WitnessAI
Network-level visibility, policy control and runtime protection for employee AI use and AI agents, with list prices on AWS Marketplace
Last checked October 15, 2026Quick facts: WitnessAI is an AI compliance vendor founded in 2023 and headquartered in Mountain View, United States. The vendor publicly documents coverage for EU AI Act, ISO/IEC 42001, NIST AI RMF, and PCI DSS. Pricing is tiered. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About WitnessAI
WitnessAI is an AI security and governance platform for enterprise AI use by employees and by AI agents. It was founded in 2023 and incubated by Ballistic Ventures. CEO Rick Caccia, previously SVP of marketing at Palo Alto Networks, is the only co-founder the company names. It is based in Mountain View, California, and has raised about $85.5 million in two announced rounds: $27.5 million co-led by GV and Ballistic Ventures (May 2024) and $58 million in strategic funding led by Sound Ventures (January 2026), with Fin Capital, Qualcomm Ventures, Samsung Ventures and Forgepoint Capital Partners taking part. The platform has three modules. Observe finds the AI apps, agents and MCP servers in use, drawing on a catalog of thousands of AI applications, and classifies conversations by intent. Control sets policies by department, role, intent or workforce type, routes prompts to approved or cheaper models, limits agents to approved MCP servers and tools, redacts sensitive data in real time and keeps audit trails. Protect (Witness Protect, which WitnessAI calls "the enterprise AI firewall") screens prompts and responses for prompt injection, jailbreaks and harmful output and tokenizes PII, credentials and secrets. Witness Attack runs automated red teaming against models before deployment. WitnessAI says it sees AI activity across the network without browser extensions or endpoint clients, including native apps such as Windows 11 Copilot and Office 365, and it integrates with F5 BIG-IP SSL Orchestrator for encrypted AI traffic. Each customer gets a single-tenant instance with customer-controlled encryption. In January 2026 it launched WitnessAI Agentic Security, which covers coding agents such as Claude Code, Cursor and Codex and records the user, agent, tool and rule for every blocked tool call. In July 2026 it added AI FinOps features: spend estimates for unsanctioned AI apps and agents, metering of sanctioned token use, an ROI dashboard and cost-based model routing. **AI compliance coverage** The compliance page offers logging of every AI app and interaction, policy enforcement and masking of regulated data, but names no AI framework. WitnessAI's AWS Marketplace listing says its audit trails support compliance reporting for the EU AI Act, ISO/IEC 42001, the NIST AI RMF and PCI DSS 4.0.1. We found no control mappings for any of them. WitnessAI announced a SOC 2 Type II attestation in October 2025; it has no public trust center. **Who it's for** Large enterprises that want to see and govern how employees and agents use public and internal AI tools, and to add runtime protection to their own AI apps. WitnessAI says its customers include financial services firms, utilities, airlines, automakers, retailers and telecoms. InComm Payments is the only customer it names on its site.
Frameworks supported
Regulations, voluntary standards and compliance programs WitnessAI documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Regulation · EU · Phased — in force; high-risk rules deferred
Voluntary standard · Global · voluntary
Voluntary standard · US · voluntary
Compliance program it supports (not its own certification) · International (PCI SSC)
WitnessAI features
Capabilities WitnessAI markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
Shadow AI Detection
Discovery of unsanctioned AI tools and model usage across an organization.
AI Discovery
Inventory of AI assets, models, prompts, and datasets across an enterprise environment.
Policy Enforcement
Mechanism for applying organizational and regulatory policies to AI usage at runtime.
Data Leakage Prevention
Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.
Prompt Injection Defense
Detection and mitigation of malicious prompts intended to bypass system instructions or exfiltrate data.
LLM Guardrails
Runtime input/output filtering for LLMs — PII redaction, toxicity blocking, prompt injection defense, policy enforcement.
Runtime Enforcement
Inline policy enforcement on AI inputs and outputs at request time.
LLM Guardrails & Content Filtering
Runtime guardrails that block or redact unsafe prompts and responses in production LLM applications.
Audit Logging
Tamper-evident logging of governance events (approvals, model changes, policy decisions) required by EU AI Act Article 12 and similar regulations.
LLM Red Teaming
Automated adversarial testing of LLMs for jailbreaks, prompt injection, and unsafe outputs.
Industries served
Integrations
Documented by WitnessAI in public product materials.
- Okta
- Microsoft Entra ID
- AWS Marketplace
WitnessAI pricing
No prices on witness.ai. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user (minimum 1,000 users, $180,000), WitnessAI Agentic Visibility at $24 per agent (minimum 2,500 agents, $60,000) and WitnessProtect model protection guardrail at $300,000.
Pros and cons of WitnessAI
Pros
- Public list prices on AWS Marketplace ($180 per user a year for the employee product, $24 per agent for agent visibility), so buyers can budget before a sales call.
- One policy engine for employees and AI agents: discovery of AI apps, agents and MCP servers, intent-based policies, approved-tool enforcement for agents and real-time redaction.
- Network-level capture that WitnessAI says covers native desktop apps such as Windows 11 Copilot and Office 365 without browser extensions or endpoint clients.
- Single-tenant instance per customer with customer-controlled encryption and multi-region deployment, for data residency requirements.
- Also protects AI apps and models a company builds, with runtime guardrails (Witness Protect) and automated red teaming (Witness Attack).
Cons
- No AI framework mappings: the EU AI Act, ISO 42001 and the NIST AI RMF appear only in a one-line AWS Marketplace claim about audit-trail reporting.
- High entry point: AWS Marketplace minimums put the employee product at $180,000 a year and model protection at $300,000 a year.
- No public trust center: SOC 2 Type II is documented only by a company announcement (October 2025) that doesn't name the auditor, and by badges in the site footer.
- Product documentation is password-protected, so integrations, deployment requirements and data handling can't be checked before a sales call.
- InComm Payments is the only customer named on its site; the rest are described by industry.
- Detection accuracy claims, such as a 99.3% true-positive rate against prompt injection and jailbreaks, rest on what WitnessAI calls its private multilingual benchmark.
Alternatives to WitnessAI
Frequently asked
What is WitnessAI?+
WitnessAI is a Mountain View, California, AI security and governance platform founded in 2023. Its Observe, Control and Protect modules find AI apps, agents and MCP servers in use, apply policies to employees and agents, redact sensitive data and block prompt injection and jailbreaks at runtime. It has raised about $85.5 million, most recently $58 million led by Sound Ventures in January 2026.
How much does WitnessAI cost?+
WitnessAI doesn't publish prices on its website. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user with a 1,000-user minimum ($180,000), Agentic Visibility at $24 per agent with a 2,500-agent minimum ($60,000) and the WitnessProtect model guardrail at $300,000.
Does WitnessAI support the EU AI Act, ISO 42001 or the NIST AI RMF?+
Only indirectly. WitnessAI's AWS Marketplace listing says its audit trails support compliance reporting for the EU AI Act, ISO/IEC 42001, the NIST AI RMF and PCI DSS 4.0.1, but its website publishes no control mappings for these frameworks. It provides the logs and policy evidence; a governance platform would still be needed for risk assessments and documentation.
What are the alternatives to WitnessAI?+
The closest alternatives in this directory are Prompt Security (owned by SentinelOne since September 2025), Harmonic Security, Lasso Security, Palo Alto Networks Prisma AIRS, Cisco AI Defense and Noma Security. Each is an AI security platform that discovers AI use, enforces usage policies or applies runtime guardrails.
Sources
- WitnessAI: Home (Observe, Control, Protect; InComm Payments testimonial)
- WitnessAI: Platform overview (network-level visibility, single-tenant architecture)
- WitnessAI: Protect (Witness Protect runtime guardrails, Witness Attack red teaming)
- WitnessAI: AI agent security (MCP servers, tool calls, Claude Code, Cursor, Codex)
- WitnessAI: For compliance (logging, policy enforcement, data masking)
- WitnessAI: About (leadership, board, investors, Mountain View address)
- WitnessAI: Raises $58 million, announces WitnessAI Agentic Security (January 13, 2026)
- WitnessAI: Raises $27.5 million, co-led by GV and Ballistic Ventures (May 21, 2024)
- WitnessAI: Completes SOC 2 Type II audit (October 21, 2025)
- WitnessAI: Introduces AI FinOps capabilities (July 22, 2026)
- WitnessAI blog: Zscaler alternatives for AI security (99.3% true-positive rate on WitnessAI's private multilingual benchmark)
- AWS Marketplace: WitnessAI Unified AI Security and Governance Platform (12-month prices)
- WitnessAI docs: Okta Identity (page title; content password-protected)
- WitnessAI docs: Microsoft Entra ID (Azure AD) (page title; content password-protected)
- TechCrunch: WitnessAI is building guardrails for generative AI models ($27.5M from Ballistic Ventures and GV, May 2024)
- SecurityWeek: WitnessAI raises $58 million (January 2026; founded 2023, over $85M raised)
- SecurityBrief: WitnessAI integrates with F5 BIG-IP SSL Orchestrator (February 2025)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at WitnessAI?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.