Giskard vs Prompt Security

Giskard is a Paris-based company founded in 2021 by Alex Combessie, Jean-Marie John-Mathews and Andrei Avtomonov. Combessie and John-Mathews are now co-CEOs, and Giskard says its co-founders previously built AI systems at Dataiku and Thales. It sells software and services for testing and securing LLM agents. Its first funding round, €1.5 million led by Elaia with Bessemer Venture Partners, was announced in December 2022. Giskard says it also received a €3 million strategic investment through the European Commission's EIC Accelerator in 2023 and a €3 million Bpifrance grant in 2024 for LLM evaluation research with Mistral AI, Artefact, INA and BnF. CORDIS lists a €2.5 million EU contribution to its EIC project, which ran from September 2023 to August 2025. Giskard Hub is the paid platform. Continuous red teaming runs multi-turn attacks that adapt to the agent's answers, generated from the company's own documents and knowledge bases. It tests for hallucinations, stereotypes and discrimination, harmful content, disclosure of personal information and prompt injection. Testing is black-box: the agent only needs an API endpoint, and coverage is limited to text-to-text conversational agents. The Hub also schedules agent evaluations and manages test datasets, custom checks and human review, with alerts, SSO, role-based access and audit logs. It runs as SaaS, in a private cloud or on premises, with EU or US data processing. Giskard Guards, launched in April 2026, is a runtime guardrail layer that runs in the customer's infrastructure. It inspects prompts, responses, tool calls and multi-step reasoning, and its policies are written as code in OPA/Rego. Giskard also sells AI security audits that end in a go/no-go report, and it is offering a free trial of a new Agentic Red Teamer to a limited number of users. The open-source library is Apache 2.0 licensed. Version 3, a rewrite for multi-turn agent testing, became stable in August 2026. Version 2 is no longer actively maintained, and tabular models have no v3 equivalent. Giskard also publishes Phare, an LLM safety benchmark launched in February 2025 with Google DeepMind as research partner. Logos on its site include BNP Paribas, AXA, BPCE, Société Générale, Crédit Agricole, Michelin, Decathlon, L'Oréal and Doctolib. **AI compliance coverage** Guards includes an EU AI Act policy pack for prohibited practices such as social scoring and real-time biometric identification, and Giskard says Guards covers OWASP LLM risks. It doesn't map its products to the NIST AI RMF or ISO 42001. Its trust center, run on Bastion, lists GDPR and a SOC 2 Type 2 report and shows HIPAA as in progress. **Who it's for** Enterprises, especially in European banking and insurance, that run customer-facing LLM agents and want testing and runtime controls they can deploy on premises.

Prompt Security is an AI security product that controls how employees use AI tools and protects the AI applications and agents companies build. Itamar Golan (CEO) and Lior Drihem (CTO), who had worked at Check Point and Orca Security, founded it in August 2023; it is based in Tel Aviv. It raised $23 million: a $5 million seed round led by Hetz Ventures (January 2024) and an $18 million Series A led by Jump Capital (November 2024), with Ridge Ventures, Okta and F5 joining. SentinelOne, the Mountain View, California security company, agreed to buy Prompt Security on August 5, 2025 and completed the deal on September 5, 2025. Its Form 8-K puts the consideration at approximately $180 million in cash and SentinelOne Class A stock. Prompt Security is still sold under its own name, as part of SentinelOne's Singularity Platform. The product page is on sentinelone.com; prompt.security now hosts research and free tools such as the open-source Prompt Fuzzer, and the old press release we checked there redirects to SentinelOne. **What it does** SentinelOne's Prompt Security page lists three areas. AI Usage Control inventories the AI tools and code assistants employees and developers use, including unsanctioned shadow AI, and redacts sensitive data and enforces policies across more than 15,000 AI services in real time. It also covers GitHub Copilot, Cursor and Claude Code, keeping secrets and intellectual property out of them. AI Application Security tests homegrown AI apps for prompt injection, jailbreaks and data poisoning before deployment, runs a real-time AI firewall, and turns red-team findings into guardrails. Agentic AI Security finds shadow MCP servers and unsanctioned agents, enforces least-privilege access for agents and keeps a searchable audit log. SentinelOne says Prompt's MCP gateway scores the risk of more than 13,000 known MCP servers and can allow, block, filter or redact their actions. Prompt deploys through a lightweight agent and browser extensions, and covers major LLM providers, including OpenAI, Anthropic and Google, and self-hosted models. **Product changes since the acquisition** At its OneCon conference in November 2025 SentinelOne launched Prompt Security for Employees, for AI Code Assistants and for AI Applications, plus Prompt Security for Agentic AI in beta. At RSAC in March 2026 it announced Prompt AI Agent Security, a discovery and governance control plane for agents and MCP servers (agent posture management was in preview), and Prompt AI Red Teaming for testing homegrown AI apps. **Frameworks** Neither SentinelOne's Prompt Security pages nor prompt.security name the EU AI Act, ISO 42001 or the NIST AI RMF; they refer only to meeting compliance requirements in general terms. This profile lists no frameworks. **Who it's for** Companies that want to let employees use generative AI and coding assistants while controlling data exposure, especially existing SentinelOne customers. Named customers include 10x Banking and Carnival Corporation.