# Noma Security AI visibility in LLM Security & AI Guardrails

Canonical: https://devtune.ai/verticals/llm-security-guardrails/noma-security

[Website](https://noma.security/)

Latest AI responses: 2026-11-14
[Tracked on paid plans](https://devtune.ai/pricing): Google AI Mode, Microsoft Bing Copilot Search, Claude with web search, Grok Search
Prompts: 25
Runs: 3


## Platforms

- google-ai
- perplexity
- chatgpt-search

Rank: 3
Joint rank: true
Total brands: 7
Measured responses: 75
Presence percent: 2.666666666666667
Share of voice percent: 7.142857142857142
Average position: 4.75
Docs presence percent: 0
Blog presence percent: 0
Brand mention percent: 4


## Profile

Overview: Noma Security is a private AI and agent security company founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO). It is headquartered in New York with R&D in Tel Aviv. Its platform helps enterprise security teams discover AI assets, agents and MCP servers, assess and prioritize risk, test applications through automated red teaming, and enforce runtime protection and access policies. It supports homegrown agents on AWS Bedrock, Azure AI Foundry and Databricks, SaaS agent platforms, and coding agents such as Claude Code and Cursor. Noma emerged from stealth in late 2024 and raised a $100M Series B in July 2025, bringing total funding to about $132M. Named customers include UiPath and Kantar. It has been recognized by Gartner in AI TRiSM, and in 2026 it was named to the Fortune Cyber 60 list.
Product summary: Noma is an enterprise AI and agent security and governance platform. It discovers every AI model, agent and MCP server, maps their connections and permissions in an Agentic Risk Map, and assesses posture and supply-chain risk. It runs automated red teaming and enforces runtime policies that can block, steer, mask data or alert a human. It also provides agent access control and an agent registry, and is delivered as SaaS or hybrid.


### Key capabilities

- Continuous discovery and inventory of AI models, agents, MCP servers and AI assets
- AI security posture management (AI-SPM) with risk prioritization
- AI supply chain security, including malicious models and MCP servers
- Agentic Risk Map visualizing agent connections, tool access and blast radius
- Automated AI and agentic red teaming, including CI/CD testing
- Runtime protection (AI-DR) against prompt injection, tool abuse, data leakage and risky actions
- Agent access control with approve, review or block decisions per agent and MCP connection
- Inline data masking and policy actions (block, steer, alert a human, killswitch)
- Compliance audit trails and OWASP-aligned testing



### Target users

- CISOs and enterprise security teams
- AI security and governance teams
- AI/ML and platform engineering teams building agents
- Compliance and risk officers
- DevSecOps teams



### Key use cases

- Discovering shadow AI and inventorying agents across the enterprise
- Securing homegrown agents built on Bedrock, Azure AI Foundry and Databricks
- Governing SaaS agent platforms such as Copilot Studio, Agentforce and ServiceNow
- Controlling coding agents and MCP servers on developer machines
- Red teaming AI applications before production
- Runtime blocking of prompt injection and sensitive-data exfiltration
- Automating AI compliance and governance checks

Integrations ecosystem: Noma lists integrations (reported as 80+) with AWS Bedrock, Azure AI Foundry, Databricks, Vertex AI, Snowflake, Microsoft Copilot Studio, Salesforce Agentforce, ServiceNow, GitHub, GitLab, Azure DevOps, LangChain, CrewAI, Claude Code, Cursor, GitHub Copilot and Codex. It is available through the AWS Security Hub Extended plan and on AWS Marketplace. It was a launch partner for the Databricks Unity AI Gateway partner ecosystem (June 2026). It supports SaaS and hybrid or on-premises deployment, and has a UiPath Marketplace connector.
Pricing summary: No public list pricing on the Noma website; quotes are sales-led through a demo. The AWS Marketplace listing for the Security Hub Extended offering shows usage-based rates: $8 per million tokens scanned (hybrid) or $16 (SaaS), $130 per asset scanned, and $650 per red teaming test. Third-party reviewers describe pricing as based on agents, MCP servers, integrations and deployment scope.
Review summary: Independent review coverage is sparse. Gartner Peer Insights shows a single 4.0 rating, which praises risk identification, vulnerability reporting and security insights. No G2, PeerSpot or AWS Marketplace reviews were found. Third-party analysts note limited user feedback and low pricing transparency. Customer quotes appear mainly in vendor-published case studies.
Competitive positioning: Noma Security positions itself as a unified enterprise platform for AI and agent security. It combines continuous AI and agent discovery, AI security posture management (AI-SPM), AI red teaming, and runtime protection (AI-DR) in one product. Its recent messaging centers on governing agent behavior, MCP servers and agent access control, not only filtering prompts. It targets large enterprises building agents on AWS Bedrock, Azure AI Foundry and Databricks, using SaaS agent platforms such as Copilot Studio, Salesforce Agentforce and ServiceNow, or running coding agents such as Claude Code, Cursor and GitHub Copilot. Several press and review sources describe it as a Gartner-recognized AI TRiSM vendor. A Calcalist report (April 2026) says it remained independent while many AI-security rivals were acquired. Public independent review coverage is thin, so comparative claims rest mostly on vendor and press material.
Limitations: Pricing is not publicly detailed beyond AWS Marketplace usage rates, and quotes are sales-gated. Independent user-review coverage is very limited (one Gartner Peer Insights rating), so there is little third-party evidence on false positives, deployment effort or support. Noma is a young company (founded 2023), and public customer outcomes are vendor-published with limited methodology. Its enterprise focus may make it less suited to small teams or open-source, developer-first guardrail needs.


### Source urls

- https://noma.security/
- https://www.noma.security/blog/noma-security-raises-100m-to-drive-adoption-of-ai-agent-security
- https://www.reuters.com/world/middle-east/israeli-cyber-startup-noma-security-raises-100-million-private-funding-round-2025-07-31/
- https://noma.security/blog/noma-security-launches-first-agentic-ai-security-solution
- https://noma.security/case-study/uipath/
- https://noma.security/blog/kantar-secures-the-explosion-of-ai-agents-with-noma/
- https://www.gartner.com/reviews/product/noma-security-1489737774
- https://aws.amazon.com/marketplace/pp/prodview-eteto3csvwyd6
- https://www.prnewswire.com/news-releases/noma-ai-security-integrates-with-new-extended-plan-for-aws-security-hub-302699823.html
- https://noma.security/blog/noma-and-databricks-secure-ai-where-it-runs
- https://appsecsanta.com/noma-security
- https://venturebeat.com/business/noma-arrives-to-provide-security-from-data-storage-to-deployment-for-enterprise-ai-solutions
- https://www.calcalist.co.il/calcalistech/article/2i0s158nj
- https://noma.security/blog/noma-named-to-the-2026-27-fortune-cyber-60
- https://www.airframe.ai/product/noma-security/analysis

Research approved: 2026-11-05T14:15:22.509+00:00


### Customer outcomes

| Customer | Summary | Metric |
| --- | --- | --- |
| UiPath | UiPath selected Noma after evaluating multiple vendors. It reports full AI discovery and governance within days, and AI security and compliance checks that once took weeks now complete in hours. (Vendor-published case study.) | Compliance checks reduced from weeks to hours |
| Kantar | Kantar used Noma to discover, red-team and govern its AI agents. Iterative testing raised one application's security score, and Noma surfaced risks that existing tooling had not flagged. (Vendor-published.) | Security score improved from 65% to 85% |



### Reviews breakdown

| Platform | Score | Score max | Review count | Url |
| --- | --- | --- | --- | --- |
| Gartner Peer Insights | 4 | 5 | 1 | https://www.gartner.com/reviews/product/noma-security-1489737774 |



### Review themes



#### Praised

- Strong AI security risk identification and mitigation
- Useful vulnerability reporting with clear remediation recommendations
- Strong AI asset discovery and integrations (per third-party scorecard)
- Customer-reported responsive support and knowledge transfer (vendor case study)



#### Criticized

- Very limited independent user reviews
- Pricing not transparent publicly
- Young vendor, so integration and longevity risk (per analyst commentary)




### Company facts

Founded year: 2023
Hq: New York, USA (R&D in Tel Aviv, Israel)


#### Founders

- Niv Braun
- Alon Tron

Employees range: ~110 (April 2026 press report; estimates vary)
Total funding: $132M
Valuation: Not available
Arr: Not available
Customer count: Dozens of enterprise customers (company-
Status: Private


Readiness: Not available


## Ranking

| Display name | Pair count | Total pairs | Presence percent | Avg position |
| --- | --- | --- | --- | --- |
| Lakera | 14 | 75 | 18.666666666666668 | 4.7105263157894735 |
| HiddenLayer | 5 | 75 | 6.666666666666667 | 6.8 |
| Guardrails AI | 2 | 75 | 2.666666666666667 | 3.5 |
| Noma Security | 2 | 75 | 2.666666666666667 | 4.75 |
| Lasso Security | 1 | 75 | 1.3333333333333335 | 3.5 |
| Arthur Shield | 0 | 75 | 0 | Not available |
| Prompt Security | 0 | 75 | 0 | Not available |



## Platform breakdown

| Platform | Prompt count | Presence rate |
| --- | --- | --- |
| google-ai | 1 | 4 |
| perplexity | 0 | 0 |
| chatgpt-search | 1 | 4 |



## Strengths

| Prompt text | Platform count | Avg position |
| --- | --- | --- |
| What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers? | 1 | 1 |
| What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them? | 1 | 5 |



## Gaps

| Prompt text | Competitor presence count |
| --- | --- |
| Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection? | 2 |
| Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them? | 2 |
| What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard? | 1 |
| Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready? | 1 |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | 1 |



## Topic scores

| Topic name | Prompt count | Cited prompt count |
| --- | --- | --- |
| Capability | 5 | 2 |
| Developer Experience | 5 | 0 |
| Integrations & Ecosystem | 5 | 0 |
| Performance & Reliability | 5 | 0 |
| Setup & First Run | 5 | 0 |



## Prompt results

- Prompt text: What are my options for LLM guardrails with a free tier so a startup can test jailbreak and data-leak screening before paying?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 6 |



##### Chatgpt-search




- Prompt text: What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 3 |


- Prompt text: Which LLM security tools avoid lock-in by supporting open policy formats and exporting detection logs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| Lasso Security | 3 |


- Prompt text: Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 1 |



##### Chatgpt-search




- Prompt text: Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search




- Prompt text: Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which LLM security products offer a self-hosted or private deployment for a regulated company that can't send prompts to a third-party cloud?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What are the best AI firewalls for enterprises that need to enforce policy inline across multiple model providers without becoming a bottleneck?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 7 |


- Prompt text: What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What AI security platforms have published benchmarks or independent testing for prompt injection detection accuracy?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security products detect and redact sensitive data such as PII and secrets in both prompts and model outputs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 4 |


- Prompt text: Which AI security vendors keep detection up to date as new jailbreak techniques appear, and how do they prove it?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 5 |


- Prompt text: Which runtime AI protection tools scale to millions of requests per day and stay available if a screening call fails?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 2 |


- Prompt text: Which AI guardrail tools give application developers a simple API and clear verdicts, so they can act on a flagged prompt without guessing?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which AI security tools detect indirect prompt injection hidden in documents, web pages and emails that an AI agent reads?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| HiddenLayer | 2 |


- Prompt text: Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |



##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |


- Prompt text: What are the best AI security tools that produce actionable red-team reports a product team can fix, not just a list of failures?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What should I look at when choosing a first AI security tool for a company just rolling out an internal AI assistant to employees?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security platforms keep false positives low so legitimate user prompts aren't blocked and support tickets don't pile up?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers?


#### Brand position by platform

Google-ai: 1
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| Noma Security | 1 |



##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security products integrate with an existing LLM gateway or proxy to apply policies centrally?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What AI guardrail platforms send alerts into our existing SIEM and security operations workflow?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |
| Lakera | 2 |


- Prompt text: What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 5



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Noma Security | 5 |


- Prompt text: Which LLM guardrail services add the least latency to each request, so a real-time chat or voice experience isn't slowed?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search







## Top sources

| Url | Title | Domain | Logo url | Source vertical | Content type | Citation count | Last30d count |
| --- | --- | --- | --- | --- | --- | --- | --- |
| https://noma.security/solutions/mcp-security | MCP Security: Discover, Govern, and Protect MCP Servers \| Noma | noma.security | https://izgwnlozsmjmqjsnddmg.supabase.co/storage/v1/object/public/domain-logos/9dbab6f8-54b2-49a0-8181-89a0ed130318/7ed65e31-d00d-4dc5-bcfe-7c98ffc88cc0/f3a42bb35c02c32ff90586c76fb1d031ef340e3b.tone-opaque.png | commercial | product_page | 2 | 2 |
| https://noma.security/ | Agent Security and Governance \| Noma | noma.security | https://izgwnlozsmjmqjsnddmg.supabase.co/storage/v1/object/public/domain-logos/9dbab6f8-54b2-49a0-8181-89a0ed130318/7ed65e31-d00d-4dc5-bcfe-7c98ffc88cc0/f3a42bb35c02c32ff90586c76fb1d031ef340e3b.tone-opaque.png | commercial | landing_page | 2 | 2 |
| https://noma.security/blog/noma-launches-agentic-access-control-to-govern-ai-agents-and-mcp-servers-across-the-enterprise | Noma Launches Agentic Access Control to Govern AI Agents and MCP Servers Across the Enterprise \| Noma | noma.security | https://izgwnlozsmjmqjsnddmg.supabase.co/storage/v1/object/public/domain-logos/9dbab6f8-54b2-49a0-8181-89a0ed130318/7ed65e31-d00d-4dc5-bcfe-7c98ffc88cc0/f3a42bb35c02c32ff90586c76fb1d031ef340e3b.tone-opaque.png | commercial | blog_post | 2 | 2 |



## Response excerpts

| Prompt text | Platform | Excerpt |
| --- | --- | --- |
| What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers? | google-ai | Noma Security (MCP Security & Agent Runtime) * What it does: Provides end-to-end security for agent ecosystems, specifically focusing on discovering approved and "Shadow MCP" servers, evaluating supply chain risks (like unpinned pac... |
| Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them? | chatgpt-search | Pickle Scanninghub-docs/docs/hub/security-protectai.md at main · huggingface/hub-docs \| \| Noma Security \| Commercial \| Scans models from open registries for malicious artifacts, hidden instructions, and known vulnerabilities. |
| What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them? | chatgpt-search | \| Vendor \| Product \| Primary focus \| \|---\|---\|---\| \| Noma Security \| Noma Security \| AI asset discovery, agent governance, MCP security and access control. |



## Competitor excerpts

| Platform | Competitor name | Excerpt |
| --- | --- | --- |
| perplexity | Lakera | Lakera Guard (now Check Point AI Guardrails) is the clearest match in the search results. |
| chatgpt-search | Lakera | ## Shortlist of LLM security tools These are the strongest candidates to evaluate: 1. Check Point AI Guardrails (Lakera) Strong model-agnostic option - Model-independent HTTP API. |
| chatgpt-search | Lasso Security | Sources: Introduction to AI Agent SecurityAPI Overview Documentation 2. Lasso Security Strong framework/gateway independence - Integrates with Kong, Envoy, TrueFoundry, Portkey and LiteLLM. |
| google-ai | HiddenLayer | HiddenLayer (Model Scanning): One of the leading enterprise solutions for ML security. |
| chatgpt-search | HiddenLayer | ## Platforms worth evaluating \| Platform \| Type \| Main security capabilities \| \| --- \| --- \| --- \| \| HiddenLayer Model Scanner \| Commercial \| Malware, backdoors, vulnerabilities, model integrity, and model lineage. |
| chatgpt-search | Lakera | The strongest initial candidates are Check Point Lakera, Netskope AI Guardrails, SentinelOne Prompt Security, and Radware LLM Firewall. |
| perplexity | Guardrails AI | The strongest matches are Guardrails AI and NVIDIA NeMo Guardrails. Both let engineers define custom checks and policies, but “production-ready” needs qualification: the open-source frameworks provide deployable components; production reliability... |
| perplexity | Lakera | \| Option \| Why it’s practical for a small team \| Caveat \| \|---\|---\|---\| \| Lakera Guard \| Self-serve Community access offers up to 10,000 requests/month. |



## Trend

Visibility delta: 0
Avg position delta: -16.85
Citation count delta: -6