Giskard vs Noma Security

Giskard is a Paris-based company founded in 2021 by Alex Combessie, Jean-Marie John-Mathews and Andrei Avtomonov. Combessie and John-Mathews are now co-CEOs, and Giskard says its co-founders previously built AI systems at Dataiku and Thales. It sells software and services for testing and securing LLM agents. Its first funding round, €1.5 million led by Elaia with Bessemer Venture Partners, was announced in December 2022. Giskard says it also received a €3 million strategic investment through the European Commission's EIC Accelerator in 2023 and a €3 million Bpifrance grant in 2024 for LLM evaluation research with Mistral AI, Artefact, INA and BnF. CORDIS lists a €2.5 million EU contribution to its EIC project, which ran from September 2023 to August 2025. Giskard Hub is the paid platform. Continuous red teaming runs multi-turn attacks that adapt to the agent's answers, generated from the company's own documents and knowledge bases. It tests for hallucinations, stereotypes and discrimination, harmful content, disclosure of personal information and prompt injection. Testing is black-box: the agent only needs an API endpoint, and coverage is limited to text-to-text conversational agents. The Hub also schedules agent evaluations and manages test datasets, custom checks and human review, with alerts, SSO, role-based access and audit logs. It runs as SaaS, in a private cloud or on premises, with EU or US data processing. Giskard Guards, launched in April 2026, is a runtime guardrail layer that runs in the customer's infrastructure. It inspects prompts, responses, tool calls and multi-step reasoning, and its policies are written as code in OPA/Rego. Giskard also sells AI security audits that end in a go/no-go report, and it is offering a free trial of a new Agentic Red Teamer to a limited number of users. The open-source library is Apache 2.0 licensed. Version 3, a rewrite for multi-turn agent testing, became stable in August 2026. Version 2 is no longer actively maintained, and tabular models have no v3 equivalent. Giskard also publishes Phare, an LLM safety benchmark launched in February 2025 with Google DeepMind as research partner. Logos on its site include BNP Paribas, AXA, BPCE, Société Générale, Crédit Agricole, Michelin, Decathlon, L'Oréal and Doctolib. **AI compliance coverage** Guards includes an EU AI Act policy pack for prohibited practices such as social scoring and real-time biometric identification, and Giskard says Guards covers OWASP LLM risks. It doesn't map its products to the NIST AI RMF or ISO 42001. Its trust center, run on Bastion, lists GDPR and a SOC 2 Type 2 report and shows HIPAA as in progress. **Who it's for** Enterprises, especially in European banking and insurance, that run customer-facing LLM agents and want testing and runtime controls they can deploy on premises.

Noma Security is a security and governance platform for AI agents and the wider AI lifecycle. It was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met in the Israel Defense Forces' 8200 intelligence unit. Its contact page lists a single office, in New York, and its development center is in Tel Aviv. Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners and a $25 million Series A led by Ballistic Ventures, announced together when it came out of stealth (reported October 31, 2024), and a $100 million Series B led by Evolution Equity Partners in July 2025, with Ballistic and Glilot taking part. Databricks Ventures made an undisclosed investment in June 2025, alongside a partnership with Databricks. The platform has four products. AI-SPM finds agents, MCP servers, skills, models and tools across cloud platforms, SaaS platforms, code repositories and endpoints (through existing EDR or MDM tools), and flags misconfigurations such as excessive agency, unsandboxed agents and secrets in agent instructions. It also scans models from open registries such as Hugging Face for malicious artifacts, hidden instructions and known vulnerabilities, and assesses MCP servers for supply chain risk. Agent Access Control defines which agents are approved, what data they can reach and what actions they can take. AI-DR monitors agent sessions at runtime for prompt injection (including indirect injection through tool responses), data leakage, tool poisoning and scope violations; it can alert, block, mask data inline, steer the agent, require human approval or stop it with a kill switch. AI Red Teaming runs multi-turn attack campaigns against apps and agents, including in CI/CD pipelines, and feeds findings into runtime policies. Policies are enforced through agent hooks, AI and MCP gateways, agent SDKs and APIs. Noma covers SaaS agents built in Microsoft Copilot Studio and Salesforce Agentforce, and homegrown agents on Amazon Bedrock, Azure AI Foundry and Databricks or built with LangChain and CrewAI. Since February 2026 it has been available through the Extended plan of AWS Security Hub, covering Amazon Bedrock and SageMaker workloads. **AI compliance coverage** Noma says its AI-SPM and red-teaming findings map to the NIST AI RMF, the EU AI Act and ISO 42001, as well as the OWASP Top 10 for LLMs and MITRE ATLAS, and its red-teaming product offers these frameworks as compliance presets. A UiPath case study on its site says Noma's scanning supported UiPath's ISO/IEC 42001:2023 certification. We found no published control-by-control mappings. **Who it's for** Large enterprises with many AI agents across endpoints, SaaS and cloud that want one security layer from discovery to runtime. Noma says it is used by more than 10% of the Fortune 100, and testimonials on its site come from people at UiPath, Kantar, Best Buy, Nielsen and Endor Labs.