F5 AI Guardrails vs WitnessAI

F5 AI Guardrails is F5's runtime security product for AI models, applications and agents. F5 sells it alongside F5 AI Red Team, its automated adversarial testing product, and presents the two as a pair: findings from Red Team can be turned into guardrail policies. Both come from CalypsoAI, the AI security company F5 announced it would acquire on September 11, 2025 for $180 million in purchase consideration, mostly cash. The deal closed on September 26, 2025. F5 introduced both products when it announced the deal had closed, and made them generally available in January 2026 as part of its Application Delivery and Security Platform. F5, Inc. was incorporated in 1996 and is based in Seattle; this profile lists the company's founding year and headquarters, as the directory does for other big-company products. F5 AI Guardrails blocks prompt injection and jailbreaks, detects and prevents leakage of personal data and custom data categories, filters toxic or harmful output, and audits or blocks unauthorized tool calls and actions by agents. Policies can be written in natural language. Every enforcement action is logged with attribution, and logs can be exported to third-party SIEMs. It works with any model and runs in AWS, Azure or Google Cloud, in private clouds, or on premises, including fully air-gapped environments. F5 AI Red Team sends a swarm of attacker agents to run static, prompt-based and multi-turn attacks, including indirect prompt injection and data-leakage tests on RAG applications. F5 says its attack library grows by more than 10,000 patterns a month. Red Team runs in the major public clouds or on premises as a certified Red Hat OpenShift operator. A feature called F5 AI Remediate drafts guardrails from Red Team findings, and a person approves each one before it goes live. **Gateway and platform** On June 22, 2026 F5 launched the F5 AI Security Platform, which groups AI governance, AI discovery, testing with AI Red Team and runtime protection with AI Guardrails, plus an audit trail across AI interactions. At the same time it announced the acquisition of SurePath AI, which adds network-based discovery of AI use, including shadow AI. F5's AI Gateway now combines a model gateway, an MCP gateway (with an MCP server registry and per-tool allow and deny controls) and AI Guardrails under one control plane. **Compliance coverage** F5 says Guardrails has automated auditing templates for GDPR, HIPAA and the EU AI Act, out-of-the-box policy controls aligned to PCI, PHI and the EU AI Act's prohibited-risk categories, and audit-ready logs. It also says Red Team findings can support compliance programs aligned with the NIST AI RMF and the EU AI Act, and it publishes an infographic aligning its products with the OWASP Top 10 for LLMs. We found no article-by-article mapping to the EU AI Act. **Who it's for** Large enterprises, including regulated financial services and healthcare organizations, that need AI guardrails they can host themselves or run air-gapped. F5 says both products are deployed at Fortune 500 companies. It also suits F5 customers who want AI controls on the same platform as their application delivery and API security.

WitnessAI is an AI security and governance platform for enterprise AI use by employees and by AI agents. It was founded in 2023 and incubated by Ballistic Ventures. CEO Rick Caccia, previously SVP of marketing at Palo Alto Networks, is the only co-founder the company names. It is based in Mountain View, California, and has raised about $85.5 million in two announced rounds: $27.5 million co-led by GV and Ballistic Ventures (May 2024) and $58 million in strategic funding led by Sound Ventures (January 2026), with Fin Capital, Qualcomm Ventures, Samsung Ventures and Forgepoint Capital Partners taking part. The platform has three modules. Observe finds the AI apps, agents and MCP servers in use, drawing on a catalog of thousands of AI applications, and classifies conversations by intent. Control sets policies by department, role, intent or workforce type, routes prompts to approved or cheaper models, limits agents to approved MCP servers and tools, redacts sensitive data in real time and keeps audit trails. Protect (Witness Protect, which WitnessAI calls "the enterprise AI firewall") screens prompts and responses for prompt injection, jailbreaks and harmful output and tokenizes PII, credentials and secrets. Witness Attack runs automated red teaming against models before deployment. WitnessAI says it sees AI activity across the network without browser extensions or endpoint clients, including native apps such as Windows 11 Copilot and Office 365, and it integrates with F5 BIG-IP SSL Orchestrator for encrypted AI traffic. Each customer gets a single-tenant instance with customer-controlled encryption. In January 2026 it launched WitnessAI Agentic Security, which covers coding agents such as Claude Code, Cursor and Codex and records the user, agent, tool and rule for every blocked tool call. In July 2026 it added AI FinOps features: spend estimates for unsanctioned AI apps and agents, metering of sanctioned token use, an ROI dashboard and cost-based model routing. **AI compliance coverage** The compliance page offers logging of every AI app and interaction, policy enforcement and masking of regulated data, but names no AI framework. WitnessAI's AWS Marketplace listing says its audit trails support compliance reporting for the EU AI Act, ISO/IEC 42001, the NIST AI RMF and PCI DSS 4.0.1. We found no control mappings for any of them. WitnessAI announced a SOC 2 Type II attestation in October 2025; it has no public trust center. **Who it's for** Large enterprises that want to see and govern how employees and agents use public and internal AI tools, and to add runtime protection to their own AI apps. WitnessAI says its customers include financial services firms, utilities, airlines, automakers, retailers and telecoms. InComm Payments is the only customer it names on its site.