Prompt Security vs WitnessAI

Prompt Security is an AI security product that controls how employees use AI tools and protects the AI applications and agents companies build. Itamar Golan (CEO) and Lior Drihem (CTO), who had worked at Check Point and Orca Security, founded it in August 2023; it is based in Tel Aviv. It raised $23 million: a $5 million seed round led by Hetz Ventures (January 2024) and an $18 million Series A led by Jump Capital (November 2024), with Ridge Ventures, Okta and F5 joining. SentinelOne, the Mountain View, California security company, agreed to buy Prompt Security on August 5, 2025 and completed the deal on September 5, 2025. Its Form 8-K puts the consideration at approximately $180 million in cash and SentinelOne Class A stock. Prompt Security is still sold under its own name, as part of SentinelOne's Singularity Platform. The product page is on sentinelone.com; prompt.security now hosts research and free tools such as the open-source Prompt Fuzzer, and the old press release we checked there redirects to SentinelOne. **What it does** SentinelOne's Prompt Security page lists three areas. AI Usage Control inventories the AI tools and code assistants employees and developers use, including unsanctioned shadow AI, and redacts sensitive data and enforces policies across more than 15,000 AI services in real time. It also covers GitHub Copilot, Cursor and Claude Code, keeping secrets and intellectual property out of them. AI Application Security tests homegrown AI apps for prompt injection, jailbreaks and data poisoning before deployment, runs a real-time AI firewall, and turns red-team findings into guardrails. Agentic AI Security finds shadow MCP servers and unsanctioned agents, enforces least-privilege access for agents and keeps a searchable audit log. SentinelOne says Prompt's MCP gateway scores the risk of more than 13,000 known MCP servers and can allow, block, filter or redact their actions. Prompt deploys through a lightweight agent and browser extensions, and covers major LLM providers, including OpenAI, Anthropic and Google, and self-hosted models. **Product changes since the acquisition** At its OneCon conference in November 2025 SentinelOne launched Prompt Security for Employees, for AI Code Assistants and for AI Applications, plus Prompt Security for Agentic AI in beta. At RSAC in March 2026 it announced Prompt AI Agent Security, a discovery and governance control plane for agents and MCP servers (agent posture management was in preview), and Prompt AI Red Teaming for testing homegrown AI apps. **Frameworks** Neither SentinelOne's Prompt Security pages nor prompt.security name the EU AI Act, ISO 42001 or the NIST AI RMF; they refer only to meeting compliance requirements in general terms. This profile lists no frameworks. **Who it's for** Companies that want to let employees use generative AI and coding assistants while controlling data exposure, especially existing SentinelOne customers. Named customers include 10x Banking and Carnival Corporation.

WitnessAI is an AI security and governance platform for enterprise AI use by employees and by AI agents. It was founded in 2023 and incubated by Ballistic Ventures. CEO Rick Caccia, previously SVP of marketing at Palo Alto Networks, is the only co-founder the company names. It is based in Mountain View, California, and has raised about $85.5 million in two announced rounds: $27.5 million co-led by GV and Ballistic Ventures (May 2024) and $58 million in strategic funding led by Sound Ventures (January 2026), with Fin Capital, Qualcomm Ventures, Samsung Ventures and Forgepoint Capital Partners taking part. The platform has three modules. Observe finds the AI apps, agents and MCP servers in use, drawing on a catalog of thousands of AI applications, and classifies conversations by intent. Control sets policies by department, role, intent or workforce type, routes prompts to approved or cheaper models, limits agents to approved MCP servers and tools, redacts sensitive data in real time and keeps audit trails. Protect (Witness Protect, which WitnessAI calls "the enterprise AI firewall") screens prompts and responses for prompt injection, jailbreaks and harmful output and tokenizes PII, credentials and secrets. Witness Attack runs automated red teaming against models before deployment. WitnessAI says it sees AI activity across the network without browser extensions or endpoint clients, including native apps such as Windows 11 Copilot and Office 365, and it integrates with F5 BIG-IP SSL Orchestrator for encrypted AI traffic. Each customer gets a single-tenant instance with customer-controlled encryption. In January 2026 it launched WitnessAI Agentic Security, which covers coding agents such as Claude Code, Cursor and Codex and records the user, agent, tool and rule for every blocked tool call. In July 2026 it added AI FinOps features: spend estimates for unsanctioned AI apps and agents, metering of sanctioned token use, an ROI dashboard and cost-based model routing. **AI compliance coverage** The compliance page offers logging of every AI app and interaction, policy enforcement and masking of regulated data, but names no AI framework. WitnessAI's AWS Marketplace listing says its audit trails support compliance reporting for the EU AI Act, ISO/IEC 42001, the NIST AI RMF and PCI DSS 4.0.1. We found no control mappings for any of them. WitnessAI announced a SOC 2 Type II attestation in October 2025; it has no public trust center. **Who it's for** Large enterprises that want to see and govern how employees and agents use public and internal AI tools, and to add runtime protection to their own AI apps. WitnessAI says its customers include financial services firms, utilities, airlines, automakers, retailers and telecoms. InComm Payments is the only customer it names on its site.