CISO Tribune

Vendor comparison · 2 companies

Bay vs Mindgard

Bay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time. Mindgard secures AI models, agents, and applications against exploitable threats. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Bay
  • Mindgard
Bay vs Mindgard: Products, Customers and Funding Compared
BayBay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time.bay.ioMindgardMindgard secures AI models, agents, and applications against exploitable threats.mindgard.ai
What it sells
  • Bay[1][2][3][4][5][6][7][8][9]Bay is an AI agent security platform covering agents on devices, in browsers and in cloud workloads. Bay returns allow, ask, steer or block decisions on agent actions at runtime.
  • Lighthouse[6]Lighthouse is Bay's embedded agentic system that drafts policy from an organization's own agent activity.
  • Wave[3]Wave is the ephemeral binary Bay uses to deploy through an existing MDM or EDR.
  • AI Red Teaming[1][4][6][10]Mindgard's agentic platform red teams AI systems, agents, and infrastructure.
  • AI Security Expert[9]A subscription that gives a team direct access to a specialist.
Categories
Headquarters
Not stated on its pagesBoston, United States[2]
Founded
Not stated on its pages2022[2][3]
Ownership and funding
Not stated on its pagesPrivately held[2][3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • August 13, 2026Mindgard announced a $30M Series A funding round.[11]
  • March 17, 2026Mindgard announced an expansion of its AI security platform that adds a reconnaissance capability for AI models, agents and applications.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetMindgard addresses organizations that secure the AI systems they build, buy and use. The offering is aimed at pen-testers who scale AI-focused security testing efforts, and at developers who integrate ongoing testing for secure AI deployments. Customer types shown include global insurance brokerages, healthcare AI platforms, global financial institutions, semiconductor manufacturers and enterprise technology services. Reporting is directed to security, engineering, GRC, and audit teams.
Last verified
November 5, 2026September 27, 2026

Where they overlap

  • AI model and agent security is the primary category of both Bay and Mindgard.

Where they differ, field by field

  • Bay is also filed under Endpoint management and application control and Workforce AI usage security. Mindgard is also filed under AI firewalls and guardrails.
  • Bay lists Bay, Lighthouse and Wave. Mindgard lists AI Red Teaming and AI Security Expert.
  • Mindgard is headquartered in Boston, United States.
  • Mindgard was founded in 2022.
  • Mindgard is privately held.

How they differ

Bay sells an AI agent security platform that covers agents on devices, in browsers and in cloud workloads, and it returns allow, ask, steer or block decisions on agent actions at runtime. Mindgard sells AI Red Teaming, an agentic platform that red teams AI systems, agents and infrastructure. Mindgard also tests whether AI guardrails and firewalls work, and CISO Tribune files it under AI firewalls and guardrails as a second category.

Bay maps every agent, MCP server, extension, model and skill on devices on its first scan, and it deploys with one script through an existing MDM without a proxy. Its Lighthouse system drafts policy from an organization's own agent activity, and Bay replays 30 days of agent history to show what a policy would do before enforcement. Mindgard deploys through CI/CD, Burp Suite, or a single click. Mindgard also sells an AI Security Expert subscription that gives a team direct access to a specialist.

Mindgard is headquartered in Boston, United States, was founded in 2022, and is privately held. On August 13, 2026, Mindgard announced a $30M Series A funding round. Bay names Micron Technology, Peloton and ClickUp among its enterprise customers. Mindgard describes customer types including global insurance brokerages, healthcare AI platforms and global financial institutions, and a US insurance brokerage used it to secure nine production AI models. On March 17, 2026, Mindgard announced an expansion of its platform that adds a reconnaissance capability for AI models, agents and applications.

What it sells: Bay

What Bay does[1][2][3][4][5][6][7][8][9]
Bay maps every agent, MCP server, extension, model and skill on devices on its first scan. Bay builds a contextual entity graph of the users, MCP servers, SaaS apps and access connected to each agent. Bay deploys with one script through an existing MDM and does not require a proxy. Bay keeps full transcripts of prompts, actions and MCP calls.
What Lighthouse does[6]
Lighthouse drafts policy from an organization's own agent activity. Users answer 7 questions about risk appetite, and Lighthouse recommends a setting for each question and builds the policy. Bay replays 30 days of agent history to show what a policy would do before enforcement.
What Wave does[3]
Bay is agentless and deploys through an existing MDM or EDR using Wave, an ephemeral binary. There is no persistent agent to maintain and no proxy in the path.

What it sells: Mindgard

What AI Security Expert does[9]
The expert shows how to run posture assessments, enhance tooling usage, build adversarial skills, and co-pilot red teaming efforts. The subscription includes workshops that show security and data science teams how adversarial techniques work, how agentic systems fail, and how defensive controls can be applied.

Questions about Bay and Mindgard

What do Bay and Mindgard sell?
Bay sells Bay, Lighthouse and Wave. Mindgard sells AI Red Teaming and AI Security Expert.
Are Bay and Mindgard in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Where are Bay and Mindgard headquartered?
Mindgard is headquartered in Boston, United States.
When were Bay and Mindgard founded?
Mindgard was founded in 2022.
Who owns Bay and Mindgard?
Mindgard is privately held.
Who are Bay and Mindgard sold to?
Mindgard addresses organizations that secure the AI systems they build, buy and use.
What have Bay and Mindgard announced recently?
August 13, 2026: Mindgard announced a $30M Series A funding round.

About Bay

Bay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time. Bay describes AI endpoint security as protection for the AI agents, coding assistants and MCP servers running on employee devices. Bay was founded by three engineers who spent their careers in endpoint and API security. Bay is a Series A stage company.[2][3]

Teams run agents like Claude Code, Codex, Gemini CLI and GitHub Copilot in clusters, cloud workspaces and hosted sessions.[5]

Bay finds and maps agents first. On the first scan, Bay maps every agent, MCP server, extension, model and skill on devices, including ones nobody approved. Bay finds every agent, extension, CLI tool, MCP server, skill and model on employee devices. Bay builds a contextual entity graph of how everything connects: the user behind each agent, the MCP servers and SaaS apps it touches, and the access it holds. Bay scans every agent, package, extension, MCP server and skill for malicious indicators before approval. In the browser, Bay brings shadow AI into view, covering chatbots, extensions and embedded SaaS agents. In cloud environments, Bay discovers agents across virtual machines, Kubernetes, Coder workspaces and hosted sessions.[1][3][5][6][7]

Lighthouse, Bay's embedded agentic system, drafts policy from an organization's own agent activity. Users answer 7 questions about risk appetite, and Lighthouse recommends a setting for each question and builds the policy. Policies can be scoped by IdP group, device or runtime, and can set which MCP servers can read or write. Before enforcement, Bay replays 30 days of agent history to show what a policy would do before any user is affected. Bay also lets teams run any policy in simulation mode to see what it would allow, ask or block. At runtime, Bay enforces guardrails inline with the agentic action and returns allow, ask, steer or block in milliseconds. Bay can also prevent prompt injection attempts at runtime.[6]

Bay keeps records of agent activity. Bay keeps full transcripts of prompts, actions and MCP calls, traceable to the person behind each session. A metadata-only mode in Bay keeps prompts on the device when they must not leave it. Bay ties every prompt and agent action to a real identity, corporate or personal. Bay logs every policy change and agent action with who approved it and whether a person or an agent took it. Every decision in Bay is logged against the policy behind it, ready for auditors. Bay connects to an identity provider, so every policy applies to the right people and groups.[5][6][7][8]

Bay also checks configuration. Bay checks how every agent and AI tool is set up, across devices and cloud workloads, so risky settings can be fixed before an agent puts them to use. Bay spots bypass-permissions mode, sandboxes switched off and unrestricted tool access, rates how serious each one is and shows how to fix it. Bay finds the credentials, tokens and secrets that agents and MCP servers can read.[9]

Bay deploys with one script through an existing MDM and does not require a proxy to route traffic through. Bay deploys through an existing MDM or EDR using Wave, an ephemeral binary, so there is no persistent agent to maintain. Bay tells corporate AI accounts from personal ones, including in personal Chrome profiles. Bay's enterprise customers include Micron Technology, Peloton and ClickUp.[1][2][3][6][7][8]

Bay on the record

Sources

Bay full record

  1. [1]bay.ioBay · bay.io · undated page, accessed November 5, 2026 · Tier A
  2. [2]Security Researcher — Careers at BayBay · undated page, accessed November 10, 2026 · Tier A
  3. [3]AI Endpoint Security — BayBay · undated page, accessed November 10, 2026 · Tier A
  4. [4]About — BayBay · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloud Workspaces — BayBay · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform — BayBay · undated page, accessed November 10, 2026 · Tier A
  7. [7]Browser — BayBay · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Governance & Compliance — BayBay · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Security Posture — BayBay · undated page, accessed November 10, 2026 · Tier A

Mindgard full record

  1. [1]Mindgard - AI Red Teaming & AI Security SolutionsMindgard · undated page, accessed September 27, 2026 · Tier A
  2. [2]About Mindgard: Offensive AI Security CompanyMindgard · undated page, accessed September 27, 2026 · Tier A
  3. [3]Mindgard raises 30 million to protect ai systemsSecurityWeek · securityweek.com · published August 12, 2026 · Tier B
  4. [4]AI Security Software: Advanced AI Testing Tools - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  5. [5]AI Security Services: Secure Agentic AI Systems - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  6. [6]AI Red Teaming Services for LLMs and Agents - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  7. [7]AI Penetration TestingMindgard · undated page, accessed October 26, 2026 · Tier A
  8. [8]AI Security Advisory Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  9. [9]AI Security Consulting Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  10. [10]AI Security TrainingMindgard · undated page, accessed October 26, 2026 · Tier A
  11. [11]Mindgard Raises $30M Series AMindgard · published August 13, 2026 · Tier A
  12. [12]Mindgard Unveils First Autonomous AI Security Platform To Identify And Fix Exploitable VulnerabilitiesBusiness Wire · published March 17, 2026 · Tier A
  13. [13]Offensive Security Tool for AI Systems - MindgardMindgard · undated page, accessed November 10, 2026 · Tier A
  14. [14]Mindgard vs Prompt SecurityMindgard · undated page, accessed November 10, 2026 · Tier A
  15. [15]AI Governance & ComplianceMindgard · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.