Ultra Security

Ultra Security is a Michigan software company that builds security controls for autonomous AI agents. Its platform sits between an agent and the actions it takes, so every tool call, data read and prompt request passes through a layer where an organisation can see it and apply policy while the agent is running rather than after the fact. The company was founded in 2025 and came out of stealth in October 2026 with $10 million in seed funding.

What the platform does

Ultra describes four parts. Guardrails turn plain-language policies into enforcement on each tool call: blocking access to secrets and credentials, redacting personal and health data, rate-limiting and stopping data from moving between connectors, scoped to an organisation, a team or a single device. Governance sets which agents, connectors and tools each person or team may use. Observability logs and traces every agent-to-tool interaction, makes the record queryable and raises alerts from anomaly detection. Connectivity is one bridge between agents and connectors, set up once rather than per client.

The platform runs locally on the user's machine by default, keeping tool calls, payloads and audit trails there, with a hosted option available. Ultra describes it as vendor and model agnostic.

Who it serves

Security teams that need to control and audit what AI agents do across email, code and business systems, engineering teams connecting agents to tools, and non-technical teams that need agents connected without per-client setup. Its compliance claims are aimed at regulated buyers: it says it holds SOC 2 Type II, ISO 27001 and ISO 42001 certification, conforms to the AARM Extended specification, aligns with the NIST AI Risk Management Framework, and has completed a FedRAMP 20x Class B audit with a third-party assessor while it works towards FedRAMP authorisation.

Key facts

Founded: 2025 Headquarters: Birmingham, Michigan, United States Founder: Chase Lee, formerly founder and chief executive of Trustpage Funding: $10 million seed announced 21 October 2026, from Ludlow Ventures, Hidden Capital, Entrée Capital, Detroit Venture Partners, Firedrop and FDVC, with individual security executives Access: by request through its website