio.

Runtime security platform for enterprise AI agents and applications that deploys as a sidecar to show every agent action, set action-level controls and keep agent data inside the customer's own environment; also covers application security.

Open source security infrastructure for developers and AI agents: secrets management, certificates, privileged access and Agent Vault, with a self-hosted MIT-licensed core and a managed cloud.

London supply chain data company that uses satellite data and geospatial AI to map the farms, plantations and mines behind a product, producing EUDR due diligence statements without supplier questionnaires.

Asymptote Labs is a New York company that gives security and engineering teams runtime visibility and control over AI agents, built on Beacon, its MIT-licensed open-source agent telemetry layer.

Blockchain monitoring and data platform that helps crypto businesses track on-chain activity and stay compliant

Opsin sells AI agent governance and security: it finds agents across Copilot, ChatGPT, Gemini and Claude enterprise platforms, scores their risk and can quarantine them.

Cygrid is a Berlin identity security company whose platform maps human, machine and AI agent identities, decides what each may do, and blocks or rewrites risky actions before they execute.