Who does Archipelo fit?

From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.

How does CISO Tribune file Archipelo?

CISO Tribune files Archipelo under Software supply chain security, with AI model and agent security and Insider risk management as secondary categories.

Company record · security vendor

Who leads security at Archipelo

CISO Tribune company record: Archipelo, current seat holder not yet confirmed

The most recent move CISO Tribune has on record at Archipelo was announced in the week of March 17, 2025: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.

Tracked by the Wire since March 17, 2025 · 1 recorded move · every claim links to a sourced record · Updated September 30, 2026

Where Archipelo appears on the record (98)

Every page on CISO Tribune and its network that carries this company, 98 in all.

On the Wire: Paul Calatayud named Chief Information Security Officer and Chief Strategy Officer at Archipelo · 2025-03-17
Compared with (94): vs 42Crunch, vs Abnormal AI, vs AIShield, vs Alice, vs Anchore, vs Apiiro, vs Apono, vs AppOmni, vs Aqua Security, vs Arnica, vs Asymptote Labs, vs Bay, vs C1.ai, vs Chainguard, vs Clutch Security, vs Code42, vs Cranium, vs Credo AI, vs Cyberhaven, vs Cycode, vs Daylight, vs Dreadnode, vs DTEX Systems, vs Endor Labs, vs Enkrypt AI, vs Exaforce, vs Fiddler AI, vs Finite State, vs GitHub Advanced Security, vs GitLab, vs Gurucul, vs Harmonic Security, vs HiddenLayer, vs Hilt, vs Holistic AI, vs Impart Security, vs Jazz, vs JFrog, vs Knostic, vs KnowBe4, vs Lakera, vs Lasso Security, vs Legit Security, vs Levo.ai, vs Mend.io, vs Miggo, vs Mimecast, vs Mindgard, vs Minimus, vs Nametag, vs Neo, vs Next DLP, vs Noma Security, vs NowSecure, vs Oasis Security, vs Obsidian Security, vs Oligo, vs Onyx Security, vs Operant AI, vs Orchid Security, vs OX Security, vs P0 Security, vs Pangea, vs Phoenix Security, vs Pillar Security, vs Plerion, vs Pluto Security, vs Prime Security, vs Prompt Security, vs Promptfoo, vs Proofpoint, vs Pynt, vs RapidFort, vs Raven.io, vs Reco, vs Red Hat, vs Salt Security, vs Singulr, vs Skyflow, vs Snyk, vs Socket, vs Socure, vs Sonatype, vs SplxAI, vs Straiker, vs Stream.Security, vs Sweet Security, vs Teramind, vs Terra Security, vs Token Security, vs Trail of Bits, vs Veracode, vs Wallarm, vs Zenity
In the vendor directory (3): Software supply chain security companies: who they are and how CISOs compare them · primary category
AI model and agent security vendors · category
Insider risk management vendors · category

About Archipelo

CISO Tribune's Leadership Bench files Archipelo under Cybersecurity Vendors and North America. The Wire has one security-leadership move at Archipelo on record, announced in the week of March 17, 2025.

Security leadership timeline

2025-03-17

Paul Calatayud named Chief Information Security Officer and Chief Strategy Officer at Archipelo

Archipelo has appointed Paul Calatayud as CISO and Chief Strategy Officer.

Security leaders of Archipelo on our record

Paul Calatayud: named Chief Information Security Officer and Chief Strategy Officer, announced in the week of March 17, 2025 record

Security chiefs at other Cybersecurity Vendors organizations

Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in North America first, in alphabetical order from Archipelo onward.

Assail: Ken Pfiel, Chief Information Security Officer.
Axonius: Chris Jones, Chief Trust and Security Officer.
Bellini Capital and ConnectSecure: Brian Blakley, Chief Information Security Officer.
BeyondTrust: Sean Malone, Chief Information Security Officer.
Bishop Fox: Christie Terrill, Chief Information Security Officer (CISO).
Black Duck: Dom Glavach, Chief Information Security Officer (CISO).
Black Duck Software: Dom Glavach, Chief Information Security Officer.
BreachRx: Stephen Garcia, Chief Information Security Officer.

The full Cybersecurity Vendors bench

What the company sells

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Archipelo builds Salmon for autonomous multi-actor software systems. Archipelo, Inc. is the company developing and stewarding Salmon.

Archipelo states that autonomous agents, tools, runtimes, and controllers increasingly perform consequential actions themselves. Archipelo states that the resulting state alone cannot show which execution occurred, in what order, or how each state transition derived from the ones before it. Archipelo develops infrastructure that makes autonomous multi-actor software execution independently verifiable. Archipelo states that safe and reliable agents need verifiable evidence of their execution history.

Archipelo points to Git as showing the value of persistent, linked source code history. Archipelo says Execution Verification Infrastructure addresses a different problem, which is establishing a verifiable record of state transitions and the resulting state.

Archipelo describes execution as represented by a cryptographically signed event with explicit context. Archipelo states that Salmon captures execution as it occurs upstream within supported environments, not downstream after the event has already taken place. Archipelo states that Salmon does not visually or structurally manufacture execution continuity when execution continuity has not been established.

Archipelo states that agent generated changes can involve delegated execution, tools, subprocesses and multiple state transitions. Archipelo states that execution history provides a durable record of supported execution relationships to verify outcomes. Archipelo states that during incident investigation, teams need to work backward from a consequential state change toward the execution associated with it, to determine what caused the outcome.

One principle is that downstream systems should not be forced to establish execution history solely through retrospective inference where it can be captured during supported execution. Archipelo states that what an actor was permitted or instructed to do is distinct from what it actually executed. Archipelo states that machine-speed software systems require execution evidence that other software systems can consume and verify. Archipelo describes identity, policy, observability, security, engineering, and governance systems as solving adjacent problems.

Archipelo describes itself as a deep tech company building foundational infrastructure for verifiable autonomous systems.^[1][3][4][5]

Categories: Software supply chain security (primary category)
AI model and agent security
Insider risk management
Compare Archipelo with companies in the same category
Headquarters: Not established from our sources
Founded: Not established from our sources
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: archipelo.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Salmon^{[1][2][3][4][5]}
Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
Salmon is Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Execution is represented as a cryptographically signed event with explicit context. Salmon captures execution as it occurs upstream within supported environments.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Archipelo's categories, then alphabetical. A list from the record, never a ranking.

On software supply chain security, Archipelo competes with Anchore, Chainguard, JFrog, Minimus, RapidFort, Red Hat, Socket, Apiiro, Neo, Pluto Security and 15 more.
On ai model and agent security, Archipelo competes with Neo, AIShield, Alice, Asymptote Labs, Bay, Dreadnode, Enkrypt AI, Fiddler AI, HiddenLayer, Knostic and 54 more.
On insider risk management, Archipelo competes with DTEX Systems, Code42, Teramind, Cyberhaven, Gurucul, Hilt, Jazz, Mimecast, Next DLP and Proofpoint.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]archipelo.comArchipelo · archipelo.com · undated page, accessed September 30, 2026 · Tier A: the company, a regulator or a filing
[2]Archipelo - Making Autonomous Software Execution VerifiableArchipelo · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
[3]Terms of Service — SalmonArchipelo, Inc. · published September 20, 2026 · Tier A: the company, a regulator or a filing
[4]Archipelo - This page has been retiredArchipelo · undated page, accessed October 30, 2026 · Tier A: the company, a regulator or a filing
[5]About — SalmonArchipelo · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 30, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 30, 2026, expanded November 10, 2026 from the references above.

Work for Archipelo? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Questions CISOs ask about Archipelo

Who are the security chiefs at other Cybersecurity Vendors organizations?: On CISO Tribune's record they include Ken Pfiel at Assail, Chris Jones at Axonius, Brian Blakley at Bellini Capital and ConnectSecure and Sean Malone at BeyondTrust.
What does Archipelo sell?: Archipelo sells Salmon. Salmon: Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
Who does Archipelo fit?: From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.
How does CISO Tribune file Archipelo?: CISO Tribune files Archipelo under Software supply chain security, with AI model and agent security and Insider risk management as secondary categories.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.