Knostic vs Noma Security

Knostic is an AI security company founded in 2023 by Gadi Evron (CEO) and Sounil Yu (CTO). It is based in Herndon, Virginia. It started out selling need-to-know access controls for enterprise AI assistants such as Microsoft 365 Copilot and Glean, which keep answers from exposing data a user shouldn't see. Its website now calls it "the control plane for agentic AI on the endpoint", and it sells two products for AI coding assistants and agents. Kirin runs alongside Cursor, Claude Code, GitHub Copilot, Windsurf, Codex, JetBrains, Devin Desktop and Gemini CLI, and supports Claude Cowork through a plugin. It checks each tool call against policy before it runs and blocks it, downgrades it or sends it to a human. It also validates MCP connections, scans dependencies for hallucinated, vulnerable or malicious packages, and finds and redacts secrets before they reach the model. It audits agent instruction files such as CLAUDE.md and .cursorrules. Kirin installs as a lightweight user-space client that admins can roll out with MDM scripts, on macOS and Windows; Linux is in beta. Its Shadow AI Discovery reports unsanctioned AI use but doesn't block it. AgentMesh scans agent skills, MCP servers and VS Code extensions and labels each one dangerous, risky or clean. In June 2026 VirusTotal added AgentMesh analysis of VS Code extensions. Knostic also publishes an open-source scanner, OpenAnt. Knostic still has a page that pairs it with Microsoft Purview against Copilot oversharing, and its AWS Marketplace listing is still the Copilot Readiness product. Its homepage, product and pricing pages no longer describe that product. It raised a $3.3 million pre-seed round in April 2024 and an $11 million round led by Bright Pixel Capital in March 2025. In 2025 it also received a $5 million investment as an RSAC Innovation Sandbox finalist. In June 2025 Virginia Business put its total funding at $19 million and its headcount at about 30. In October 2025 Gartner named Knostic a Cool Vendor in AI Cybersecurity Governance, for its controls on AI oversharing. **AI compliance coverage** Knostic doesn't map its products to the EU AI Act, the NIST AI RMF or ISO 42001. Its trust center lists a SOC 2 Type 2 report and GDPR, its FAQ offers a compliance package with the SOC 2 report and pen test results, and its Enterprise plan includes compliance reporting. **Who it's for** Security teams at companies whose developers use AI coding agents, agent skills and MCP servers. It is not a governance, model inventory or model testing platform.

Noma Security is a security and governance platform for AI agents and the wider AI lifecycle. It was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met in the Israel Defense Forces' 8200 intelligence unit. Its contact page lists a single office, in New York, and its development center is in Tel Aviv. Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners and a $25 million Series A led by Ballistic Ventures, announced together when it came out of stealth (reported October 31, 2024), and a $100 million Series B led by Evolution Equity Partners in July 2025, with Ballistic and Glilot taking part. Databricks Ventures made an undisclosed investment in June 2025, alongside a partnership with Databricks. The platform has four products. AI-SPM finds agents, MCP servers, skills, models and tools across cloud platforms, SaaS platforms, code repositories and endpoints (through existing EDR or MDM tools), and flags misconfigurations such as excessive agency, unsandboxed agents and secrets in agent instructions. It also scans models from open registries such as Hugging Face for malicious artifacts, hidden instructions and known vulnerabilities, and assesses MCP servers for supply chain risk. Agent Access Control defines which agents are approved, what data they can reach and what actions they can take. AI-DR monitors agent sessions at runtime for prompt injection (including indirect injection through tool responses), data leakage, tool poisoning and scope violations; it can alert, block, mask data inline, steer the agent, require human approval or stop it with a kill switch. AI Red Teaming runs multi-turn attack campaigns against apps and agents, including in CI/CD pipelines, and feeds findings into runtime policies. Policies are enforced through agent hooks, AI and MCP gateways, agent SDKs and APIs. Noma covers SaaS agents built in Microsoft Copilot Studio and Salesforce Agentforce, and homegrown agents on Amazon Bedrock, Azure AI Foundry and Databricks or built with LangChain and CrewAI. Since February 2026 it has been available through the Extended plan of AWS Security Hub, covering Amazon Bedrock and SageMaker workloads. **AI compliance coverage** Noma says its AI-SPM and red-teaming findings map to the NIST AI RMF, the EU AI Act and ISO 42001, as well as the OWASP Top 10 for LLMs and MITRE ATLAS, and its red-teaming product offers these frameworks as compliance presets. A UiPath case study on its site says Noma's scanning supported UiPath's ISO/IEC 42001:2023 certification. We found no published control-by-control mappings. **Who it's for** Large enterprises with many AI agents across endpoints, SaaS and cloud that want one security layer from discovery to runtime. Noma says it is used by more than 10% of the Fortune 100, and testimonials on its site come from people at UiPath, Kantar, Best Buy, Nielsen and Endor Labs.