Nightfall AI
Shoreline Labs, Inc.
Data loss prevention for SaaS apps, email, endpoints, browsers, employee AI tools and AI coding agents, priced per user per year
Last checked October 15, 2026Quick facts: Nightfall AI is an AI compliance vendor founded in 2018 and headquartered in San Francisco, United States. The vendor publicly documents coverage for HIPAA, PCI DSS, SOC 2, and ISO 27001. Pricing is available on request. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About Nightfall AI
Nightfall AI is a data loss prevention (DLP) platform that finds sensitive data in SaaS apps, email, endpoints, browsers and AI tools and stops it from leaking. It was founded in 2018 by Isaac Madan and Rohan Sathe, came out of stealth in November 2019 (it originally launched as Watchtower AI) and is based in San Francisco; its privacy policy names the operating company as Shoreline Labs, Inc. Sathe is now chief executive. Nightfall has disclosed $60.3 million in funding: $20.3 million at its 2019 launch, with the latest round co-led by Bain Capital Ventures and Venrock, and a $40 million Series B led by WestBridge Capital in August 2022. We found no later round and no acquisition. The product has five parts. Data Detection and Response scans SaaS apps through their APIs, including Slack, Google Drive, Gmail, Jira, Confluence, Salesforce, Microsoft 365, Notion and Zendesk. Data Exfiltration Prevention uses lightweight agents and browser plugins on macOS and Windows (Chrome, Firefox, Safari and Edge) to stop browser uploads, AI prompts, personal cloud sync, USB transfers and pushes to personal code repositories, and traces files from corporate origin to external destination. AI Security covers employee AI use (personal ChatGPT accounts, unmanaged copilots and browser AI tools) and AI agents, with hooks for Cursor, Claude Code and VS Code, MCP server discovery, and monitoring of Claude Enterprise through Anthropic's Compliance API. Data Discovery and Classification is an add-on that scans data at rest, and Nyx, launched in July 2025, is an AI agent that investigates incidents and tunes policies. In September 2026 Nightfall opened early access to an MCP Gateway that enforces policy on agent tool calls before they run. **AI compliance coverage** Nightfall's compliance material is about data protection frameworks, not AI regulation. Its help center explains how it helps with HIPAA, PCI DSS, SOC 2 and ISO 27001, and its detectors cover PII, PHI, payment card data, secrets and source code, with an out-of-the-box PCI detection template. We found no material on the EU AI Act, ISO 42001 or the NIST AI RMF. Its security page says Nightfall is SOC 2 Type 2 certified and that its databases are all in the United States. **Who it's for** Security teams that want one tool for SaaS DLP, endpoint exfiltration and employee and agent use of AI, particularly companies with sensitive data in Slack, Google Workspace and Microsoft 365. Its published customer stories include a health tech company using it to keep Slack and GitHub HIPAA compliant.
Frameworks supported
Regulations, voluntary standards and compliance programs Nightfall AI documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Regulation · United States · active
Compliance program it supports (not its own certification) · International (PCI SSC)
Compliance program it supports (not its own certification) · International (ISO)
Attestations held
Third-party security attestations and certifications Nightfall AI documents on their own materials. These are point-in-time auditor opinions, not regulatory compliance. Always request the current report or certificate directly from the vendor before relying on it.
Attestation · United States (AICPA)
Nightfall AI features
Capabilities Nightfall AI markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
Data Leakage Prevention
Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.
Shadow AI Detection
Discovery of unsanctioned AI tools and model usage across an organization.
AI Discovery
Inventory of AI assets, models, prompts, and datasets across an enterprise environment.
Policy Enforcement
Mechanism for applying organizational and regulatory policies to AI usage at runtime.
Runtime Enforcement
Inline policy enforcement on AI inputs and outputs at request time.
Data Lineage
Tracking the origin, movement, transformations, and consumers of data used to train and serve AI systems — required for EU AI Act Article 10 data governance and GDPR Article 30 record-keeping.
Risk Scoring
Quantitative risk assessment for AI use cases, vendors, or model deployments.
Audit Logging
Tamper-evident logging of governance events (approvals, model changes, policy decisions) required by EU AI Act Article 12 and similar regulations.
Industries served
Integrations
Documented by Nightfall AI in public product materials.
- Slack
- Google Workspace
- Jira
- Microsoft Teams
- Microsoft SharePoint
- GitHub
- Okta
- Splunk
- Anthropic API
- OpenTelemetry
Nightfall AI pricing
Two packages, priced per user per year: Foundation Edition (DLP across SaaS, email, AI apps and endpoints, with real-time blocking) and Premier Edition (adds AI agent security: hooks for Cursor, Claude Code and VS Code, MCP discovery, Claude Cowork and Claude Enterprise monitoring, SIEM export), offered as Tier 1 (up to 3 apps) or Tier 2 (all supported apps). The pricing page shows no amounts; it says final pricing depends on user count and data volume and offers a free 7-day proof of value. Each user license covers two endpoint devices. Data Discovery and Classification is an add-on with 150 GB included and paid 1 TB, 3 TB, 5 TB and 20 TB packs.
Pros and cons of Nightfall AI
Pros
- Broad channel coverage in one product: SaaS apps through their APIs, email, macOS and Windows endpoints, the major browsers, employee AI tools and AI coding agents.
- Concrete, current agent coverage: Premier's hooks for Cursor, Claude Code and VS Code scan and block prompts, MCP tool calls, tool responses and shell commands, and 2026 release notes add CLI tools, Codex and Microsoft 365 Copilot.
- Documented use for HIPAA, PCI DSS, SOC 2 and ISO 27001, with PHI detectors, an out-of-the-box PCI detection template and a health tech customer story.
- The pricing structure is public even though amounts aren't: per user per year, two packages, two endpoints per license, storage packs for the discovery add-on and a free 7-day proof of value.
- File lineage for investigations: it traces documents from corporate origin to external destination, through downloads, renames and compression, with session replay and file previews.
Cons
- No prices: the pricing page lists packages "per user/year" without amounts and sends buyers to sales.
- No documented support for the EU AI Act, ISO 42001 or the NIST AI RMF; its compliance material covers data protection frameworks only.
- In the Premier agent hooks, LLM model responses are monitor-only; blocking applies to prompts, tool calls, tool responses and shell commands.
- The MCP Gateway announced in September 2026 is in early access, not generally available.
- Its security page says its databases are all in the United States; we found no EU hosting option.
- Package names are inconsistent on the pricing page: the plan cards say Foundation and Premier while the FAQ and comparison table refer to "Nightfall Complete", so confirm what each package includes in writing.
Alternatives to Nightfall AI
Harmonic Security
Compare Nightfall AI vs Harmonic Security
Prompt Security
Compare Nightfall AI vs Prompt Security
WitnessAI
Compare Nightfall AI vs WitnessAI
Lasso Security
Compare Nightfall AI vs Lasso Security
BigID
Compare Nightfall AI vs BigID
Securiti Data Command Center
Compare Nightfall AI vs Securiti Data Command Center
Frequently asked
What is Nightfall AI?+
Nightfall AI is a San Francisco data loss prevention platform, founded in 2018, that finds sensitive data in SaaS apps, email, endpoints, browsers and AI tools and blocks, redacts or coaches when it is about to leak. It also covers AI coding agents such as Cursor and Claude Code, and discovers MCP servers.
How much does Nightfall AI cost?+
Nightfall doesn't publish amounts. It prices per user per year across two packages, Foundation Edition and Premier Edition, and says the final price depends on user count and data volume. Each user license covers two endpoint devices, and it offers a free 7-day proof of value.
Does Nightfall AI cover AI agents and coding tools?+
Yes, in the Premier Edition. It adds hooks for Cursor, Claude Code and VS Code on macOS and Windows that scan and block prompts, MCP tool calls, tool responses and shell commands (model responses are monitor-only), plus discovery of local and remote MCP servers. Its MCP Gateway for agent tool calls entered early access in September 2026.
What are the alternatives to Nightfall AI?+
The closest alternatives in this directory are Harmonic Security, Prompt Security, WitnessAI and Lasso Security for keeping company data out of employee AI tools, and BigID and Securiti, data governance platforms in the same category. In VentureBeat's July 2025 coverage, Nightfall positioned itself against Microsoft Purview, Forcepoint and Symantec.
Sources
- Nightfall AI: Home (product lines, supported apps)
- Nightfall AI: Pricing (Foundation and Premier editions, per user per year, no amounts shown)
- Nightfall AI: About (co-founders Rohan Sathe and Isaac Madan, leadership)
- Nightfall AI: Security and compliance (SOC 2 Type 2, US data hosting)
- Nightfall AI: Privacy policy (Shoreline Labs, Inc.)
- Nightfall AI: AI Security (agents, MCP and employee AI use)
- Nightfall AI: Data Exfiltration Prevention (endpoints, browsers, lineage)
- Nightfall AI: Nightfall launches MCP Gateway, early access (September 9, 2026)
- Nightfall documentation: Release notes (January 2025 to August 2026)
- Nightfall documentation index (Slack, GitHub, Google Drive, Gmail, Jira, Confluence, Microsoft 365, Claude Enterprise, Okta, Splunk, Jamf, Intune)
- Nightfall documentation: How Nightfall fits into compliance frameworks (HIPAA, PCI DSS, SOC 2, ISO 27001)
- Nightfall AI: Simplify PCI DSS compliance and protect customer PII
- Nightfall AI: Health tech customer story (HIPAA across Slack and GitHub)
- Nightfall AI: Nightfall achieves compliance with SOC 2 Type 2 (October 18, 2021)
- Nightfall AI: Emerges from stealth with $20.3M led by Bain Capital Ventures and Venrock (November 7, 2019)
- Nightfall AI: Raises $40M Series B led by WestBridge Capital (August 10, 2022)
- TechCrunch: Nightfall emerges from stealth with $20M (November 7, 2019; founders, former name Watchtower AI)
- TechCrunch: Nightfall raises cash for its AI that detects sensitive data across apps (August 10, 2022; founded 2018, San Francisco, $60M raised)
- VentureBeat: Nightfall launches Nyx (July 30, 2025)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at Nightfall AI?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.