CalypsoAI vs Protect AI

CalypsoAI was an AI security company founded in the US in 2018 by Neil Serebryany, its first CEO; it describes itself as founded in Silicon Valley, and its early press releases carry Washington datelines. It began with software for testing, validating and monitoring AI and machine learning models for national security, finance and other regulated customers, and moved to securing generative AI with CalypsoAI Moderator in 2023. Donnchadh Casey became CEO in August 2024. In October 2024 CalypsoAI named Dublin its global co-headquarters, alongside a US headquarters in New York; IDA Ireland says the CEO, the CTO and most of its R&D were based in Dublin. Paladin Capital Group led its $13 million Series A (July 2020) and a $23 million Series A-1 (June 2023), and F5 says it raised more than $40 million in venture funding. Investors also included Lockheed Martin Ventures and Hakluyt Capital. F5 announced on September 11, 2025 that it would acquire CalypsoAI for $180 million in purchase consideration, mostly cash. F5's 10-Q says the deal closed on September 26, 2025 and records $145.2 million in cash consideration. CalypsoAI is no longer sold separately: calypsoai.com now redirects to F5's AI Guardrails page. F5 introduced F5 AI Guardrails and F5 AI Red Team when it announced the close, and made both generally available in January 2026. Buyers should evaluate those products. **What it sold** By 2025 CalypsoAI sold an inference security platform with two main products. Inference Defend checked prompts and responses in real time to block prompt injection, jailbreaks and sensitive data leakage, using custom scanners that could be versioned, tested and enforced per project. Inference Red-Team ran automated and agent-driven multi-turn attacks, drawing on more than 10,000 new attack prompts a month, and produced a risk score. The platform logged AI interactions for audit, sent logs to Splunk, and ran as SaaS, on premises or hybrid. In August 2025 CalypsoAI said an on-premises version of Red-Team, for organizations with strict data residency or air-gapped requirements, would soon be available in early access. **Frameworks** In August 2025 CalypsoAI added an EU AI Act scanner package to Inference Defend, covering four Article 5 prohibited-practice categories: manipulation, social scoring, biometric data harvesting and surveillance. F5's deal announcement said its governance features help customers meet GDPR and EU AI Act requirements. We found no CalypsoAI mapping to the NIST AI RMF or ISO 42001.

Protect AI was a Seattle AI security company founded in 2022 by Ian Swanson (CEO), Daryan Dehghanpisheh and Badar Ahmed, who had previously worked at AWS, Oracle and DataScience.com. It raised $108.5 million: a $13.5 million seed round co-led by Acrew Capital and Boldstart Ventures (December 2022), a $35 million Series A led by Evolution Equity Partners (July 2023) and a $60 million Series B led by Evolution Equity Partners (August 2024), with Salesforce Ventures and Samsung among the investors. GeekWire reported 75 employees and offices in Seattle, Berlin and Bangalore in August 2024. Protect AI bought huntr, Rebuff, Laiyer AI and SydeLabs. Palo Alto Networks announced its intent to acquire Protect AI on April 28, 2025, the same day it launched Prisma AIRS, and completed the deal on July 22, 2025. It did not disclose the price; SiliconANGLE cited GeekWire sources putting it above $500 million. Ian Swanson joined Palo Alto as VP, Product, Prisma AIRS, and Prisma AIRS 2.0 (October 28, 2025) "completes the native integration" of Protect AI. Protect AI is no longer sold separately: protectai.com now redirects to the Prisma AIRS page, although some old blog posts are still online. Buyers should evaluate Prisma AIRS. **What it sold** Protect AI sold AI security, not governance. Guardian, built on its open-source ModelScan tool, scanned machine learning models for unsafe or malicious code and enforced policies on which models could be used. In October 2024 Hugging Face added the Guardian scanner to its Hub, and by April 2025 Protect AI had scanned 4.47 million model versions there. Recon tested AI applications before deployment with a library of 450 simulated attacks, and Layer filtered malicious prompts in production. Its earlier AI Radar product built a machine learning bill of materials. The huntr community, with more than 15,000 members in August 2024, reported AI and ML vulnerabilities. Palo Alto says the deal brought model scanning, posture management, AI red teaming, runtime protection and AI agent security to Prisma AIRS, but it doesn't map each Protect AI product to a Prisma AIRS module. **Open source** LLM Guard, Protect AI's open-source library for scanning prompts and responses, is archived: its README says the project and its Hugging Face models are no longer developed or maintained. **Frameworks** The Protect AI pages still online don't document a mapping to an AI framework, so this profile lists none. Prisma AIRS maps its AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and NIST.