Company record · security vendor
Who leads security at SplxAI
The most recent move CISO Tribune has on record at SplxAI was announced in the week of March 24, 2025: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
Tracked by the Wire since March 24, 2025 · 1 recorded move · every claim links to a sourced record · Updated
Where SplxAI appears on the record (107)
Every page on CISO Tribune and its network that carries this company, 107 in all.
- On the Wire
- Compared with (102)
vs 42Crunch, vs Abnormal AI, vs Adaptive Security, vs AIShield, vs AISLE, vs Alice, vs Apiiro, vs Apono, vs AppOmni, vs Archer, vs Archipelo, vs Arnica, vs Asymptote Labs, vs Aurascape, vs Bay, vs Black Duck, vs C1.ai, vs Checkmarx, vs Clutch Security, vs Cranium, vs Credo AI, vs Cycode, vs Cygrid, vs Data Theorem, vs Daylight, vs Dreadnode, vs DTEX Systems, vs Endor Labs, vs Enkrypt AI, vs Exaforce, vs Fiddler AI, vs Fleuret AI, vs GitHub Advanced Security, vs GitLab, vs Harmonic Security, vs HiddenLayer, vs Holistic AI, vs IBM, vs Immersive, vs Impart Security, vs Invicti, vs JFrog, vs Ketch, vs Kiuwan, vs Knostic, vs KnowBe4, vs Kovrr, vs Lakera, vs Lasso Security, vs Levo.ai, vs Mend.io, vs Miggo, vs Mindgard, vs Nametag, vs Neo, vs NGC Risk, vs Noma Security, vs NowSecure, vs Oasis Security, vs Obsidian Security, vs Oligo, vs OneTrust, vs Onyx Security, vs OpenText, vs Operant AI, vs Orchid Security, vs OX Security, vs P0 Security, vs Pangea, vs Phoenix Security, vs Pillar Security, vs Plerion, vs Pluto Security, vs Prime Security, vs Prompt Security, vs Promptfoo, vs Pynt, vs Raven.io, vs Reco, vs Salt Security, vs Scrut Automation, vs Semgrep, vs Singulr, vs Skyflow, vs Snyk, vs Socure, vs Sprinto, vs Straiker, vs Stream.Security, vs Sweet Security, vs Symmetry Systems, vs Teramind, vs Terra Security, vs Token Security, vs Trail of Bits, vs Transcend, vs TrustArc, vs Vanta, vs Veracode, vs Wallarm, vs WitnessAI, vs Zenity
- In the vendor directory (4)
- AI model and agent security vendors · primary category
- AI governance vendors · category
- AI firewalls and guardrails vendors · category
- Static application security testing vendors · category
About SplxAI
CISO Tribune's Leadership Bench files SplxAI under Cybersecurity Vendors and Europe. The Wire has one security-leadership move at SplxAI on record, announced in the week of March 24, 2025.
Security leadership timeline
Security leaders of SplxAI on our record
Sandy Dunn: named Chief Information Security Officer, announced in the week of March 24, 2025 record
Security chiefs at other Cybersecurity Vendors organizations
Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in Europe first, in alphabetical order from SplxAI onward.
Filigran: Mathieu Rigotto, Chief Information Security Officer.
Keepit: Kim Larsen, group chief information security officer (CISO).
Outpost24: Olivia Brännlund, CISO.
Quorum Cyber: John Bruce, Chief Information Security Officer.
Tanium: Paul Black, Chief Information Security Officer.
Tenable: Robert Huber, Chief Security Officer.
Trellix: David Soto, Chief Information Security Officer.
UltraViolet Cyber: Andrew Park, Chief Information Security Officer (CISO).
What the company sells
SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. SPLX delivers security tooling for red teaming, runtime security, governance and remediation to build, deploy and scale AI systems. SPLX helps global enterprises secure AI systems end-to-end. SPLX describes security teams as lacking the tools to continuously map, monitor, or validate dynamic LLM behavior and vulnerabilities.
SPLX builds an AI-BOM, uncovers vulnerabilities, and helps users stay aligned with compliance frameworks. SPLX detects LLMs used across an organization and shows benchmark scores for each. SPLX lets users approve or block usage of the LLMs it detects. SPLX scans code repos to visualize every agent, tool, and MCP server in AI workflows. SPLX discovers MCP servers in an environment and scans for exploitable vulnerabilities in orchestration layers. SPLX connects to cloud platforms, code repos, ML and AI platforms for a unified inventory of AI assets in an organization.
SPLX runs automated red teaming that continuously uncovers vulnerabilities in AI systems. SPLX red teaming runs high-scale vulnerability assessments and simulates domain-specific attacks on AI systems from build to runtime. SPLX red teaming tests malicious prompts from adversarial and regular user personas. SPLX red teaming covers prompt injections, off-topic, hallucinations, and social engineering. SPLX lets users create custom AI assessments to test for specific risk scenarios and security criteria. SPLX lets users upload predefined datasets tailored to their threat models for red teaming. SPLX red teaming simulates attack scenarios with different input types for multi-modal AI assistants. The SplxAI platform integrates into the CI/CD pipeline.
SPLX generates hardened system prompts and applies targeted remediation steps based on red teaming insights. SPLX hardens a system prompt and applies dynamic remediation strategies. SPLX enforces input and output guardrails during live deployments to detect malicious behavior, prevent prompt injections, and stop sensitive data leakage in real time. SPLX lets users define off-topic rules and risk boundaries through natural language. SPLX provides detailed logs of blocked prompts and flagged outputs. SPLX scans LLM logs to detect jailbreaks, prompt injections, and malicious queries in near real time. SPLX lets users select risk scanners and upload LLM logs for threat discovery.
The SPLX Platform maps an AI risk surface to global and industry-specific frameworks to help identify compliance gaps. SPLX automatically maps test results to AI frameworks to spot gaps and eliminate manual tracking. SPLX lets users set custom governance rules or import JSON policies to enforce internal security standards. SPLX stress-tests open-source and commercial language models with thousands of attacks. SPLX model testing shows how models perform with no prompt, a basic prompt, and a hardened prompt.
SPLX offers API integration that allows for connections to any type of endpoint. Agentic Radar is an open-source security scanner for agentic AI. Agentic Radar visualizes workflows, surfaces attack patterns and tool-level vulnerabilities, and provides hardening recommendations for each agent.
SPLX says it has put controls in place to meet the compliance needs of highly regulated industries. SPLX describes itself as a remote-first team.[1][4][5][6][7][8][9][10][11][12][13][14][15]
- Categories
- Headquarters
- Not established from our sources
- Founded
- 2023[2]
- Ownership
- Owned by Zscaler since 2025[3]
- CISO on record
- Not yet on our record. Send a verified source
- Website
- splx.ai
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of SplxAI's categories, then alphabetical. A list from the record, never a ranking.
On ai model and agent security, SplxAI competes with AIShield, Enkrypt AI, Fiddler AI, Noma Security, Pillar Security, Promptfoo, Straiker, Alice, Asymptote Labs, HiddenLayer and 54 more.
On ai governance, SplxAI competes with Cranium, Credo AI, Holistic AI, Singulr, Transcend, AIShield, Enkrypt AI, Fiddler AI, Noma Security, Pillar Security and 25 more.
On ai firewalls and guardrails, SplxAI competes with Impart Security, Lakera, Lasso Security, Operant AI, Prompt Security, AIShield, Enkrypt AI, Fiddler AI, Noma Security, Pillar Security and 9 more.
On static application security testing, SplxAI competes with AISLE, Checkmarx, GitHub Advanced Security, GitLab, Kiuwan, OpenText, Semgrep, Veracode, Promptfoo, Mend.io and 13 more.
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]splx.aiSplxAI · splx.ai · undated page, accessed September 30, 2026 · Tier A: the company, a regulator or a filing
- [2]SplxAI Closes $7M Seed Funding Round to Help Organizations Secure Agentic AI SystemsBusiness Wire · businesswire.com · published March 26, 2025 · Tier A: the company, a regulator or a filing
- [3]Zscaler acquires splxSplxAI · splx.ai · published November 3, 2025 · Tier A: the company, a regulator or a filing
- [4]SPLX Platform | End-to-End Security for the AI LifecycleSPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [5]SPLX | End-to-End Security for AISPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [6]AI Governance & Compliance | Stay Aligned with AI PoliciesSPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [7]Remediation | Harden your LLM system prompts to mitigate risksSPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [8]AI Asset Management | Unified Inventory & Security for Enterprise AISPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [9]Probe | Automated & Continuous Red Teaming for Conversational AISPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [10]AI Runtime Protection | Real-Time AI Threat DetectionSPLX · undated page, accessed October 31, 2026 · Tier A: the company, a regulator or a filing
- [11]SplxAI | The future of automated AI Red TeamingSPLX · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [12]Monitoring | Analyze LLM Logs to proactively identify malicious user activitySPLX · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [13]LLM Benchmarks | Compare and Evaluate the Security of Leading AI ModelsSPLX · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [14]Security and TrustSPLX · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [15]Pricing & PlansSPLX · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
Last verified September 30, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 30, 2026, expanded November 10, 2026 from the references above.
Work for SplxAI? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Questions CISOs ask about SplxAI
- Who are the security chiefs at other Cybersecurity Vendors organizations?
- On CISO Tribune's record they include Mathieu Rigotto at Filigran, Kim Larsen at Keepit, Olivia Brännlund at Outpost24 and John Bruce at Quorum Cyber.
- What does SplxAI sell?
- SplxAI sells Agentic Radar. Agentic Radar: An open-source security scanner for agentic AI.
- Who does SplxAI fit?
- From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability. Its asset management messaging speaks to organisations that want visibility and control over the AI assets used in the organisation. Its runtime messaging addresses teams with AI systems in production. Its governance messaging speaks to teams working with global AI security frameworks and internal risk policies.
- How does CISO Tribune file SplxAI?
- CISO Tribune files SplxAI under AI model and agent security, with AI governance, AI firewalls and guardrails and Static application security testing as secondary categories.
- When was SplxAI founded?
- SplxAI was founded in 2023.
- Who owns SplxAI?
- SplxAI is owned by Zscaler, which acquired it in 2025.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.