Noma Security CISO: Diana Kelley

What the company sells

Noma Security sells an Agent Security & Governance Platform for enterprise security teams. Noma Security says AI adoption is outpacing security across every enterprise.

Noma Security finds every AI component in an organisation. Noma Security provides continuous visibility and risk assessments on agents, MCPs, skills, and models across every environment. Noma Security finds AI assets across endpoint, SaaS, and cloud environments. Noma Security shows what those AI assets can reach and which risks need attention.

Noma Security discovers agents across Agentforce, Microsoft Copilot, Claude Enterprise and other SaaS platforms. Noma Security identifies risk and prevents agents from taking dangerous actions in runtime. Noma Security discovers agents across cloud platforms and surfaces their risks. Noma Security tests agents on cloud platforms for AI-specific risks. Noma Security controls the actions that agents on cloud platforms take in runtime.

Noma Security secures the identity, access, and actions of each agent. Noma Security discovers the agents that employees are using. Noma Security defines what each of those agents is allowed to do and stops the ones that break the rules at runtime. Noma Security defines what actions each agent can take and scopes permissions by identity. Noma Security enforces policies at the moment a connection or action is attempted.

Noma Security discovers, governs, and protects MCP servers. Noma Security discovers MCP servers and assesses their risks. Noma Security controls tool access for MCP servers and stops threats at runtime.

Noma Security stops dangerous agent behavior at runtime. Noma Security describes agents as able to go rogue or be manipulated. Noma uses context to detect dangerous behavior and enforce policies.

Noma Security tests AI applications and agents for security, compliance, and privacy risks. Noma Security tests AI applications and agents to find weaknesses before attackers or customers do. Noma Security answers questions about AI risk with evidence. Noma Security brings together AI inventory, evaluation results, and runtime records. Noma Security shows what an organisation runs, how it tests it, and how controls are enforced.^{[1][2][5][6][7][8][9][10][11][12][13][14]}

Categories

• AI model and agent security (primary category)
• AI firewalls and guardrails
• AI governance
• Compare Noma Security with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

2023^[3]

Ownership

Privately held^[4]

CISO on record

Diana Kelley, Chief Information Security Officer (CISO) (appointment announced in the week of August 4, 2025)

Website

noma.security

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• AI Discovery

  Finds every AI agent, model, MCP server and tool across cloud, SaaS and developer environments.

• AI Security Posture Management^[7]

  Defines which agents are approved, what data they can access and what actions they can take, and enforces those policies in real time.

• AI Red Teaming^[4][13]

  Probes AI applications and agents with multi-turn tests for prompt injection, jailbreak, data leakage and goal drift.

• Runtime Protection^[2]

  Monitors the full chain of an agent session, including prompts, tool calls and data access, and detects prompt injection and data exfiltration in real time.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Noma Security's categories, then alphabetical. A list from the record, never a ranking.

• On ai model and agent security, Noma Security competes with AIShield, Enkrypt AI, Fiddler AI, Pillar Security, SplxAI, Straiker, Alice, Asymptote Labs, HiddenLayer, Knostic and 54 more.

• On ai firewalls and guardrails, Noma Security competes with Impart Security, Lakera, Lasso Security, Operant AI, Prompt Security, AIShield, Enkrypt AI, Fiddler AI, Pillar Security, SplxAI and 9 more.

• On ai governance, Noma Security competes with Cranium, Credo AI, Holistic AI, Singulr, Transcend, AIShield, Enkrypt AI, Fiddler AI, Pillar Security, SplxAI and 25 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• October 26, 2026

  Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer. PRNewswire^[15]

• February 27, 2026

  Noma Security announced its AI security platform is available through the Extended plan in AWS Security Hub. PRNewswire^[16]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Agent Security and Governance | NomaNoma Security · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Noma security raises 100m to drive adoption of ai agent security 302518641Noma Security via PR Newswire · prnewswire.com · published July 31, 2025 · Tier A: the company, a regulator or a filing
3. [3]Noma security raises 100 million for ai security platformSecurityWeek · securityweek.com · published July 31, 2025 · Tier B: trade or business press
4. [4]MCP Security: Discover, Govern, and Protect MCP Servers | NomaNoma Security · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
5. [5]AI Security Solutions for Secure AI, Everywhere | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Shadow AI Discovery: Find Every Agent in Your Organization | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]AI-SPM: AI Security Posture Management | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]SaaS Agent Security for Copilot Studio & AgentForce | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]AI Application Security for Bedrock, Azure & Databricks | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Agentic Identity: Know Who Your Agents Are and What They're Doing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]AI Agent Access Control | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]AI-DR: AI Detection and Response | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]AI Red Teaming: Automated Adversarial Testing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]AI Compliance and Reporting | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]Noma Security Appoints Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer OfficerPRNewswire · published October 26, 2026 · Tier A: the company, a regulator or a filing
16. [16]Noma AI Security Integrates with New Extended Plan for AWS Security HubPRNewswire · published February 27, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Noma Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.