Cisco AI Defense
Cisco Systems, Inc.
Cisco's AI security product, built on Robust Intelligence: AI discovery, supply chain scanning, red teaming and runtime guardrails for apps and agents
Last checked October 15, 2026Quick facts: Cisco AI Defense is an AI compliance vendor founded in 1984 and headquartered in San Jose, United States. The vendor publicly documents coverage for NIST AI RMF. Pricing is available on request. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About Cisco AI Defense
Cisco AI Defense is Cisco's security product for enterprise AI applications, models and agents. Cisco unveiled it on January 15, 2025 and said it would be available that March. It is built on Robust Intelligence, the AI security startup Cisco announced it would acquire on August 26, 2024 and finished acquiring on September 24, 2024; Dark Reading called Robust Intelligence the core component of AI Defense. The product is sold by Cisco Systems, Inc., which was incorporated in 1984 and is based in San Jose; this profile lists Cisco's founding year and headquarters, as the directory does for other big-company products. Cisco's May 2026 data sheet splits the product into four parts. AI Cloud Visibility discovers AI models, applications, connected data sources, MCP servers and agents, including assets in Amazon Bedrock, Google Vertex and Azure AI Foundry. AI Supply Chain Risk Management scans model files, repositories and MCP servers and tools, and gives each asset a risk score. AI Model and Application Validation runs algorithmic red teaming with more than 200 attack techniques and threat subcategories. AI Runtime Protection applies safety, security and privacy guardrails, enforces MCP policies at runtime and protects agent behavior. Runtime checks can run at the network level through Cisco Multicloud Defense, through a gateway, or through an Inspection API. Hybrid deployments (AWS EKS, Azure AKS, GCP and on-premises AI PODs on OpenShift) keep sensitive data in the customer's environment. A separate AI Access module, for employee use of third-party AI apps, comes through Cisco Secure Access and needs its Advantage package. **Agent and MCP security** In February 2026 Cisco added an AI bill of materials, an MCP Catalog, multi-turn red teaming of models and agents, real-time agentic guardrails and an integration with NVIDIA NeMo Guardrails; the release gave no availability dates. In March 2026 it launched AI Defense: Explorer Edition, a self-service red-teaming tool Cisco offers at no upfront cost, and announced an Agent Runtime SDK for Amazon Bedrock AgentCore, Google Vertex Agent Builder, Azure AI Foundry and LangChain, plus DefenseClaw, an open-source agent security framework. **Frameworks** Cisco says AI Defense has mapped to NIST, OWASP and MITRE frameworks since launch. Its data sheet names the NIST AI RMF, MITRE ATLAS and the OWASP Top 10 for LLMs, and red-team reports also map to Cisco's own Integrated AI Security and Safety Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Large enterprises that already use Cisco security products (Secure Access, Multicloud Defense, Splunk) and want AI discovery, red teaming and runtime guardrails from one vendor. Cisco doesn't publish prices.
Frameworks supported
Regulations, voluntary standards and compliance programs Cisco AI Defense documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Voluntary standard · US · voluntary
Cisco AI Defense features
Capabilities Cisco AI Defense markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
AI Discovery
Inventory of AI assets, models, prompts, and datasets across an enterprise environment.
Shadow AI Detection
Discovery of unsanctioned AI tools and model usage across an organization.
LLM Red Teaming
Automated adversarial testing of LLMs for jailbreaks, prompt injection, and unsafe outputs.
Agentic Red Teaming
Automated adversarial testing using AI agents to probe model and application weaknesses.
Model Validation
Verification that a model meets accuracy, robustness, and compliance requirements before deployment.
AI Guardrails
Runtime controls that constrain LLM input and output to enforce safety, compliance, and brand policies.
Prompt Injection Defense
Detection and mitigation of malicious prompts intended to bypass system instructions or exfiltrate data.
Data Leakage Prevention
Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.
Runtime Enforcement
Inline policy enforcement on AI inputs and outputs at request time.
AI Supply Chain Risk
Assessment of risks from third-party models, datasets, and AI service providers.
AI Bill of Materials
Structured inventory of components, datasets, and models that make up an AI system.
Risk Scoring
Quantitative risk assessment for AI use cases, vendors, or model deployments.
Integrations
Documented by Cisco AI Defense in public product materials.
- Splunk
- ServiceNow
- GitHub
- GitLab
- Jenkins
- Amazon Bedrock
- Google Vertex AI
- LangChain
- NVIDIA
- AWS Marketplace
- Kubernetes
Cisco AI Defense pricing
No public prices. Cisco's AI Defense offer description (version 2.1, last modified September 23, 2026) names three packages: Advantage, Validation Essentials and Runtime Essentials; the data sheet shows supply chain scanning only in Advantage. Customers buy either per AI application or as committed usage: a prepaid balance drawn down by validation tests (600 in the first block, then 120 per block), runtime guardrails (measured in inspection tokens, in blocks of 1 billion), governed assets (blocks of 50) and endpoint agents. The runtime package assumes an aggregate limit of 10 million queries per AI application per year, and Enhanced Support is included. AWS Marketplace lists "Cisco AI Defense powered by Security Cloud Control" as SaaS with custom pricing by private offer. The Explorer Edition red-teaming tool is offered at no upfront cost.
Pros and cons of Cisco AI Defense
Pros
- One product covers the AI lifecycle: asset discovery, model and MCP supply chain scanning, algorithmic red teaming and runtime guardrails, plus an AI Access module for employee use of third-party AI apps.
- Agent and MCP security is documented in detail: MCP server and tool scanning, an MCP Catalog, an AI bill of materials, MCP runtime enforcement and multi-turn red teaming of agents.
- Low-cost way to try it: Explorer Edition red teaming is offered at no upfront cost and plugs into GitHub Actions, GitLab and Jenkins pipelines.
- Flexible enforcement: network-level through Multicloud Defense, a gateway or an Inspection API, with hybrid deployments on EKS, AKS, GCP and OpenShift that keep sensitive data in the customer's environment.
- Licensing terms are public even though prices aren't: the offer description names the packages and spells out usage units and block sizes.
Cons
- No public prices: enterprise packages are quoted (AWS Marketplace by private offer), and usage units such as inspection tokens and governed assets make costs hard to estimate without a quote.
- Several parts rely on other Cisco products: AI Access needs the Secure Access Advantage package, and network enforcement runs through Cisco Multicloud Defense, so it fits Cisco customers best.
- Framework mapping is at the level of threat taxonomies (NIST AI RMF, MITRE ATLAS, OWASP); we found no EU AI Act or ISO 42001 support, so it doesn't replace a governance or compliance documentation tool.
- Cisco gave no availability dates for the agent features announced in February 2026 and says timelines may change, so confirm what is generally available.
- The integrations documentation (last updated October 14, 2026) lists only AWS Bedrock under LLM API provider integrations.
Alternatives to Cisco AI Defense
Prisma AIRS
Compare Cisco AI Defense vs Prisma AIRS
F5 AI Guardrails
Compare Cisco AI Defense vs F5 AI Guardrails
HiddenLayer
Compare Cisco AI Defense vs HiddenLayer
Lakera
Compare Cisco AI Defense vs Lakera
Prompt Security
Compare Cisco AI Defense vs Prompt Security
Noma Security
Compare Cisco AI Defense vs Noma Security
Frequently asked
What is Cisco AI Defense?+
Cisco AI Defense is Cisco's security product for AI applications, models and agents, unveiled in January 2025. It discovers AI assets across clouds, scans models and MCP servers for supply chain risks, red-teams models and agents, and applies runtime guardrails against threats such as prompt injection, data leakage and unsafe tool use.
Is Cisco AI Defense the same as Robust Intelligence?+
AI Defense is built on Robust Intelligence's technology. Cisco announced its intent to acquire Robust Intelligence on August 26, 2024 and completed the deal on September 24, 2024. Cisco now sells that technology as part of AI Defense, alongside newer features such as the MCP Catalog and agent guardrails.
How much does Cisco AI Defense cost?+
Cisco doesn't publish prices. Its offer description lists Advantage, Validation Essentials and Runtime Essentials packages, bought per AI application or as committed usage measured in validation tests, inspection tokens, governed assets and endpoint agents. AWS Marketplace sells it by private offer. Explorer Edition, a self-service red-teaming tool, is offered at no upfront cost.
Does Cisco AI Defense secure AI agents and MCP servers?+
Yes. Its data sheet lists MCP and agent discovery, MCP server and tool scanning, MCP runtime enforcement and agent behavior protection. Cisco added an MCP Catalog, an AI bill of materials, multi-turn agent red teaming and agentic guardrails in February 2026, and announced an Agent Runtime SDK in March 2026.
Which frameworks does Cisco AI Defense map to?+
Cisco maps AI Defense detections and tests to the NIST AI RMF, MITRE ATLAS, the OWASP Top 10 for LLMs and its own Integrated AI Security and Safety Framework. We found no documented support for the EU AI Act or ISO 42001.
What are the alternatives to Cisco AI Defense?+
The closest alternatives in this directory are Prisma AIRS (Palo Alto Networks) and F5 AI Guardrails, which also came from acquisitions of AI security startups, and the AI security platforms HiddenLayer, Lakera, Prompt Security and Noma Security.
Sources
- Cisco: AI Defense product page
- Cisco: AI Defense data sheet (updated May 21, 2026; components, packaging tiers, frameworks)
- Cisco: AI Defense offer description, version 2.1 (packages, usage units, support)
- Cisco AI Defense documentation: Integrations (AWS, Splunk, GitHub, ServiceNow AI Control Tower, hybrid deployment)
- Cisco: AI Supply Chain Risk Management (model, repository and MCP server scanning)
- Cisco newsroom: Cisco unveils AI Defense (January 15, 2025)
- Cisco newsroom: AI Defense expansion with AI BOM, MCP Catalog and agentic guardrails (February 10, 2026)
- Cisco blog: Cisco announces intent to acquire Robust Intelligence (August 26, 2024; updated September 24, 2024: acquisition completed)
- Cisco blog: Introducing AI Defense: Explorer Edition (March 23, 2026)
- PR Newswire via Nasdaq: Cisco reimagines security for the agentic workforce (March 23, 2026; Explorer Edition, Agent Runtime SDK, DefenseClaw)
- AWS Marketplace: Cisco AI Defense powered by Security Cloud Control (private offer)
- Cisco Systems Form 10-K, fiscal 2025 (incorporated 1984; San Jose headquarters)
- Dark Reading: Cisco previews AI Defense (January 21, 2025; Robust Intelligence as its core component)
- Network World: Cisco goes all in on agentic AI security (March 23, 2026)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at Cisco AI Defense?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.