# Prompt Security AI visibility in LLM Security & AI Guardrails

Canonical: https://devtune.ai/verticals/llm-security-guardrails/prompt-security

[Website](https://www.prompt.security/)

Latest AI responses: 2026-11-14
[Tracked on paid plans](https://devtune.ai/pricing): Google AI Mode, Microsoft Bing Copilot Search, Claude with web search, Grok Search
Prompts: 25
Runs: 3


## Platforms

- google-ai
- perplexity
- chatgpt-search

Rank: 3
Joint rank: true
Total brands: 7
Measured responses: 75
Presence percent: 0
Share of voice percent: 0
Average position: Not available
Docs presence percent: 0
Blog presence percent: 0
Brand mention percent: 8


## Profile

Overview: Prompt Security is an enterprise AI security platform founded in 2023 by Itamar Golan and Lior Drihem. It protects how employees, developers and applications use generative AI, with real-time visibility and policy enforcement. The platform discovers shadow AI, inspects prompts and responses to prevent sensitive data leakage, and defends against prompt injection, jailbreaks and model abuse. It also provides protections for AI code assistants and homegrown AI apps, and an MCP Gateway for agentic AI security. The company raised $23M in total, including an $18M Series A in November 2024. SentinelOne (NYSE: S) acquired it in a deal completed on September 5, 2025, and positions it as part of its Singularity Platform for GenAI and agent security.
Product summary: Prompt Security is an AI security platform that applies real-time governance, data leakage prevention and threat protection across employee AI tools, AI code assistants, homegrown AI applications and autonomous agents. It enforces policy through browser extensions, endpoint agents, APIs and gateways. Its MCP Gateway monitors and controls agent-to-MCP-server interactions.


### Key capabilities

- Shadow AI discovery and visibility into employee GenAI usage
- Real-time prompt and response inspection with sensitive-data redaction (GenAI DLP)
- Prompt injection, jailbreak and model abuse prevention
- AI firewall and guardrails for homegrown AI apps
- Secrets and IP leakage protection for AI code assistants
- MCP Gateway with shadow MCP detection, risk scoring and policy enforcement
- Browser extension and endpoint agent enforcement
- Audit logging and policy controls by user, server or action
- Model-agnostic coverage across LLM providers



### Target users

- CISOs and security teams
- IT leaders governing AI adoption
- Developers building homegrown AI applications
- Engineering teams using AI code assistants
- Compliance and risk teams



### Key use cases

- Governing employee use of ChatGPT, Gemini, Copilot and similar tools
- Preventing sensitive data leakage to external AI tools
- Protecting customer-facing and internal LLM applications from prompt injection
- Securing AI coding assistants such as Cursor and GitHub Copilot
- Monitoring and controlling MCP servers and AI agents
- Audit logging and compliance for AI usage

Integrations ecosystem: Prompt Security integrates through browser extensions (Chrome, Safari and Brave are cited in a customer case study), an endpoint agent, APIs, and a reverse proxy or gateway for homegrown apps. It is model-agnostic across major LLM providers (OpenAI, Anthropic, Google) and self-hosted models. It covers tools such as ChatGPT, Gemini, Claude and Cursor. Its MCP Gateway sits between AI applications and MCP servers, and the company says it risk-scores more than 13,000 MCP servers. Since the acquisition it is part of SentinelOne's Singularity Platform. Okta and F5 were investors.
Pricing summary: Not available
Review summary: Prompt Security has a 4.4 out of 5 average on Gartner Peer Insights, from 47 ratings on the product page. Reviewers praise its semantic approach to data loss prevention, which catches leaks that pattern-based DLP misses, and its interface and partnership potential. Complaints centre on slow sales support, a non-intuitive setup, and limited rule customization. Other review platforms have too few reviews to be meaningful.
Competitive positioning: Prompt Security positions itself as an AI security platform that covers employee AI use (shadow AI discovery, GenAI DLP), homegrown AI apps (runtime protection and an AI firewall), AI code assistants, and agentic AI and MCP security. Its distinguishing approach is enforcement at the point of interaction, using browser extensions, endpoint agents, APIs and reverse proxies. Since September 2025 it has been part of SentinelOne, which sells it as an extension of the Singularity Platform for GenAI and agent security. Many competitors in this vertical focus on model, application or agent runtime protection. Prompt Security's emphasis on workforce AI usage control is a differentiator, though it also covers app-level protection.
Limitations: Public pricing is not available, and commercial terms are enterprise-quote based. Gartner Peer Insights reviewers cited a non-intuitive setup, limited rule-ordering and customization options, and slow or disorganized sales support during a trial. One reviewer noted the trial was run through SentinelOne reps who did not know the product well. Coverage depends on extension or agent deployment, and one reviewer flagged extension reliance as a risk. Prompt Security is now owned by SentinelOne, so packaging and roadmap may shift.


### Source urls

- https://www.prompt.security/
- https://www.sentinelone.com/press/sentinelone-to-acquire-prompt-security-to-advance-genai-security/
- https://www.sec.gov/Archives/edgar/data/1583708/000110465925088079/tm2525181d1_8k.htm
- https://www.newswire.com/news/prompt-security-raises-18m-series-a-to-accelerate-its-mission-to-22465970
- https://www.calcalistech.com/ctechnews/article/im5ma59bu
- https://prompt.security/solutions/agentic-ai-security-and-governance
- https://prompt.security/solutions/homegrown-genai-apps
- https://prompt.security/blog/case-study-hibob-strengthens-ai-adoption-with-secure-employee-centric-monitoring
- https://prompt.security/blog/case-study-securing-ai-for-cymulate-ensuring-safe-ai-adoption-across-teams
- https://www.gartner.com/reviews/product/prompt-security-1757796311
- https://www.ice.co.il/finance/news/article/1039050
- https://www.linkedin.com/posts/itamar-g1_2024-what-a-ride-it-was-a-few-highlights-activity-7279881279469211648-oMNu

Research approved: 2026-11-05T14:14:45.923+00:00


### Customer outcomes

| Customer | Summary | Metric |
| --- | --- | --- |
| HiBob | After deploying Prompt Security's browser extension across Chrome, Safari and Brave, HiBob got real-time data sanitization. Sensitive data such as credentials, financial details and personal information is removed before it reaches external AI tools. | Not available |
| Cymulate | Cymulate gained full visibility into AI prompts and responses, and could redact or block sensitive inputs before submission. Continuous logging and real-time alerting gave it the auditability to scale AI use safely. | Not available |



### Reviews breakdown

| Platform | Score | Score max | Review count | Url |
| --- | --- | --- | --- | --- |
| Gartner Peer Insights | 4.4 | 5 | 47 | https://www.gartner.com/reviews/product/prompt-security-1757796311 |



### Review themes



#### Praised

- Semantic data loss prevention that catches nuanced leaks
- Fast time-to-visibility into shadow AI
- Real-time monitoring, policy enforcement and data redaction
- Promising interface and partnership



#### Criticized

- Slow or disorganized sales and trial support
- Setup is not very intuitive
- Limited rule customization and ordering issues
- Reliance on browser extension poses risks
- Limited dashboard customization




### Company facts

Founded year: 2023
Hq: New York, USA


#### Founders

- Itamar Golan
- Lior Drihem

Employees range: ~30 (as of Nov 2024)
Total funding: $23M
Valuation: ~$180M acquisition consideration (SEC fi
Arr: Not available
Customer count: Not available
Status: Acquired by SentinelOne (NYSE: S), Sept 2025


Readiness: Not available


## Ranking

| Display name | Pair count | Total pairs | Presence percent | Avg position |
| --- | --- | --- | --- | --- |
| Lakera | 14 | 75 | 18.666666666666668 | 4.7105263157894735 |
| HiddenLayer | 5 | 75 | 6.666666666666667 | 6.8 |
| Guardrails AI | 2 | 75 | 2.666666666666667 | 3.5 |
| Noma Security | 2 | 75 | 2.666666666666667 | 4.75 |
| Lasso Security | 1 | 75 | 1.3333333333333335 | 3.5 |
| Arthur Shield | 0 | 75 | 0 | Not available |
| Prompt Security | 0 | 75 | 0 | Not available |



## Platform breakdown

| Platform | Prompt count | Presence rate |
| --- | --- | --- |
| google-ai | 0 | 0 |
| perplexity | 0 | 0 |
| chatgpt-search | 0 | 0 |



## Strengths





## Gaps

| Prompt text | Competitor presence count |
| --- | --- |
| Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection? | 2 |
| Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them? | 2 |
| What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard? | 1 |
| Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready? | 1 |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | 1 |



## Topic scores

| Topic name | Prompt count | Cited prompt count |
| --- | --- | --- |
| Capability | 5 | 0 |
| Developer Experience | 5 | 0 |
| Integrations & Ecosystem | 5 | 0 |
| Performance & Reliability | 5 | 0 |
| Setup & First Run | 5 | 0 |



## Prompt results

- Prompt text: What are my options for LLM guardrails with a free tier so a startup can test jailbreak and data-leak screening before paying?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 6 |



##### Chatgpt-search




- Prompt text: What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 3 |


- Prompt text: Which LLM security tools avoid lock-in by supporting open policy formats and exporting detection logs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| Lasso Security | 3 |


- Prompt text: Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 1 |



##### Chatgpt-search




- Prompt text: Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search




- Prompt text: Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which LLM security products offer a self-hosted or private deployment for a regulated company that can't send prompts to a third-party cloud?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What are the best AI firewalls for enterprises that need to enforce policy inline across multiple model providers without becoming a bottleneck?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 7 |


- Prompt text: What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What AI security platforms have published benchmarks or independent testing for prompt injection detection accuracy?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security products detect and redact sensitive data such as PII and secrets in both prompts and model outputs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 4 |


- Prompt text: Which AI security vendors keep detection up to date as new jailbreak techniques appear, and how do they prove it?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 5 |


- Prompt text: Which runtime AI protection tools scale to millions of requests per day and stay available if a screening call fails?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 2 |


- Prompt text: Which AI guardrail tools give application developers a simple API and clear verdicts, so they can act on a flagged prompt without guessing?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which AI security tools detect indirect prompt injection hidden in documents, web pages and emails that an AI agent reads?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| HiddenLayer | 2 |


- Prompt text: Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |



##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |


- Prompt text: What are the best AI security tools that produce actionable red-team reports a product team can fix, not just a list of failures?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What should I look at when choosing a first AI security tool for a company just rolling out an internal AI assistant to employees?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security platforms keep false positives low so legitimate user prompts aren't blocked and support tickets don't pile up?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| Noma Security | 1 |



##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security products integrate with an existing LLM gateway or proxy to apply policies centrally?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What AI guardrail platforms send alerts into our existing SIEM and security operations workflow?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |
| Lakera | 2 |


- Prompt text: What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Noma Security | 5 |


- Prompt text: Which LLM guardrail services add the least latency to each request, so a real-time chat or voice experience isn't slowed?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search







## Top sources





## Response excerpts

| Prompt text | Platform | Excerpt |
| --- | --- | --- |
| What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem? | google-ai | AI Gateways and LLM Firewalls (e.g., Bifrost, Lakera, Prompt Security): * _What they do:_ These platforms act as high-performance proxy layers or edge agents specifically tuned to intercept prompt injections, data exfiltration, toxic ou... |
| What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard? | google-ai | Prompt Security (acquired by SentinelOne): Provides a comprehensive GenAI runtime protection platform with a dashboard built for security operations teams. |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | chatgpt-search | Enterprise AI security platforms: Prompt Security, HiddenLayer and similar offerings may be excellent, but a quote-based procurement process isn't ideal when the objective is to get protection running this week. |



## Competitor excerpts

| Platform | Competitor name | Excerpt |
| --- | --- | --- |
| perplexity | Lakera | Lakera Guard (now Check Point AI Guardrails) is the clearest match in the search results. |
| chatgpt-search | Lakera | ## Shortlist of LLM security tools These are the strongest candidates to evaluate: 1. Check Point AI Guardrails (Lakera) Strong model-agnostic option - Model-independent HTTP API. |
| chatgpt-search | Lasso Security | Sources: Introduction to AI Agent SecurityAPI Overview Documentation 2. Lasso Security Strong framework/gateway independence - Integrates with Kong, Envoy, TrueFoundry, Portkey and LiteLLM. |
| google-ai | HiddenLayer | HiddenLayer (Model Scanning): One of the leading enterprise solutions for ML security. |
| chatgpt-search | HiddenLayer | ## Platforms worth evaluating \| Platform \| Type \| Main security capabilities \| \| --- \| --- \| --- \| \| HiddenLayer Model Scanner \| Commercial \| Malware, backdoors, vulnerabilities, model integrity, and model lineage. |
| chatgpt-search | Lakera | The strongest initial candidates are Check Point Lakera, Netskope AI Guardrails, SentinelOne Prompt Security, and Radware LLM Firewall. |
| perplexity | Guardrails AI | The strongest matches are Guardrails AI and NVIDIA NeMo Guardrails. Both let engineers define custom checks and policies, but “production-ready” needs qualification: the open-source frameworks provide deployable components; production reliability... |
| perplexity | Lakera | \| Option \| Why it’s practical for a small team \| Caveat \| \|---\|---\|---\| \| Lakera Guard \| Self-serve Community access offers up to 10,000 requests/month. |



## Trend

Visibility delta: 0
Avg position delta: Not available
Citation count delta: 0