CalypsoAI vs Noma Security

CalypsoAI was an AI security company founded in the US in 2018 by Neil Serebryany, its first CEO; it describes itself as founded in Silicon Valley, and its early press releases carry Washington datelines. It began with software for testing, validating and monitoring AI and machine learning models for national security, finance and other regulated customers, and moved to securing generative AI with CalypsoAI Moderator in 2023. Donnchadh Casey became CEO in August 2024. In October 2024 CalypsoAI named Dublin its global co-headquarters, alongside a US headquarters in New York; IDA Ireland says the CEO, the CTO and most of its R&D were based in Dublin. Paladin Capital Group led its $13 million Series A (July 2020) and a $23 million Series A-1 (June 2023), and F5 says it raised more than $40 million in venture funding. Investors also included Lockheed Martin Ventures and Hakluyt Capital. F5 announced on September 11, 2025 that it would acquire CalypsoAI for $180 million in purchase consideration, mostly cash. F5's 10-Q says the deal closed on September 26, 2025 and records $145.2 million in cash consideration. CalypsoAI is no longer sold separately: calypsoai.com now redirects to F5's AI Guardrails page. F5 introduced F5 AI Guardrails and F5 AI Red Team when it announced the close, and made both generally available in January 2026. Buyers should evaluate those products. **What it sold** By 2025 CalypsoAI sold an inference security platform with two main products. Inference Defend checked prompts and responses in real time to block prompt injection, jailbreaks and sensitive data leakage, using custom scanners that could be versioned, tested and enforced per project. Inference Red-Team ran automated and agent-driven multi-turn attacks, drawing on more than 10,000 new attack prompts a month, and produced a risk score. The platform logged AI interactions for audit, sent logs to Splunk, and ran as SaaS, on premises or hybrid. In August 2025 CalypsoAI said an on-premises version of Red-Team, for organizations with strict data residency or air-gapped requirements, would soon be available in early access. **Frameworks** In August 2025 CalypsoAI added an EU AI Act scanner package to Inference Defend, covering four Article 5 prohibited-practice categories: manipulation, social scoring, biometric data harvesting and surveillance. F5's deal announcement said its governance features help customers meet GDPR and EU AI Act requirements. We found no CalypsoAI mapping to the NIST AI RMF or ISO 42001.

Noma Security is a security and governance platform for AI agents and the wider AI lifecycle. It was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met in the Israel Defense Forces' 8200 intelligence unit. Its contact page lists a single office, in New York, and its development center is in Tel Aviv. Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners and a $25 million Series A led by Ballistic Ventures, announced together when it came out of stealth (reported October 31, 2024), and a $100 million Series B led by Evolution Equity Partners in July 2025, with Ballistic and Glilot taking part. Databricks Ventures made an undisclosed investment in June 2025, alongside a partnership with Databricks. The platform has four products. AI-SPM finds agents, MCP servers, skills, models and tools across cloud platforms, SaaS platforms, code repositories and endpoints (through existing EDR or MDM tools), and flags misconfigurations such as excessive agency, unsandboxed agents and secrets in agent instructions. It also scans models from open registries such as Hugging Face for malicious artifacts, hidden instructions and known vulnerabilities, and assesses MCP servers for supply chain risk. Agent Access Control defines which agents are approved, what data they can reach and what actions they can take. AI-DR monitors agent sessions at runtime for prompt injection (including indirect injection through tool responses), data leakage, tool poisoning and scope violations; it can alert, block, mask data inline, steer the agent, require human approval or stop it with a kill switch. AI Red Teaming runs multi-turn attack campaigns against apps and agents, including in CI/CD pipelines, and feeds findings into runtime policies. Policies are enforced through agent hooks, AI and MCP gateways, agent SDKs and APIs. Noma covers SaaS agents built in Microsoft Copilot Studio and Salesforce Agentforce, and homegrown agents on Amazon Bedrock, Azure AI Foundry and Databricks or built with LangChain and CrewAI. Since February 2026 it has been available through the Extended plan of AWS Security Hub, covering Amazon Bedrock and SageMaker workloads. **AI compliance coverage** Noma says its AI-SPM and red-teaming findings map to the NIST AI RMF, the EU AI Act and ISO 42001, as well as the OWASP Top 10 for LLMs and MITRE ATLAS, and its red-teaming product offers these frameworks as compliance presets. A UiPath case study on its site says Noma's scanning supported UiPath's ISO/IEC 42001:2023 certification. We found no published control-by-control mappings. **Who it's for** Large enterprises with many AI agents across endpoints, SaaS and cloud that want one security layer from discovery to runtime. Noma says it is used by more than 10% of the Fortune 100, and testimonials on its site come from people at UiPath, Kantar, Best Buy, Nielsen and Endor Labs.