CISO Tribune

Vendor comparison · 2 companies

Alice vs Onyx Security

Alice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails. Onyx Security sells a secure control plane for AI agents and models. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Alice
  • Onyx Security
Alice vs Onyx Security: Products, Customers and Funding Compared
AliceAlice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails.alice.ioOnyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.security
What it sells
  • WonderSuite[1][2][4][5]WonderSuite is the AI security platform for teams launching customer-facing AI in regulated industries.
  • WonderBuild[1][6][9]WonderBuild red teams customer-facing AI apps, agents, and agentic workflows before launch.
  • WonderFence[1][3][4][6][7][8][9]WonderFence sits between external-facing AI and users, intercepting harmful, non-compliant, and off-policy responses before they land.
  • WonderCheck[1][4][7][9]WonderCheck's ongoing automated red-teaming detects drift, regression, and emerging risks.
  • Rabbit Hole[1][6][10][11]Rabbit Hole is an adversarial network of in-house researchers and data.
  • ActiveFence[3][8]Alice's ActiveFence is a UGC trust and safety layer that detects, prevents, and responds to online harm.
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
Categories
Headquarters
New York, USA[1]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 10, 2026[14]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries. The pages describe WonderSuite giving security, product, and compliance teams red teaming and real-time guardrails. Foundation model labs, global enterprises and platforms deploying AI are the customers Alice names. Alice describes its ActiveFence layer as serving social platforms and marketplaces with UGC trust and safety. ActiveFence's deep web investigations serve enterprises and governments tracing malicious operations.From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.
Last verified
October 29, 2026October 19, 2026

Where they overlap

  • AI model and agent security is the primary category of both Alice and Onyx Security.

Where they differ, field by field

  • Alice is also filed under AI firewalls and guardrails. Onyx Security is also filed under AI governance, Workforce AI usage security and Non-human identity security.
  • Alice lists WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more. Onyx Security lists AI Security and MCP Gateway.
  • Alice is headquartered in New York, USA.

How they differ

CISO Tribune files both Alice and Onyx Security under AI model and agent security as the primary category. Alice sells WonderSuite, which covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing for customer-facing AI in regulated industries. Its modules include WonderBuild for red teaming, WonderFence for runtime guardrails, and WonderCheck for ongoing automated testing. Alice also sells ActiveFence, a UGC trust and safety layer, and ActiveFence Ltd does business as Alice. Onyx Security sells a secure control plane for AI agents and models, and CISO Tribune also files it under AI governance, Workforce AI usage security, and Non-human identity security. Its AI Security product is the runtime and posture layer, and its MCP Gateway governs the agent-to-tool surface.

The two overlap on red teaming and runtime enforcement for AI agents. Alice tests agents before launch and guards them in production, while Onyx Security inspects prompts, tool calls, and model responses inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx Security also discovers sanctioned and shadow AI and shows total AI spend. Alice is headquartered in New York, USA. Alice names foundation model labs, global enterprises and platforms deploying AI as its customers. Onyx Security sells mainly to security, governance, and AI teams.

On Onyx Security's funding, it announced a $113 million Series B round led by Bessemer Venture Partners on July 29, 2026. It launched operations on March 12, 2026 after securing $40 million in initial funding. Alice's WonderFence is now a Databricks Unity AI Gateway External Policy. Alice and Inflection AI are releasing a multi-turn red-teaming dataset.

What it sells: Alice

What WonderSuite does[1][2][4][5]
WonderSuite tests security and safety posture before launch, protects the AI experience in production, and catches what changes over time. WonderSuite covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing in a single platform. WonderSuite provides end-to-end security coverage for agentic systems, from adversarial testing before deployment to real-time behavioral guardrails in production.
What WonderBuild does[1][6][9]
WonderBuild identifies gaps between policies and the system prompt, across text, multimodal, and agentic systems. WonderBuild gives CISO, legal, and compliance teams test documentation with findings mapped to regulatory requirements. WonderBuild red-teaming findings integrate into WonderFence.
What WonderFence does[1][3][4][6][7][8][9]
WonderFence reviews every prompt coming in and every response going out, and blocks harmful inputs before they hit the LLM. WonderFence trains a dedicated detector for each policy using real-world adversarial data, deployed at sub-100ms latency. WonderFence maps guardrails to EU AI Act, ISO 42001, NIST, MITRE ATLAS, and OWASP.
What WonderCheck does[1][4][7][9]
WonderCheck integrates directly into CI/CD pipelines for on-demand, scheduled, and ongoing testing. WonderCheck ranks issues by severity and pairs each one with clear remediation guidance. WonderCheck findings flow directly into WonderFence guardrails, or back into WonderBuild for deeper refinement.
What Rabbit Hole does[1][6][10][11]
Rabbit Hole collects real attacks and uses them to secure AI. Alice's solutions are powered by Rabbit Hole, an adversarial threat intelligence engine built on billions of real-world data samples.
What ActiveFence does[3][8]
ActiveFence live feeds surface harmful content, viral narratives, and coordinated manipulation in real time, across languages and regions. ActiveFence conducts deep web investigations to expose networks, specific threat actors, and emerging tactics. ActiveFence's SaaS tools are built for content moderation.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

Questions about Alice and Onyx Security

What do Alice and Onyx Security sell?
Alice sells WonderSuite, WonderBuild, WonderFence, WonderCheck, Rabbit Hole and 1 more. Onyx Security sells AI Security and MCP Gateway.
Are Alice and Onyx Security in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Where are Alice and Onyx Security headquartered?
Alice is headquartered in New York, USA.
Who are Alice and Onyx Security sold to?
From its own pages, Alice offers WonderSuite to teams launching customer-facing AI in regulated industries. From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have Alice and Onyx Security announced recently?
July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

About Alice

Alice's WonderSuite gives security, product, and compliance teams red teaming and real-time guardrails. ActiveFence Ltd does business as Alice. WonderSuite is the AI security platform for teams launching customer-facing AI in regulated industries. WonderSuite tests security and safety posture before launch, protects the AI experience in production, and catches what changes over time. WonderSuite combines automated adversarial testing with expert-led red teaming and real-time protection. WonderSuite covers pre-launch red teaming, real-time guardrails, and continuous post-launch testing in a single platform. In WonderSuite, automated red teaming assesses how an agent behaves before any guardrails are deployed. WonderSuite aligns every test, guardrail, and finding to customer policies and to compliance frameworks, including OWASP, NIST, MITRE ATLAS, and the EU AI Act.[2][3][4][5]

WonderBuild red teams customer-facing AI apps, agents, and agentic workflows before launch. WonderBuild runs thousands of adversarial tests based on custom policies that surface prompt injections, jailbreaks, data leakage risks, and compliance and regulatory gaps. WonderBuild uses adversarial data from Rabbit Hole to expose the path attackers take. WonderBuild identifies gaps between policies and the system prompt, across text, multimodal, and agentic systems. WonderBuild gives CISO, legal, and compliance teams test documentation with findings mapped to regulatory requirements. WonderBuild red-teaming findings integrate into WonderFence.[6]

WonderFence sits between external-facing AI and users, intercepting harmful, non-compliant, and off-policy responses before they land. WonderFence deploys runtime guardrails tuned to the customer's application and policies, intercepting harmful, non-compliant, or off-brand responses. WonderFence reviews every prompt coming in and every response going out, blocks harmful inputs before they hit the LLM, and blocks harmful outputs in real time before they impact users. WonderFence trains a dedicated detector for each policy using real-world adversarial data, deployed at sub-100ms latency. WonderFence watches every message in both directions, 24/7, blocking, masking, or alerting in real time, with activity tracked in a dashboard. WonderFence maps guardrails to the regulatory frameworks that legal and compliance teams care about: EU AI Act, ISO 42001, NIST, MITRE ATLAS, and OWASP. WonderFence is now a Databricks Unity AI Gateway External Policy that can be attached once in Unity Catalog to screen every governed model call, with no SDK and no code changes.[3][4][7][8]

WonderCheck runs continuous automated red teaming in production. WonderCheck's ongoing automated red-teaming detects drift, regression, and emerging risks. WonderCheck watches for drift, surfacing behavioral changes before they become incidents. WonderCheck integrates directly into CI/CD pipelines for on-demand, scheduled, and ongoing testing. WonderCheck ranks issues by severity and pairs each one with clear remediation guidance. WonderCheck findings flow directly into WonderFence guardrails, or back into WonderBuild for deeper refinement.[4][7][9]

Rabbit Hole is an adversarial network of in-house researchers and data that connects online attacks with the real world. Rabbit Hole collects real attacks and uses them to secure AI. Alice's solutions are powered by Rabbit Hole, an adversarial threat intelligence engine built on billions of real-world data samples collected across nearly a decade. Alice produces safety, security, multimodal, agentic, and skills-based datasets for model, application, and agent training. Alice combines expert-led and automated red-teaming to stress-test models across text, image, audio, and video under real adversarial conditions. Alice's evaluation and benchmark datasets are based on Alice's harms taxonomy or customized to customer policies. Alice provides AIGC and harmful content learning sets purpose-built for guardrail and content classifier creation. Alice provides simulated, high-fidelity environments and scenarios for training and testing AI agents and agentic models. Alice and AI21 post-trained NVIDIA's open Nemotron 3.5 Super to resist indirect prompt injection. Alice and Inflection AI are releasing a multi-turn red-teaming dataset covering risks such as emotional dependency and misplaced belief.[8][10][11][12]

Alice names foundation model labs, global enterprises and platforms deploying AI as its customers. WonderSuite provides end-to-end security coverage for agentic systems, from adversarial testing before deployment to real-time behavioral guardrails in production. WonderSuite covers prompt injection, unsafe tool calls, data leakage, and multi-step exploits across the entire agentic architecture. Alice connects directly through existing third-party Customer Experience (CX) agent extensions, so there is no need to swap vendors or rebuild integrations. Alice goes past literal translation to catch regional slang, dialect, euphemism, and coded phrasing. Alice watches every message in both directions, blocking, masking, or alerting in real time, at P99 under 120ms.[2][3][10][12]

Alice's ActiveFence is a UGC trust and safety layer that detects, prevents, and responds to online harm. ActiveFence live feeds surface harmful content, viral narratives, and coordinated manipulation in real time, across languages and regions. ActiveFence delivers datasets of adversarial indicators, domains, IPs, and hashes. ActiveFence uncovers vulnerabilities across code, systems, and infrastructure. ActiveFence conducts deep web investigations to expose networks, specific threat actors, and emerging tactics. ActiveFence's SaaS tools are built for content moderation. ActiveMind, powered by in-house large language models, helps moderation teams validate, flag, and respond to harmful content.[8][13]

Alice on the record

Sources

Alice full record

  1. [1]alice.ioAlice · alice.io · undated page, accessed October 29, 2026 · Tier A
  2. [2]GenAI Apps & Agents Security | WonderSuite by AliceAlice · undated page, accessed November 10, 2026 · Tier A
  3. [3]Alice for third-party CX agentsAlice · undated page, accessed November 10, 2026 · Tier A
  4. [4]AI Governance & Safety Platform for Enterprise | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Detection Response | Alice Red Teaming and GuardrailsAlice · undated page, accessed November 10, 2026 · Tier A
  6. [6]WonderBuild: Pre-Launch AI Red Teaming | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  7. [7]WonderFence: Real-Time AI Guardrails | Sub-150ms LatencyAlice · undated page, accessed November 10, 2026 · Tier A
  8. [8]ActiveFence UGC Protection | Alice Trust & Safety PlatformAlice · undated page, accessed November 10, 2026 · Tier A
  9. [9]WonderCheck | Ongoing AI Red Teaming for Production | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  10. [10]Alice | Secure, Safe, & Trustworthy AIAlice · undated page, accessed November 10, 2026 · Tier A
  11. [11]Foundation Models | AI Security, Safety & Trust Ecosystem | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  12. [12]Multilingual AI Guardrails, Every Language & Dialect | AliceAlice · undated page, accessed November 10, 2026 · Tier A
  13. [13]Internal AgentsAlice · undated page, accessed November 10, 2026 · Tier A
  14. [14]Alice Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.