CISO Tribune

Vendor comparison · 2 companies

Aurascape vs Promptfoo

Aurascape secures employee AI use, helps teams build agents safely, and protects AI agents running in production with real-time visibility, policy enforcement, and data protection. Promptfoo builds open-source tools for secure, reliable AI applications. CISO Tribune files both under AI firewalls and guardrails. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Aurascape
  • Promptfoo
Aurascape vs Promptfoo: Products, Customers and Funding Compared
AurascapeAurascape secures employee AI use, helps teams build agents safely, and protects AI agents running in production with real-time visibility, policy enforcement, and data protection.aurascape.aiPromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.dev
What it sells
  • Auri[3]Gives every department role-based access to AI insights.
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
Categories
Headquarters
Santa Clara, United States[2]San Francisco, United States[1][3]
Founded
Not stated on its pages2024[1][12]
Ownership and funding
Privately held[3][5]Owned by OpenAI[12]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 3, 2026Aurascape appointed Jim Walsh as Chief Revenue Officer.[8]
  • March 17, 2026Aurascape announced an expansion of its AI security platform aimed at helping organizations adopt AI agents securely.[9]
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Aurascape directs its governance offering to governance, security, and compliance teams. Aurascape names legal, compliance, HR, data owners, and business units as teams that hold decision rights over how AI is used. Aurascape sells to organizations that build and operate AI agents and applications. One named customer type is a credit union that aligned its security program with NCUA AI guidance.Not written yet
Last verified
September 27, 2026November 4, 2026

Where they overlap

  • Aurascape and Promptfoo are both filed under AI firewalls and guardrails.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Aurascape's primary category is Workforce AI usage security; Promptfoo's is AI model and agent security.
  • Promptfoo is also filed under Static application security testing and Breach simulation and automated pen-testing.
  • Aurascape lists Auri. Promptfoo lists Red Teaming and Evaluations.
  • Aurascape is headquartered in Santa Clara, United States. Promptfoo is headquartered in San Francisco, United States.
  • Promptfoo was founded in 2024.
  • Aurascape is privately held. Promptfoo is owned by OpenAI.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

Questions about Aurascape and Promptfoo

What do Aurascape and Promptfoo sell?
Aurascape sells Auri. Promptfoo sells Red Teaming and Evaluations.
Are Aurascape and Promptfoo in the same category?
They share AI firewalls and guardrails. Aurascape's primary category is Workforce AI usage security and Promptfoo's is AI model and agent security.
Where are Aurascape and Promptfoo headquartered?
Aurascape is headquartered in Santa Clara, United States. Promptfoo is headquartered in San Francisco, United States.
When were Aurascape and Promptfoo founded?
Promptfoo was founded in 2024.
Who owns Aurascape and Promptfoo?
Aurascape is privately held. Promptfoo is owned by OpenAI.
Who are Aurascape and Promptfoo sold to?
Aurascape directs its governance offering to governance, security, and compliance teams.
What have Aurascape and Promptfoo announced recently?
August 3, 2026: Aurascape appointed Jim Walsh as Chief Revenue Officer. March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.

About Aurascape

Aurascape secures employee AI use, helps teams build agents safely, and protects AI agents running in production with real-time visibility, policy enforcement, and data protection. Aurascape gives enterprises real-time visibility, classification, and control over every AI interaction. Aurascape provides inline visibility and control across AI apps, MCP tools, and custom agents. Aurascape secures both AI consumption and AI development on one platform.[1]

Aurascape says AI has embedded itself into everyday tools, workflows, and decisions, often beyond the reach of traditional security. Aurascape says employees use AI apps and agents daily, sometimes in personal accounts. Aurascape describes itself as a new kind of security company built from the ground up to detect, analyze, and control how AI is used across the enterprise.[1][4][10]

On the employee-use side, Aurascape secures employee AI use across apps, browsers, copilots, and agents. Aurascape applies usage policies based on application risk, user role, and intent. Aurascape automatically discovers new AI traffic, decodes the application for conversation visibility, and applies appropriate policy based on risk analysis. Aurascape enforces which apps, tenants, licenses, and models can be used with enterprise data. Aurascape can block or redirect risky actions before they complete. Aurascape tells the user why they were blocked, provides guidance on safer actions, and can give users the option to request limited-time-exceptions.[1][7][11]

For data protection, Aurascape classifies and fingerprints sensitive data in real time. Aurascape inspects full prompts and responses to stop risky behavior before it leads to exposure or threat insertion. Aurascape includes classification for hundreds of data types, including industry-specific IP, compliance-sensitive terms, and proprietary assets. Aurascape analyzes every AI prompt and response to detect risks like phishing, social engineering, and malicious code generation. Aurascape detects and controls risky movement of confidential data, source code, credentials, customer information, and regulated data through AI.[7]

For copilots and coding assistants, Aurascape prepares Microsoft 365 Copilot and embedded SaaS AI by finding overshared data, risky access, and governance gaps before rollout. Aurascape supports a readiness assessment that detects overshared files, tags sensitive content in repositories, and identifies where permissions should be tightened. Aurascape evaluates intent, access, and data flow in real time to enforce usage policies automatically. Aurascape enables unlearning by removing content from memory and visibility when sensitive data is exposed. Aurascape governs AI coding assistants with controls for code, secrets, commands, licenses, models, and tools.[7]

For teams that build AI, Aurascape helps organizations securely build and operate AI agents and applications. Aurascape maps every MCP server, tool connection, and data flow across an agentic environment. Aurascape tests AI agents and applications for prompt injection, data leakage, and policy violations before they reach production. Aurascape governs all MCP activity with the Zero-Bypass MCP Gateway. Aurascape governs agents as they move from conversation to action, including MCP activity, tool use, delegated permissions, and risky actions.[1][7]

On governance and evidence, Aurascape preserves audit-ready records of who used AI, what tool was used, what data was involved, which policy applied, what action was allowed, coached, or blocked, and what the AI or agent did next. Aurascape Auri gives every department secure, role-based access to AI insights. Aurascape says security owns global control, while legal, compliance, HR, data owners, and business units all hold decision rights over how AI is used in their domains.[7]

Aurascape enforces enterprise accounts, blocks unsanctioned apps, and governs functions within AI apps.[1][4][6][7][10]

Aurascape on the record

Sources

Aurascape full record

  1. [1]Aurascape | The AI Security CompanyAurascape · undated page, accessed September 27, 2026 · Tier A
  2. [2]Aurascape launches from stealth with 50m in funding and an ai native security platform to enable businesses to innovate fearlesAurascape · aurascape.ai · published April 8, 2025 · Tier A
  3. [3]Product - Aurascape, Inc.Aurascape · undated page, accessed October 23, 2026 · Tier A
  4. [4]Case Study: How The Police Credit Union Safely Embraced AI with AurascapeAurascape · undated page, accessed October 23, 2026 · Tier A
  5. [5]Gartner Hype Cycle for AI Governance Technologies, 2026Aurascape · undated page, accessed October 23, 2026 · Tier A
  6. [6]The Police Credit Union AI Compliance Case Study | AurascapeAurascape · undated page, accessed October 23, 2026 · Tier A
  7. [7]AI Governance and Compliance Platform | AurascapeAurascape · undated page, accessed October 23, 2026 · Tier A
  8. [8]Aurascape Names Jim Walsh Chief Revenue Officer as Enterprise Demand for AI Security AcceleratesBusiness Wire · published August 3, 2026 · Tier A
  9. [9]Aurascape Unveils New Zero-Bypass MCP Gateway and Expands AI Security Platform for Enterprise Agents and Custom AI ApplicationsBusiness Wire · published March 17, 2026 · Tier A
  10. [10]Aurascape | The AI Security CompanyAurascape · undated page, accessed November 10, 2026 · Tier A
  11. [11]Frictionless AI Security | Aurascape Next-Gen AI ProtectionAurascape · undated page, accessed November 10, 2026 · Tier A

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

Spot a factual error? Request a correction.