# Lasso Security AI visibility in LLM Security & AI Guardrails

Canonical: https://devtune.ai/verticals/llm-security-guardrails/lasso-security

[Website](https://www.lasso.security/)

Latest AI responses: 2026-11-14
[Tracked on paid plans](https://devtune.ai/pricing): Google AI Mode, Microsoft Bing Copilot Search, Claude with web search, Grok Search
Prompts: 25
Runs: 3


## Platforms

- google-ai
- perplexity
- chatgpt-search

Rank: 3
Joint rank: true
Total brands: 7
Measured responses: 75
Presence percent: 1.3333333333333335
Share of voice percent: 3.571428571428571
Average position: 3.5
Docs presence percent: 0
Blog presence percent: 0
Brand mention percent: 1.3333333333333335


## Profile

Overview: Lasso Security is a Tel Aviv- and New York-based AI security company founded in 2023. Its platform secures enterprise use of generative AI, AI agents and MCP connections. It combines discovery of AI agents and shadow AI, AI security posture management, automated red teaming and runtime protection. Runtime protection includes guardrails and an AI-gateway security layer that can block, mask or alert on risky prompts, tool calls and responses. Lasso also released an open-source MCP Gateway and, in September 2026, LEAP, a CPU-only guardrail it says needs no GPU. The company raised a $30M Series A in September 2026, bringing reported funding to over $37M. Reported customers include BMW, eToro, Fiverr, Optibus and the U.S. Department of Homeland Security. Pricing is quote-based, with some product listings on AWS Marketplace.
Product summary: Lasso is an AI security platform for agents and AI applications. It connects discovery of agents, MCP servers and employee AI usage, AI risk and posture management, automated red teaming, and runtime protection in a single loop. Runtime protection runs inline through guardrails, an intent-aware policy engine, an MCP Gateway and AI-gateway integrations. It logs the full execution trace for audit and compliance.


### Key capabilities

- Discovery and inventory of AI agents, MCP servers and employee GenAI tool usage, with risk scoring
- AI security posture management (AI-SPM) with secure-by-design policies
- Automated red teaming with a 3,000+ attack library, including multi-turn agentic attacks
- Runtime protection through the Intent Deputy engine, which analyzes intent and enforces policy inline (company claims 99.83% detection accuracy, under 50ms latency)
- Block, mask or alert enforcement, including data loss prevention (DLP) and role-based access controls
- MCP security, including an open-source MCP Gateway
- AI gateway security layer for Kong, Envoy, Portkey, LiteLLM and others
- LEAP CPU-only guardrail (company-reported under 5 ms verdicts) with a RAPID policy engine
- Execution-trace logging, audit trails and compliance mapping to frameworks such as NIST, OWASP and the EU AI Act



### Target users

- CISOs and security teams
- Enterprise AI and platform teams
- Developers building GenAI apps and agents
- Compliance and risk teams
- Federal and regulated-industry organizations



### Key use cases

- Discovering and governing shadow AI and employee GenAI usage
- Securing AI agents and agentic workflows
- MCP server discovery, risk scoring and runtime protection
- Protecting customer-facing GenAI apps and chatbots from prompt injection and data leakage
- Adding a security layer to AI gateways
- Automated red teaming of AI applications and agents
- AI compliance and audit reporting

Integrations ecosystem: Lasso works with AI gateways including Kong, Envoy, TrueFoundry, Portkey and LiteLLM, with no gateway configuration changes required. It inventories agents built on Claude Agent SDK, Microsoft Copilot, Salesforce Agentforce and AWS Bedrock Agents. It discovers MCP servers connected through Claude Code and Desktop, Cursor, Windsurf and Codex. Logs can be exported to a SIEM. It maps policies to NIST AI RMF, OWASP, MITRE, the EU AI Act, ISO 42001, SOC 2 and GDPR. Lasso offers products on AWS Marketplace and set up Lasso Federal with Swish Data for AWS GovCloud. Its MCP Gateway is open source on GitHub.
Pricing summary: Lasso does not publish pricing for its platform, which is sold through demos and custom quotes. AWS Marketplace lists "Lasso for Employees" at $20,000 for a 12-month commitment. Third-party coverage also reports "Secured Gateway for LLMs" at $50,000 for 12 months plus $0.01 per unit of extra usage.
Review summary: Lasso has a 4.7/5 average on Gartner Peer Insights from 13 ratings. The AI Application Security market shows 4.9 and AI Usage Control shows 3.5. Reviewers praise easy setup, visibility into GenAI usage and responsive support. One critical review cites limited AI tool coverage. The review base is small, and no verifiable PeerSpot reviews were found.
Competitive positioning: Lasso Security positions itself as an AI security platform for the agentic era. It links AI/agent discovery, risk posture management, automated red teaming and runtime protection (guardrails, MCP and AI-gateway security) in one continuous loop. It competes with other LLM security and guardrail vendors such as Prompt Security, Noma Security, Lakera, HiddenLayer, Guardrails AI and Arthur. Its stated differentiators are intent-aware ("Intent Security") policy enforcement, a CPU-only guardrail (LEAP) with a RAPID policy engine, an open-source MCP Gateway, and a federal and regulated-industry focus. Most differentiators come from company claims and company-reported benchmarks.
Limitations: Pricing is not published and is quote-based. A Gartner Peer Insights reviewer in the AI Usage Control market (3.0 rating, June 2026) said the tool supports only the top 5 AI tools. The review base is small: Gartner shows 13 ratings and PeerSpot has no reviews. One third-party profile notes the open-source MCP Gateway has had no commits since January 2026. Many performance claims are company-reported. Lasso is an early-stage company, founded in 2023.


### Source urls

- https://www.lasso.security/
- https://www.lasso.security/platform/ai-security
- https://www.lasso.security/use-cases/ai-gateway-security
- https://www.lasso.security/use-cases/mcp-security
- https://www.lasso.security/use-cases/agentic-ai-risk-management
- https://www.lasso.security/resources/lasso-security-announces-future-of-ai-security-with-cpu-based-guardrails
- https://www.lasso.security/resources/lasso-releases-first-open-source-security-gateway-for-mcp
- https://www.lasso.security/case-study/optibus
- https://dealroom.co/news/148347-lasso-security-raises-30m-series-a-to-run-ai-guardrails-without-gpus/
- https://siliconangle.com/2026/09/02/lasso-security-launches-cpu-only-ai-guardrail-raises-30m/
- https://www.gartner.com/reviews/vendor/lasso-security
- https://www.gartner.com/reviews/product/lasso-security-135995669
- https://aws.amazon.com/marketplace/pp/prodview-7ygm7pa3k5agg
- https://www.mintive.com/blog/lasso-security-pricing
- https://www.cbinsights.com/company/lasso-security/financials
- https://app.iangels.com/startup/lasso-security
- https://cybercompanyprofiles.com/companies/lasso-security
- https://tracxn.com/d/companies/lasso/__HqvLCtSQFd1uNOpZbRkU88jAvcDShMzs3niRzG00h9M

Research approved: 2026-11-05T14:15:22.493+00:00


### Customer outcomes

| Customer | Summary | Metric |
| --- | --- | --- |
| Optibus | Optibus secured AI interactions across 300+ employees with Lasso, moving from no visibility into AI usage to organization-wide enforcement. It reports a 60% reduction in AI-related security events and no added latency. | 100% shadow AI elimination; 60% reduction in AI-related security events |



### Reviews breakdown

| Platform | Score | Score max | Review count | Url |
| --- | --- | --- | --- | --- |
| Gartner Peer Insights | 4.7 | 5 | 13 | https://www.gartner.com/reviews/vendor/lasso-security |



### Review themes



#### Praised

- Minimal setup effort and quick time to value
- Clear visibility into employee GenAI tool usage and data flows
- Responsive, professional support team
- Effective prompt blocking and guardrails
- Fits naturally into existing security workflows



#### Criticized

- Supports only the top 5 AI tools (per one reviewer)
- Pricing is not public and requires a demo or quote
- Limited number of public reviews




### Company facts

Founded year: 2023
Hq: Tel Aviv, Israel (also New York offices)


#### Founders

- Elad Schulman
- Ophir Dror

Employees range: 51-200
Total funding: >$37M (company-reported)
Valuation: Not available
Arr: ~$2.1M (per investor page)
Customer count: Not available
Status: Private


Readiness: Not available


## Ranking

| Display name | Pair count | Total pairs | Presence percent | Avg position |
| --- | --- | --- | --- | --- |
| Lakera | 14 | 75 | 18.666666666666668 | 4.7105263157894735 |
| HiddenLayer | 5 | 75 | 6.666666666666667 | 6.8 |
| Guardrails AI | 2 | 75 | 2.666666666666667 | 3.5 |
| Noma Security | 2 | 75 | 2.666666666666667 | 4.75 |
| Lasso Security | 1 | 75 | 1.3333333333333335 | 3.5 |
| Arthur Shield | 0 | 75 | 0 | Not available |
| Prompt Security | 0 | 75 | 0 | Not available |



## Platform breakdown

| Platform | Prompt count | Presence rate |
| --- | --- | --- |
| google-ai | 0 | 0 |
| perplexity | 0 | 0 |
| chatgpt-search | 1 | 4 |



## Strengths





## Gaps

| Prompt text | Competitor presence count |
| --- | --- |
| Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them? | 2 |
| What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard? | 1 |
| Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready? | 1 |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | 1 |
| Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application? | 1 |



## Topic scores

| Topic name | Prompt count | Cited prompt count |
| --- | --- | --- |
| Capability | 5 | 0 |
| Developer Experience | 5 | 0 |
| Integrations & Ecosystem | 5 | 1 |
| Performance & Reliability | 5 | 0 |
| Setup & First Run | 5 | 0 |



## Prompt results

- Prompt text: What are my options for LLM guardrails with a free tier so a startup can test jailbreak and data-leak screening before paying?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 6 |



##### Chatgpt-search




- Prompt text: What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 3 |


- Prompt text: Which LLM security tools avoid lock-in by supporting open policy formats and exporting detection logs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 3



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| Lasso Security | 3 |


- Prompt text: Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 1 |



##### Chatgpt-search




- Prompt text: Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search




- Prompt text: Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which LLM security products offer a self-hosted or private deployment for a regulated company that can't send prompts to a third-party cloud?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What are the best AI firewalls for enterprises that need to enforce policy inline across multiple model providers without becoming a bottleneck?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 7 |


- Prompt text: What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What AI security platforms have published benchmarks or independent testing for prompt injection detection accuracy?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security products detect and redact sensitive data such as PII and secrets in both prompts and model outputs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 4 |


- Prompt text: Which AI security vendors keep detection up to date as new jailbreak techniques appear, and how do they prove it?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 5 |


- Prompt text: Which runtime AI protection tools scale to millions of requests per day and stay available if a screening call fails?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 2 |


- Prompt text: Which AI guardrail tools give application developers a simple API and clear verdicts, so they can act on a flagged prompt without guessing?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which AI security tools detect indirect prompt injection hidden in documents, web pages and emails that an AI agent reads?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| HiddenLayer | 2 |


- Prompt text: Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |



##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |


- Prompt text: What are the best AI security tools that produce actionable red-team reports a product team can fix, not just a list of failures?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What should I look at when choosing a first AI security tool for a company just rolling out an internal AI assistant to employees?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security platforms keep false positives low so legitimate user prompts aren't blocked and support tickets don't pile up?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| Noma Security | 1 |



##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security products integrate with an existing LLM gateway or proxy to apply policies centrally?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What AI guardrail platforms send alerts into our existing SIEM and security operations workflow?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |
| Lakera | 2 |


- Prompt text: What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Noma Security | 5 |


- Prompt text: Which LLM guardrail services add the least latency to each request, so a real-time chat or voice experience isn't slowed?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search







## Top sources

| Url | Title | Domain | Logo url | Source vertical | Content type | Citation count | Last30d count |
| --- | --- | --- | --- | --- | --- | --- | --- |
| https://www.lasso.security/use-cases/ai-gateway-security | AI Gateway Security | lasso.security | Not available | commercial | product_page | 3 | 3 |



## Response excerpts

| Prompt text | Platform | Excerpt |
| --- | --- | --- |
| Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection? | chatgpt-search | Sources: Introduction to AI Agent SecurityAPI Overview Documentation 2. Lasso Security Strong framework/gateway independence - Integrates with Kong, Envoy, TrueFoundry, Portkey and LiteLLM. |



## Competitor excerpts

| Platform | Competitor name | Excerpt |
| --- | --- | --- |
| google-ai | HiddenLayer | HiddenLayer (Model Scanning): One of the leading enterprise solutions for ML security. |
| chatgpt-search | HiddenLayer | ## Platforms worth evaluating \| Platform \| Type \| Main security capabilities \| \| --- \| --- \| --- \| \| HiddenLayer Model Scanner \| Commercial \| Malware, backdoors, vulnerabilities, model integrity, and model lineage. |
| chatgpt-search | Lakera | The strongest initial candidates are Check Point Lakera, Netskope AI Guardrails, SentinelOne Prompt Security, and Radware LLM Firewall. |
| perplexity | Guardrails AI | The strongest matches are Guardrails AI and NVIDIA NeMo Guardrails. Both let engineers define custom checks and policies, but “production-ready” needs qualification: the open-source frameworks provide deployable components; production reliability... |
| perplexity | Lakera | \| Option \| Why it’s practical for a small team \| Caveat \| \|---\|---\|---\| \| Lakera Guard \| Self-serve Community access offers up to 10,000 requests/month. |
| chatgpt-search | Lakera | My shortlist would be: 1. Check Point AI Guardrails (formerly Lakera Guard) – strong enterprise runtime security with centralized enforcement. |



## Trend

Visibility delta: 0
Avg position delta: -8
Citation count delta: 0