Noma Security
AI agent security platform covering discovery and posture (AI-SPM), agent access control, runtime detection and response, and red teaming
Last checked October 15, 2026Quick facts: Noma Security is an AI compliance vendor founded in 2023 and headquartered in New York, United States. The vendor publicly documents coverage for EU AI Act, NIST AI RMF, and ISO/IEC 42001. Pricing is available on request. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About Noma Security
Noma Security is a security and governance platform for AI agents and the wider AI lifecycle. It was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met in the Israel Defense Forces' 8200 intelligence unit. Its contact page lists a single office, in New York, and its development center is in Tel Aviv. Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners and a $25 million Series A led by Ballistic Ventures, announced together when it came out of stealth (reported October 31, 2024), and a $100 million Series B led by Evolution Equity Partners in July 2025, with Ballistic and Glilot taking part. Databricks Ventures made an undisclosed investment in June 2025, alongside a partnership with Databricks. The platform has four products. AI-SPM finds agents, MCP servers, skills, models and tools across cloud platforms, SaaS platforms, code repositories and endpoints (through existing EDR or MDM tools), and flags misconfigurations such as excessive agency, unsandboxed agents and secrets in agent instructions. It also scans models from open registries such as Hugging Face for malicious artifacts, hidden instructions and known vulnerabilities, and assesses MCP servers for supply chain risk. Agent Access Control defines which agents are approved, what data they can reach and what actions they can take. AI-DR monitors agent sessions at runtime for prompt injection (including indirect injection through tool responses), data leakage, tool poisoning and scope violations; it can alert, block, mask data inline, steer the agent, require human approval or stop it with a kill switch. AI Red Teaming runs multi-turn attack campaigns against apps and agents, including in CI/CD pipelines, and feeds findings into runtime policies. Policies are enforced through agent hooks, AI and MCP gateways, agent SDKs and APIs. Noma covers SaaS agents built in Microsoft Copilot Studio and Salesforce Agentforce, and homegrown agents on Amazon Bedrock, Azure AI Foundry and Databricks or built with LangChain and CrewAI. Since February 2026 it has been available through the Extended plan of AWS Security Hub, covering Amazon Bedrock and SageMaker workloads. **AI compliance coverage** Noma says its AI-SPM and red-teaming findings map to the NIST AI RMF, the EU AI Act and ISO 42001, as well as the OWASP Top 10 for LLMs and MITRE ATLAS, and its red-teaming product offers these frameworks as compliance presets. A UiPath case study on its site says Noma's scanning supported UiPath's ISO/IEC 42001:2023 certification. We found no published control-by-control mappings. **Who it's for** Large enterprises with many AI agents across endpoints, SaaS and cloud that want one security layer from discovery to runtime. Noma says it is used by more than 10% of the Fortune 100, and testimonials on its site come from people at UiPath, Kantar, Best Buy, Nielsen and Endor Labs.
Frameworks supported
Regulations, voluntary standards and compliance programs Noma Security documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Regulation · EU · Phased — in force; high-risk rules deferred
Voluntary standard · US · voluntary
Voluntary standard · Global · voluntary
Noma Security features
Capabilities Noma Security markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
AI Discovery
Inventory of AI assets, models, prompts, and datasets across an enterprise environment.
Shadow AI Detection
Discovery of unsanctioned AI tools and model usage across an organization.
AI Bill of Materials
Structured inventory of components, datasets, and models that make up an AI system.
AI Supply Chain Risk
Assessment of risks from third-party models, datasets, and AI service providers.
Policy Enforcement
Mechanism for applying organizational and regulatory policies to AI usage at runtime.
Runtime Enforcement
Inline policy enforcement on AI inputs and outputs at request time.
Prompt Injection Defense
Detection and mitigation of malicious prompts intended to bypass system instructions or exfiltrate data.
Data Leakage Prevention
Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.
Behavioral Monitoring
Continuous observation of AI system behavior for drift, anomalies, and policy violations.
Human-in-the-Loop
Workflows that require human review or approval for AI decisions.
Audit Logging
Tamper-evident logging of governance events (approvals, model changes, policy decisions) required by EU AI Act Article 12 and similar regulations.
LLM Red Teaming
Automated adversarial testing of LLMs for jailbreaks, prompt injection, and unsafe outputs.
Agentic Red Teaming
Automated adversarial testing using AI agents to probe model and application weaknesses.
Compliance Reporting
Automated generation of audit-ready reports demonstrating compliance with AI regulations.
Industries served
Integrations
Documented by Noma Security in public product materials.
- Databricks
- Amazon Bedrock
- AWS SageMaker
- Hugging Face
- LangChain
- CrewAI
- AWS Marketplace
Noma Security pricing
No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers.
Pros and cons of Noma Security
Pros
- One platform across the agent lifecycle: discovery and posture (AI-SPM), access control, runtime detection and response (AI-DR) and red teaming, with red-team findings feeding runtime policies.
- Maps posture and red-teaming findings to the EU AI Act, NIST AI RMF and ISO 42001, and a published case study says Noma supported a named customer, UiPath, in its ISO/IEC 42001 certification.
- Finds agents across endpoints (through existing EDR or MDM tools), SaaS platforms such as Copilot Studio and Agentforce, and cloud platforms such as Bedrock and Databricks.
- Runtime responses go beyond blocking: inline data masking, steering the agent, human approval or a kill switch, with each detector tunable.
- Scans models pulled from open registries such as Hugging Face for malicious artifacts and known vulnerabilities, and assesses MCP servers for supply chain risk.
Cons
- No public pricing on its site; the only list price, on AWS Marketplace, is a $200,000 12-month platform contract that doesn't say how many units it covers.
- Framework mappings are described but not published, so the depth of EU AI Act, NIST AI RMF and ISO 42001 coverage can only be checked in a demo.
- Many platforms appear only as logos (for example Salesforce, CrowdStrike, Google Cloud), and we found no public product documentation describing how each integration works.
- A security tool rather than a governance workflow: its product pages describe mapping findings to frameworks, not policy templates, AI impact assessments or regulatory obligation tracking.
Alternatives to Noma Security
Pillar Security
Compare Noma Security vs Pillar Security
HiddenLayer
Compare Noma Security vs HiddenLayer
Prisma AIRS
Compare Noma Security vs Prisma AIRS
Cisco AI Defense
Compare Noma Security vs Cisco AI Defense
Lasso Security
Compare Noma Security vs Lasso Security
WitnessAI
Compare Noma Security vs WitnessAI
Frequently asked
What is Noma Security?+
Noma Security is an AI agent security platform founded in 2023 by Niv Braun and Alon Tron. It discovers AI agents, MCP servers and models across endpoints, SaaS and cloud (AI-SPM), controls which agents and tools are allowed, detects and stops risky agent behavior at runtime (AI-DR) and red-teams AI apps and agents. It has an office in New York and a development center in Tel Aviv.
How much funding has Noma Security raised?+
Noma has raised $132 million: a $7 million seed round led by Glilot Capital Partners, a $25 million Series A led by Ballistic Ventures (both announced in late 2024) and a $100 million Series B led by Evolution Equity Partners in July 2025. Databricks Ventures also invested in June 2025. Noma is independent; we found no acquisition.
Does Noma Security support the EU AI Act, NIST AI RMF and ISO 42001?+
Yes, as a source of evidence. Noma says its posture and red-teaming findings map to the EU AI Act, the NIST AI RMF and ISO 42001, and a UiPath case study on its site says Noma supported UiPath's ISO/IEC 42001 certification. We found no published control-by-control mappings, and it isn't a governance workflow tool, so ask to see the framework reports in a demo.
What are the alternatives to Noma Security?+
The closest alternatives in this directory are Pillar Security, HiddenLayer, Palo Alto Networks Prisma AIRS, Cisco AI Defense, Lasso Security and WitnessAI: AI security platforms that combine some mix of AI discovery, posture management, red teaming and runtime protection.
Sources
- Noma Security: Home (AI-SPM, Agent Access Control, AI-DR, AI Red Teaming; customer testimonials)
- Noma Security: About (leadership, investors, Fortune 100 claim)
- Noma Security: Contact (New York office)
- Noma Security: AI-SPM (discovery, misconfigurations, framework mappings)
- Noma Security: AI-DR (runtime detection and response for agents)
- Noma Security: AI Red Teaming (multi-turn campaigns, CI/CD, compliance presets)
- Noma Security: UiPath case study (AI-BOM, model scanning, support for ISO/IEC 42001:2023 certification)
- Noma Security: AI supply chain security (Hugging Face model and MCP server scanning)
- Noma Security: SaaS agents (Microsoft Copilot Studio, Salesforce Agentforce)
- Noma Security: Homegrown agents (Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI)
- AWS Marketplace: Noma Security Platform (12-month price)
- PR Newswire via The AI Journal: Noma integrates with the Extended plan for AWS Security Hub (New York, February 27, 2026; Bedrock and SageMaker; $132M total funding)
- AWS News Blog: AWS Security Hub Extended offers full-stack enterprise security with curated partner solutions (February 26, 2026; Noma named as a partner)
- Noma Security: Databricks and Noma Security announce partnership, with a strategic investment from Databricks Ventures (June 5, 2025)
- TechCrunch: Noma is building tools to spot security issues with AI apps ($25M Series A led by Ballistic, $7M seed led by Glilot; founded 2023; October 31, 2024)
- Calcalist: Noma Security raises $100M Series B led by Evolution Equity Partners (July 31, 2025; $132M total)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at Noma Security?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.