What do Apiiro and Lasso Security sell?

Apiiro sells AI-SAST and AI-SCA. Lasso Security sells AI Security Platform.

Are Apiiro and Lasso Security in the same category?

They share AI model and agent security. Apiiro's primary category is Application security posture management and Lasso Security's is AI firewalls and guardrails.

When were Apiiro and Lasso Security founded?

Lasso Security was founded in 2023.

Who owns Apiiro and Lasso Security?

Lasso Security is privately held.

Who are Apiiro and Lasso Security sold to?

From its own pages, Apiiro presents Guardian Agent as delivering outcomes for CISOs and CTOs. From its own pages, Lasso Security describes its AI Security Platform as built for enterprises.

What have Apiiro and Lasso Security announced recently?

September 2, 2026: Lasso Security launched an AI guardrail that runs on CPUs only and raised $30 million.

Vendor comparison · 2 companies

Apiiro vs Lasso Security

Apiiro offers Guardian Agent, which protects coding agents, prevents risk and AutoFixes backlogs, powered by the Apiiro Context Graph. Lasso Security sells an AI Security Platform that covers discovery, AI risk assessment and runtime protection. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Apiiro
Lasso Security

Add a company

Apiiro vs Lasso Security: Products, Customers and Funding Compared
What it sells
	ApiiroApiiro offers Guardian Agent, which protects coding agents, prevents risk and AutoFixes backlogs, powered by the Apiiro Context Graph.apiiro.com	Lasso SecurityLasso Security sells an AI Security Platform that covers discovery, AI risk assessment and runtime protection.lasso.security
What it sells	AI-SAST^[9]Static analysis that uses context from the customer's software graph and business risk to detect vulnerabilities. AI-SCA^[10]Open source security that moves from CVE matching to risk validation and fix.	AI Security Platform^[4]Covers discovery, AI risk assessment and runtime protection.
Categories
Categories	Application security posture management (primary category) Software composition analysis Software supply chain security AI model and agent security	AI firewalls and guardrails (primary category) AI model and agent security Workforce AI usage security
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	2023^[2]
Ownership and funding
Ownership and funding	Not stated on its pages	Privately held
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	September 2, 2026Lasso Security launched an AI guardrail that runs on CPUs only and raised $30 million.^[3]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[15] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Apiiro presents Guardian Agent as delivering outcomes for CISOs and CTOs. In our reading, the Apiiro Context Graph is aimed at application security, development and compliance teams working alongside coding agents. Apiiro gives maintainers free AutoFix.	From its own pages, Lasso Security describes its AI Security Platform as built for enterprises. Lasso Security addresses security teams that own the AI attack surface, from agent discovery and adversarial testing to runtime enforcement. Lasso Security addresses enterprises whose staff use SaaS and web chatbots, local desktop agents and MCPs across every department.
Last verified
Last verified	November 3, 2026	November 2, 2026

Where they overlap

Apiiro and Lasso Security are both filed under AI model and agent security.

Where they differ, field by field

Apiiro's primary category is Application security posture management; Lasso Security's is AI firewalls and guardrails.
Apiiro is also filed under Software composition analysis and Software supply chain security. Lasso Security is also filed under Workforce AI usage security.
Apiiro lists AI-SAST and AI-SCA. Lasso Security lists AI Security Platform.
Lasso Security was founded in 2023.
Lasso Security is privately held.

What it sells: Apiiro

What AI-SAST does^[9]: AI-SAST shifts static analysis from a detection problem to a risk validation and fix problem. AI-powered SAST uses context from the customer's software graph and business risk to detect vulnerabilities, validate true positives and identify false positives. Deep Code Analysis builds the Software Graph across files, code modules, repositories and code owners, updated on every commit.
What AI-SCA does^[10]: AI-SCA shifts open source security from CVE matching to risk validation and fix. Contextual analysis decides whether a vulnerability is used in code, internet exposed and exploitable. Malicious packages, license conflicts and AI components are covered beyond CVEs. Dependency scanning reaches the leaf node, covering direct, transitive and custom-built internal dependencies.

Questions about Apiiro and Lasso Security

What do Apiiro and Lasso Security sell?: Apiiro sells AI-SAST and AI-SCA. Lasso Security sells AI Security Platform.
Are Apiiro and Lasso Security in the same category?: They share AI model and agent security. Apiiro's primary category is Application security posture management and Lasso Security's is AI firewalls and guardrails.
When were Apiiro and Lasso Security founded?: Lasso Security was founded in 2023.
Who owns Apiiro and Lasso Security?: Lasso Security is privately held.
Who are Apiiro and Lasso Security sold to?: From its own pages, Apiiro presents Guardian Agent as delivering outcomes for CISOs and CTOs. From its own pages, Lasso Security describes its AI Security Platform as built for enterprises.
What have Apiiro and Lasso Security announced recently?: September 2, 2026: Lasso Security launched an AI guardrail that runs on CPUs only and raised $30 million.

About Apiiro

Apiiro offers Guardian Agent, which protects coding agents, prevents risk and AutoFixes backlogs, powered by the Apiiro Context Graph. Apiiro describes agentic development as a setting where code is written by agents, risk appears at machine speed, and offensive agents exploit vulnerabilities in seconds. Guardian Agent delivers three outcomes for CISOs and CTOs by executing actions and measuring success. On compliance, Apiiro provides automated evidence collection and policy enforcement for every feature and code change.^[1][3][4][5]

Guardian Agent actions run on the AppSec Context Graph, made up of a Software Graph and a Risk Graph, which gives every action the context of policies and software architecture from prompt to code to runtime. Patented Deep Code Analysis (DCA) and code-to-runtime matching continuously map each customer's evolving software architecture, including APIs, AI assets, PII, OSS, internal packages and their material changes. Apiiro correlates code to runtime to trace exposure paths and reachability. Apiiro governs every tool and change, human or agent, with one policy and risk engine.^[2][3][4]

Apiiro discovers, inventories and catalogs AI models, agents, MCP servers, AI datasets, 3rd-party services and everything inside codebases. Apiiro discovers and inventories the AI tools that developers and coding agents use, including IDEs, extensions, skills, plugins and MCP servers. Apiiro discovers, inventories and tracks open-source dependencies, licenses, end-of-life status, versions and vulnerabilities, and where they are used across the software architecture graph. Apiiro discovers, inventories and assesses cryptographic usage in code, including encryption, hashing, keys, secrets, certificates, algorithms and KMS implementation. Apiiro discovers, inventories and maps CI/CD pipelines, build systems, artifacts, registries, deployment flows and the software delivery paths from code to runtime. Apiiro's policy and risk engine is an open, graph-based risk engine that correlates findings from 1st/3rd-party tools, maps them to the software graph, detects toxic combinations and blast radius, and prioritizes business-specific risk. Apiiro assesses AI usage risks across code and the software supply chain, including dependencies, models, coding agents, MCP servers, skills and extensions. Apiiro continuously ingests, assesses, manages and tracks Software Bill of Materials (SBOMs) across codebases, the software supply chain (OSS) and 3rd-party applications.^[1][7]

Autonomous monitoring detects new feature tickets in Jira, GitHub and Azure DevOps and triggers threat analysis with no human in the loop.^[8]

AI-SAST shifts static analysis from a detection problem to a risk validation and fix problem. Deep Code Analysis (DCA) continuously builds a Software Graph of the software architecture across files, code modules, repositories and code owners, updated on every commit and material change. AI-SCA shifts open source security from CVE matching to risk validation and fix. Apiiro continuously detects vulnerable and malicious OSS components and risky licenses using AI-powered context from the customer's software graph and business risk. Dependency scanning runs to the leaf node, covering direct, transitive and custom-built internal dependencies. Open source coverage extends beyond CVEs to malicious packages, license conflicts and AI components.^{[5][6][7][9][10][12]}

Apiiro detects secrets in code, history, documentation and pipelines. Apiiro surfaces secrets deleted from the codebase that remain in every branch and revision of Git history. Apiiro checks every detected secret against the issuing platform, marking it valid, invalid or revoked. Guardrails block valid secrets at the pull request, before deployment. Apiiro inventories AI agents, MCP servers, GenAI frameworks, models, datasets and AI-related secrets from code on every commit. Apiiro blocks unapproved frameworks and models at the pull request. Apiiro generates audit-ready evidence for the EU AI Act, NIST AI RMF and ISO/IEC 42001 from code.^[11][12]

Apiiro maps packages, skills and plugins to their repositories, coding agents, pipelines and running containers. Apiiro's Dependency Firewall scans open-source code using Deep Code Analysis to detect and block malicious packages before installation. Apiiro inspects packages downloaded by coding agents, locally and in the cloud, across operating systems. Package policies control installations based on malware, backdoors, vulnerabilities and application risk.^[13]

AutoFix takes findings from Apiiro's own scanners, 3rd-party scanners and frontier model scans, and fixes them across the attack surface. Apiiro generates each fix in the context of the software architecture graph and organizational policies, and runs tests to prove nothing breaks. Apiiro reflects Chainguard's remediation state directly in Risk Graph, so findings Chainguard has already fixed stop showing as open. Apiiro AutoFixes OSS in first-party code based on risk and gives maintainers free AutoFix to accelerate community fixes.^{[1][2][3][5][6][7][8][9][10][14]}

Apiiro on the record

About Lasso Security

Lasso Security sells an AI Security Platform that covers discovery, AI risk assessment and runtime protection. Lasso Security offers protection for every AI agent an organization builds and deploys, wherever it runs. Lasso Security secures autonomous AI agents, LLM applications and agentic workflows from build-time through runtime. Lasso Security states that decentralized ownership has led to Shadow AI across the enterprise. Lasso Security states that security teams have zero visibility into the AI tools and agents that employees are using and creating. Lasso Security states that everyone from HR to Marketing is now using or building agents.^[1][4][5][6]

Lasso discovers every agent and AI application across an environment, consolidates them into a single inventory and assesses risk across the agentic ecosystem. Lasso inventories AI components including models, MCP servers, delegated agents, databases, third-party tool connectors, identity boundaries and authorization policies. Lasso connects through native integrations with CI platforms and low code no code agent builder platforms such as Amazon Bedrock, Azure AI Foundry, Microsoft Copilot Studio, Google Vertex AI and Salesforce Agentforce. Lasso uses an agentless, read-only integration into CI pipelines and native integrations with cloud providers and third-party agent builder tools.^[4][5]

For posture management, Lasso visualizes how every agent is built, what is exploitable and how to fix it before the agent reaches production. Lasso posture coverage spans OWASP, MITRE, NIST, the EU AI Act and internal policies. Lasso identifies misconfigurations, risky tool access, weak guardrails, exposed dependencies and potential attack paths. Lasso assesses agentic architecture for compliance and governance requirements, including NIST, the EU AI Act and company-specific AI policies.^[7]

Lasso identifies exploitable vulnerabilities through high-agency adversarial testing and auto-updates policies with purple teaming. Lasso integrates with a CI/CD pipeline so red teaming simulations can run automatically on every application update. Before an attack runs, Lasso performs optional reconnaissance to map the profile of the application. The Lasso agentic attack engine runs multi-turn adversarial simulations that evolve across conversation turns. Lasso red teaming runs from the Lasso tenant, with no agents, no code changes and no source code access.^[1][4][8]

Lasso enforces policies inline at the proxy, API or AI Gateway layer. Lasso detects and terminates AI threats across an environment, with coverage including MITRE and OWASP. Lasso monitors every interaction across the AI stack, from tool calls and RAG retrievals to sub-agent communications. Lasso enforces predefined and custom security policies inline before agent actions execute. Lasso builds a behavioral baseline for every AI user and agent in an environment. Lasso flags deviations from the behavioral baseline in real time, including novel attack techniques with no existing signature. Lasso runs as a lightweight layer alongside an existing stack with no architectural changes required. Lasso shows alerts and audit logs directly in Lasso or streams findings into a SIEM alongside other security telemetry.^[1][4][9]

Lasso's Intent Deputy secures AI agents with real-time intent analysis. Lasso takes action according to a security threshold, either blocking the request or sending an alert. Lasso decodes the semantic meaning behind every request to detect hidden malicious commands behind techniques like obfuscation, adversarial embeddings and payload splitting. Lasso uses an 8-dimensional coordinate system to provide human-readable evidence for legal and risk teams.^[10]

Lasso enables enterprises to use AI across every department, from SaaS and web chatbots to local desktop agents and MCPs. Lasso discovers, inventories and assesses every AI asset across an enterprise, from models to SaaS and web chatbots to local desktop agents or homegrown agents and their connected tools. Lasso detects in real time whether PII, PCI or other sensitive data is shared in prompts or file uploads, and masks that content before the prompt is sent to third-party models. Lasso limits which AI agents are available to certain roles and restricts high-risk actions based on clearance levels. Lasso maps policies to NIST, OWASP and MITRE using plug-and-play templates, or enforces internal rules with custom policies.^[6]

Lasso Security governs the lifecycle of AI agents from build-time to runtime for agents built on Vertex AI, Microsoft Copilot, AWS Bedrock, Salesforce Agentforce or any other cloud or third-party service. Lasso gives risk scores that highlight which agents require immediate attention. Lasso maps agents and their connections to third-party tools, databases and internal services to identify potential attack paths. Lasso applies real-time guardrails at the moment of interaction that block malicious inputs, sanitize outputs and enforce content policies.^{[8][11][12][13]}

Lasso Security on the record

Sources

Apiiro full record

[1]apiiro.comApiiro · apiiro.com · undated page, accessed November 3, 2026 · Tier A
[2]Apiiro named the most innovative aspm provider worldwide byfrostsullivansApiiro · apiiro.com · published December 9, 2025 · Tier A
[3]Apiiro Context Graph: How it Works, Benefits, Use Cases | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[4]Guardian Agent: Application Security Posture Management to action | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[5]Guardian Agent: Secure agentic development | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[6]Free AutoFix for open source maintainers | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[7]Apiiro: Secure your agentic developmentApiiro · undated page, accessed November 10, 2026 · Tier A
[8]Guardian Agent: AI Threat Modeling, Secure by Design | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[9]AI-SAST: Static scanning reimagined | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[10]AI-SCA: Open source security reimagined | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[11]Secrets Security: Detect, validate, fix | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[12]AI-SPM: Discover & govern every AI asset | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[13]Guardian Agent: Protect from Software Supply Chain Attacks | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[14]Guardian Agent: AutoFix SAST, SCA, Secrets, API, Containers | ApiiroApiiro · undated page, accessed November 10, 2026 · Tier A
[15]Apiiro Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Lasso Security full record

[1]Secure AI Adoption at Enterprise Scale | LassoLasso Security · undated page, accessed September 27, 2026 · Tier A
[2]Lasso security announces future of ai security with cpu based guardrailsLasso Security via GlobeNewswire · globenewswire.com · published September 2, 2026 · Tier A
[3]Lasso Security launches CPU-only AI guardrail, raises $30MSiliconANGLE · published September 2, 2026 · Tier B
[4]AI Security Platform for Agents & AI ApplicationsLasso Security · undated page, accessed November 10, 2026 · Tier A
[5]AI Discovery & AI-BOM for Enterprise SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[6]AI Usage Control for Enterprise Security | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[7]AI Security Posture Management | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[8]AI Red Teaming | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[9]AI Detection & Response | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[10]Intent Security for AI Agents | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[11]Enterprise AI Agent Security for Copilot, Vertex AI & BedrockLasso Security · undated page, accessed November 10, 2026 · Tier A
[12]AI Application Security | Lasso SecurityLasso Security · undated page, accessed November 10, 2026 · Tier A
[13]Information Security Policy & Data ProtectionLasso Security · published February 22, 2024 · Tier A

Spot a factual error? Request a correction.