Cisco AI Defense vs Prompt Security

Cisco AI Defense is Cisco's security product for enterprise AI applications, models and agents. Cisco unveiled it on January 15, 2025 and said it would be available that March. It is built on Robust Intelligence, the AI security startup Cisco announced it would acquire on August 26, 2024 and finished acquiring on September 24, 2024; Dark Reading called Robust Intelligence the core component of AI Defense. The product is sold by Cisco Systems, Inc., which was incorporated in 1984 and is based in San Jose; this profile lists Cisco's founding year and headquarters, as the directory does for other big-company products. Cisco's May 2026 data sheet splits the product into four parts. AI Cloud Visibility discovers AI models, applications, connected data sources, MCP servers and agents, including assets in Amazon Bedrock, Google Vertex and Azure AI Foundry. AI Supply Chain Risk Management scans model files, repositories and MCP servers and tools, and gives each asset a risk score. AI Model and Application Validation runs algorithmic red teaming with more than 200 attack techniques and threat subcategories. AI Runtime Protection applies safety, security and privacy guardrails, enforces MCP policies at runtime and protects agent behavior. Runtime checks can run at the network level through Cisco Multicloud Defense, through a gateway, or through an Inspection API. Hybrid deployments (AWS EKS, Azure AKS, GCP and on-premises AI PODs on OpenShift) keep sensitive data in the customer's environment. A separate AI Access module, for employee use of third-party AI apps, comes through Cisco Secure Access and needs its Advantage package. **Agent and MCP security** In February 2026 Cisco added an AI bill of materials, an MCP Catalog, multi-turn red teaming of models and agents, real-time agentic guardrails and an integration with NVIDIA NeMo Guardrails; the release gave no availability dates. In March 2026 it launched AI Defense: Explorer Edition, a self-service red-teaming tool Cisco offers at no upfront cost, and announced an Agent Runtime SDK for Amazon Bedrock AgentCore, Google Vertex Agent Builder, Azure AI Foundry and LangChain, plus DefenseClaw, an open-source agent security framework. **Frameworks** Cisco says AI Defense has mapped to NIST, OWASP and MITRE frameworks since launch. Its data sheet names the NIST AI RMF, MITRE ATLAS and the OWASP Top 10 for LLMs, and red-team reports also map to Cisco's own Integrated AI Security and Safety Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Large enterprises that already use Cisco security products (Secure Access, Multicloud Defense, Splunk) and want AI discovery, red teaming and runtime guardrails from one vendor. Cisco doesn't publish prices.

Prompt Security is an AI security product that controls how employees use AI tools and protects the AI applications and agents companies build. Itamar Golan (CEO) and Lior Drihem (CTO), who had worked at Check Point and Orca Security, founded it in August 2023; it is based in Tel Aviv. It raised $23 million: a $5 million seed round led by Hetz Ventures (January 2024) and an $18 million Series A led by Jump Capital (November 2024), with Ridge Ventures, Okta and F5 joining. SentinelOne, the Mountain View, California security company, agreed to buy Prompt Security on August 5, 2025 and completed the deal on September 5, 2025. Its Form 8-K puts the consideration at approximately $180 million in cash and SentinelOne Class A stock. Prompt Security is still sold under its own name, as part of SentinelOne's Singularity Platform. The product page is on sentinelone.com; prompt.security now hosts research and free tools such as the open-source Prompt Fuzzer, and the old press release we checked there redirects to SentinelOne. **What it does** SentinelOne's Prompt Security page lists three areas. AI Usage Control inventories the AI tools and code assistants employees and developers use, including unsanctioned shadow AI, and redacts sensitive data and enforces policies across more than 15,000 AI services in real time. It also covers GitHub Copilot, Cursor and Claude Code, keeping secrets and intellectual property out of them. AI Application Security tests homegrown AI apps for prompt injection, jailbreaks and data poisoning before deployment, runs a real-time AI firewall, and turns red-team findings into guardrails. Agentic AI Security finds shadow MCP servers and unsanctioned agents, enforces least-privilege access for agents and keeps a searchable audit log. SentinelOne says Prompt's MCP gateway scores the risk of more than 13,000 known MCP servers and can allow, block, filter or redact their actions. Prompt deploys through a lightweight agent and browser extensions, and covers major LLM providers, including OpenAI, Anthropic and Google, and self-hosted models. **Product changes since the acquisition** At its OneCon conference in November 2025 SentinelOne launched Prompt Security for Employees, for AI Code Assistants and for AI Applications, plus Prompt Security for Agentic AI in beta. At RSAC in March 2026 it announced Prompt AI Agent Security, a discovery and governance control plane for agents and MCP servers (agent posture management was in preview), and Prompt AI Red Teaming for testing homegrown AI apps. **Frameworks** Neither SentinelOne's Prompt Security pages nor prompt.security name the EU AI Act, ISO 42001 or the NIST AI RMF; they refer only to meeting compliance requirements in general terms. This profile lists no frameworks. **Who it's for** Companies that want to let employees use generative AI and coding assistants while controlling data exposure, especially existing SentinelOne customers. Named customers include 10x Banking and Carnival Corporation.