CISO Tribune

Vendor comparison · 2 companies

Archipelo vs Pangea

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Pangea sells an AI Security Platform that Pangea says helps security teams secure AI from cloud to code. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Archipelo
  • Pangea
Archipelo vs Pangea: Products, Customers and Funding Compared
ArchipeloArchipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.archipelo.comPangeaPangea sells an AI Security Platform that Pangea says helps security teams secure AI from cloud to code.pangea.cloud
What it sells
  • Salmon[1][2][3][4][5]Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
  • AI Detection & Response[1][3][5]Gives security teams a view of AI activity across their organization, with policy enforcement and response actions.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesOwned by CrowdStrike since 2025[1][2][4][6]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • December 15, 2025CrowdStrike made its Falcon AI Detection and Response module generally available, built on its acquisition of AI security startup Pangea.[6]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen October 27, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.From its own pages, Pangea sells mainly to security teams that want to secure AI from cloud to code. Pangea describes its collectors as covering cloud workloads, employee endpoints, and homegrown AI applications. Pangea says organizations can protect workforce AI use and ship secure AI applications faster. Its case study describes a unified security framework for AI applications built on the platform.
Last verified
September 30, 2026November 2, 2026

Where they overlap

  • Archipelo and Pangea are both filed under AI model and agent security.

Where they differ, field by field

  • Archipelo's primary category is Software supply chain security; Pangea's is AI model and agent security.
  • Archipelo is also filed under Insider risk management. Pangea is also filed under AI firewalls and guardrails.
  • Archipelo lists Salmon. Pangea lists AI Detection & Response.
  • Pangea is owned by CrowdStrike, since 2025.

What it sells: Archipelo

What Salmon does[1][2][3][4][5]
Salmon is Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Execution is represented as a cryptographically signed event with explicit context. Salmon captures execution as it occurs upstream within supported environments.

What it sells: Pangea

What AI Detection & Response does[1][3][5]
Pangea AI Detection & Response is deployed via collectors that integrate with existing tools and infrastructure. It gives security teams a picture of AI activity, AI threats and policy violations, and an audit trail to investigate them.

Questions about Archipelo and Pangea

What do Archipelo and Pangea sell?
Archipelo sells Salmon. Pangea sells AI Detection & Response.
Are Archipelo and Pangea in the same category?
They share AI model and agent security. Archipelo's primary category is Software supply chain security and Pangea's is AI model and agent security.
Who owns Archipelo and Pangea?
Pangea is owned by CrowdStrike, since 2025.
Who are Archipelo and Pangea sold to?
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. From its own pages, Pangea sells mainly to security teams that want to secure AI from cloud to code.
What have Archipelo and Pangea announced recently?
December 15, 2025: CrowdStrike made its Falcon AI Detection and Response module generally available, built on its acquisition of AI security startup Pangea.

About Archipelo

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Archipelo builds Salmon for autonomous multi-actor software systems. Archipelo, Inc. is the company developing and stewarding Salmon.[1][3][4][5]

Archipelo states that autonomous agents, tools, runtimes, and controllers increasingly perform consequential actions themselves. Archipelo states that the resulting state alone cannot show which execution occurred, in what order, or how each state transition derived from the ones before it. Archipelo develops infrastructure that makes autonomous multi-actor software execution independently verifiable. Archipelo states that safe and reliable agents need verifiable evidence of their execution history.[4][5]

Archipelo points to Git as showing the value of persistent, linked source code history. Archipelo says Execution Verification Infrastructure addresses a different problem, which is establishing a verifiable record of state transitions and the resulting state.

Archipelo describes execution as represented by a cryptographically signed event with explicit context. Archipelo states that Salmon captures execution as it occurs upstream within supported environments, not downstream after the event has already taken place. Archipelo states that Salmon does not visually or structurally manufacture execution continuity when execution continuity has not been established.

Archipelo states that agent generated changes can involve delegated execution, tools, subprocesses and multiple state transitions. Archipelo states that execution history provides a durable record of supported execution relationships to verify outcomes. Archipelo states that during incident investigation, teams need to work backward from a consequential state change toward the execution associated with it, to determine what caused the outcome.

One principle is that downstream systems should not be forced to establish execution history solely through retrospective inference where it can be captured during supported execution. Archipelo states that what an actor was permitted or instructed to do is distinct from what it actually executed. Archipelo states that machine-speed software systems require execution evidence that other software systems can consume and verify. Archipelo describes identity, policy, observability, security, engineering, and governance systems as solving adjacent problems.[5]

Archipelo describes itself as a deep tech company building foundational infrastructure for verifiable autonomous systems.[1][3][4][5]

Archipelo on the record

Sources

Archipelo full record

  1. [1]archipelo.comArchipelo · archipelo.com · undated page, accessed September 30, 2026 · Tier A
  2. [2]Archipelo - Making Autonomous Software Execution VerifiableArchipelo · undated page, accessed October 30, 2026 · Tier A
  3. [3]Terms of Service — SalmonArchipelo, Inc. · published September 20, 2026 · Tier A
  4. [4]Archipelo - This page has been retiredArchipelo · undated page, accessed October 30, 2026 · Tier A
  5. [5]About — SalmonArchipelo · undated page, accessed November 10, 2026 · Tier A

Pangea full record

  1. [1]Pangea | Security Guardrails for AI ApplicationsPangea · undated page, accessed September 27, 2026 · Tier A
  2. [2]Crowdstrike reports third quarter fiscal year 2026 financialCrowdStrike Holdings · ir.crowdstrike.com · published December 2, 2025 · Tier A
  3. [3]CrowdStrike Falcon AIDR: AI Detection & ResponseCrowdStrike · undated page, accessed October 27, 2026 · Tier A
  4. [4]Pangea.app Reviews & Product Details - G2G2 · undated page, accessed October 27, 2026 · Tier C
  5. [5]AI Detection & ResponsePangea · undated page, accessed November 3, 2026 · Tier A
  6. [6]CrowdStrike Debuts AI Detection And Response: 5 Big Things To KnowCRN · published December 15, 2025 · Tier B

Spot a factual error? Request a correction.