Product security platform that analyzes the compiled firmware inside connected devices to inventory components, prioritize exploitable flaws and produce compliance evidence. Serves device makers; based in Columbus, Ohio.
Pillar Security
New· 4Security platform that discovers, red teams, protects at runtime and governs AI agents, models, MCP servers and skills across an organisation. Founded in 2023; Vanta agreed to acquire it in November 2026.
- Cybersecurity
- Artificial Intelligence - AI
- Application Security
- Regulatory Compliance
TrustList summary
Agents that read customer records, call tools and act for a company create risks that a chatbot filter never had to consider, and Pillar Security was started in 2023 to deal with them. The platform covers the lifecycle of AI applications and agents, from finding what exists, through testing it, to blocking unauthorised actions while it runs. On 9 November 2026 its founders wrote that Vanta had signed a definitive agreement to acquire it.
A map of agents, models and MCP servers
Discovery comes first. Using agentless integrations, Pillar catalogues agents, models, prompts, frameworks, tools, MCP servers, skills and coding agents, including shadow systems deployed without approval. Posture checks then trace dependencies across models and agent harnesses and scan configurations, permissions and identities for the exposures attackers reach first. Approved models, frameworks and data sovereignty standards can be defined so that violations are flagged.
Attacks run against the whole system
For testing, the product runs multi turn adversarial attacks on complete AI systems, covering tool orchestration, permission escalation and agentic workflows. Findings are proved with attack transcripts, recordings and reproduction steps, and validated results feed adaptive guardrails. At runtime those guardrails detect malicious intent, monitor tool calls and decisions, and mask or block personal data, credentials and secrets before they reach a model.
Research and the SAIL framework
The company's research team has reported critical flaws, including a sandbox escape in n8n and an issue in Google's Gemini CLI, both described by the founders as rated CVSS 10. Pillar also published SAIL, a framework that maps 91 AI risks across seven lifecycle phases and which the founders say has passed 50,000 downloads. The platform runs in the cloud, self hosted or in a hybrid arrangement, and the site lists compliance reporting mapped to common standards.
Key facts
Founded: 2023 Founders: Dor Sarig and Ziv Karliner Recognition stated by the company: 2026 Gartner Cool Vendor in AI Software Security; CRN 10 Hottest AI Security Startups of 2026 Ownership event stated by the company: definitive agreement for Vanta to acquire Pillar Security, announced 9 November 2026
Summary written by TrustList from the business's own published information, Nov 2026.
Categories & features
- Cybersecurity
- Artificial Intelligence - AI
- Application Security
- Regulatory Compliance
Trust Score
An earned signal from verification, reviews, awards, transparency and engagement - the vendor can't buy it.
Updated 11/10/2026
Request a demo or quote from Pillar Security
Reviews
Write the first review of Pillar Security
Used it? Your experience helps other buyers decide.
Write a reviewQuestions & answers
No questions yet. Be the first to ask about Pillar Security.
Pillar Security alternatives
Similar listings buyers compare against this one.
Runtime security platform for enterprise AI agents and applications that deploys as a sidecar to show every agent action, set action-level controls and keep agent data inside the customer's own environment; also covers application security.
Open source security infrastructure for developers and AI agents: secrets management, certificates, privileged access and Agent Vault, with a self-hosted MIT-licensed core and a managed cloud.
London supply chain data company that uses satellite data and geospatial AI to map the farms, plantations and mines behind a product, producing EUDR due diligence statements without supplier questionnaires.
Asymptote Labs is a New York company that gives security and engineering teams runtime visibility and control over AI agents, built on Beacon, its MIT-licensed open-source agent telemetry layer.

Blockchain monitoring and data platform that helps crypto businesses track on-chain activity and stay compliant
Opsin sells AI agent governance and security: it finds agents across Copilot, ChatGPT, Gemini and Claude enterprise platforms, scores their risk and can quarantine them.
Cygrid is a Berlin identity security company whose platform maps human, machine and AI agent identities, decides what each may do, and blocks or rewrites risky actions before they execute.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More CybersecurityBack to the ranked category
- Write a reviewHelp other buyers decide
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- ArticlesGuides, comparisons and research from the editorial desk and the community.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.
