Noma Security vs Protect AI

Noma Security is a security and governance platform for AI agents and the wider AI lifecycle. It was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met in the Israel Defense Forces' 8200 intelligence unit. Its contact page lists a single office, in New York, and its development center is in Tel Aviv. Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners and a $25 million Series A led by Ballistic Ventures, announced together when it came out of stealth (reported October 31, 2024), and a $100 million Series B led by Evolution Equity Partners in July 2025, with Ballistic and Glilot taking part. Databricks Ventures made an undisclosed investment in June 2025, alongside a partnership with Databricks. The platform has four products. AI-SPM finds agents, MCP servers, skills, models and tools across cloud platforms, SaaS platforms, code repositories and endpoints (through existing EDR or MDM tools), and flags misconfigurations such as excessive agency, unsandboxed agents and secrets in agent instructions. It also scans models from open registries such as Hugging Face for malicious artifacts, hidden instructions and known vulnerabilities, and assesses MCP servers for supply chain risk. Agent Access Control defines which agents are approved, what data they can reach and what actions they can take. AI-DR monitors agent sessions at runtime for prompt injection (including indirect injection through tool responses), data leakage, tool poisoning and scope violations; it can alert, block, mask data inline, steer the agent, require human approval or stop it with a kill switch. AI Red Teaming runs multi-turn attack campaigns against apps and agents, including in CI/CD pipelines, and feeds findings into runtime policies. Policies are enforced through agent hooks, AI and MCP gateways, agent SDKs and APIs. Noma covers SaaS agents built in Microsoft Copilot Studio and Salesforce Agentforce, and homegrown agents on Amazon Bedrock, Azure AI Foundry and Databricks or built with LangChain and CrewAI. Since February 2026 it has been available through the Extended plan of AWS Security Hub, covering Amazon Bedrock and SageMaker workloads. **AI compliance coverage** Noma says its AI-SPM and red-teaming findings map to the NIST AI RMF, the EU AI Act and ISO 42001, as well as the OWASP Top 10 for LLMs and MITRE ATLAS, and its red-teaming product offers these frameworks as compliance presets. A UiPath case study on its site says Noma's scanning supported UiPath's ISO/IEC 42001:2023 certification. We found no published control-by-control mappings. **Who it's for** Large enterprises with many AI agents across endpoints, SaaS and cloud that want one security layer from discovery to runtime. Noma says it is used by more than 10% of the Fortune 100, and testimonials on its site come from people at UiPath, Kantar, Best Buy, Nielsen and Endor Labs.

Protect AI was a Seattle AI security company founded in 2022 by Ian Swanson (CEO), Daryan Dehghanpisheh and Badar Ahmed, who had previously worked at AWS, Oracle and DataScience.com. It raised $108.5 million: a $13.5 million seed round co-led by Acrew Capital and Boldstart Ventures (December 2022), a $35 million Series A led by Evolution Equity Partners (July 2023) and a $60 million Series B led by Evolution Equity Partners (August 2024), with Salesforce Ventures and Samsung among the investors. GeekWire reported 75 employees and offices in Seattle, Berlin and Bangalore in August 2024. Protect AI bought huntr, Rebuff, Laiyer AI and SydeLabs. Palo Alto Networks announced its intent to acquire Protect AI on April 28, 2025, the same day it launched Prisma AIRS, and completed the deal on July 22, 2025. It did not disclose the price; SiliconANGLE cited GeekWire sources putting it above $500 million. Ian Swanson joined Palo Alto as VP, Product, Prisma AIRS, and Prisma AIRS 2.0 (October 28, 2025) "completes the native integration" of Protect AI. Protect AI is no longer sold separately: protectai.com now redirects to the Prisma AIRS page, although some old blog posts are still online. Buyers should evaluate Prisma AIRS. **What it sold** Protect AI sold AI security, not governance. Guardian, built on its open-source ModelScan tool, scanned machine learning models for unsafe or malicious code and enforced policies on which models could be used. In October 2024 Hugging Face added the Guardian scanner to its Hub, and by April 2025 Protect AI had scanned 4.47 million model versions there. Recon tested AI applications before deployment with a library of 450 simulated attacks, and Layer filtered malicious prompts in production. Its earlier AI Radar product built a machine learning bill of materials. The huntr community, with more than 15,000 members in August 2024, reported AI and ML vulnerabilities. Palo Alto says the deal brought model scanning, posture management, AI red teaming, runtime protection and AI agent security to Prisma AIRS, but it doesn't map each Protect AI product to a Prisma AIRS module. **Open source** LLM Guard, Protect AI's open-source library for scanning prompts and responses, is archived: its README says the project and its Hugging Face models are no longer developed or maintained. **Frameworks** The Protect AI pages still online don't document a mapping to an AI framework, so this profile lists none. Prisma AIRS maps its AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and NIST.