What do Bay and Pillar Security sell?

Bay sells Bay, Lighthouse and Wave. Pillar Security sells Agentic Endpoint.

Are Bay and Pillar Security in the same category?

Yes. AI model and agent security is the primary category of both on CISO Tribune.

What have Bay and Pillar Security announced recently?

November 9, 2026: Vanta signed a definitive agreement to acquire Pillar Security, an AI security platform that protects AI agents across their lifecycle.

Vendor comparison · 2 companies

Bay vs Pillar Security

Bay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time. Pillar Security sells one platform to discover, test, secure and govern every AI agent across an organization. CISO Tribune files both under AI model and agent security and Workforce AI usage security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Bay
Pillar Security

Add a company

Bay vs Pillar Security: Products, Customers and Funding Compared
What it sells
	BayBay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time.bay.io	Pillar SecurityPillar Security sells one platform to discover, test, secure and govern every AI agent across an organization.pillar.security
What it sells	Bay^{[1][2][3][4][5][6][7][8][9]}Bay is an AI agent security platform covering agents on devices, in browsers and in cloud workloads. Bay returns allow, ask, steer or block decisions on agent actions at runtime. Lighthouse^[6]Lighthouse is Bay's embedded agentic system that drafts policy from an organization's own agent activity. Wave^[3]Wave is the ephemeral binary Bay uses to deploy through an existing MDM or EDR.	Agentic Endpoint^[7][10]Protects the AI agents that run on employee machines.
Categories
Categories	AI model and agent security (primary category) Endpoint management and application control Workforce AI usage security	AI model and agent security (primary category) AI governance AI firewalls and guardrails Workforce AI usage security
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Owned by Vanta
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	November 9, 2026Vanta signed a definitive agreement to acquire Pillar Security, an AI security platform that protects AI agents across their lifecycle.^[11]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	Not written yet
Last verified
Last verified	November 5, 2026	November 10, 2026

Where they overlap

AI model and agent security is the primary category of both Bay and Pillar Security; both are also filed under Workforce AI usage security.

Where they differ, field by field

Bay is also filed under Endpoint management and application control. Pillar Security is also filed under AI governance and AI firewalls and guardrails.
Bay lists Bay, Lighthouse and Wave. Pillar Security lists Agentic Endpoint.
Pillar Security is owned by Vanta.

How they differ

CISO Tribune files both Bay and Pillar Security under AI model and agent security as the primary category, and both also appear under Workforce AI usage security. Bay sells an AI agent security platform covering agents on devices, in browsers and in cloud workloads, and it returns allow, ask, steer or block decisions on agent actions at runtime. Pillar Security sells one platform to discover, test, secure and govern AI agents across an organization, and CISO Tribune also files it under AI governance and AI firewalls and guardrails.

Pillar Security deploys its Agentic Endpoint product through an MDM and inventories coding agents across a fleet, including versions and sandbox state. Bay lets users answer 7 questions about risk appetite so its Lighthouse system builds a policy, and it replays 30 days of agent history to show what a policy would do. Pillar Security adds multi-turn adversarial testing of AI systems and generates audit reports for GDPR, SOC 2, the EU AI Act and ISO 42001. Pillar can run in its managed cloud, in a customer's own cloud account or data center, or as a mix of both.

Bay is a Series A stage company, and its enterprise customers include Micron Technology, Peloton and ClickUp. Pillar Security is owned by Vanta, which signed a definitive agreement to acquire it on November 9, 2026. Pillar Security names a Fortune 300 manufacturer that runs it fully self-hosted.

What it sells: Bay

What Bay does^{[1][2][3][4][5][6][7][8][9]}: Bay maps every agent, MCP server, extension, model and skill on devices on its first scan. Bay builds a contextual entity graph of the users, MCP servers, SaaS apps and access connected to each agent. Bay deploys with one script through an existing MDM and does not require a proxy. Bay keeps full transcripts of prompts, actions and MCP calls.
What Lighthouse does^[6]: Lighthouse drafts policy from an organization's own agent activity. Users answer 7 questions about risk appetite, and Lighthouse recommends a setting for each question and builds the policy. Bay replays 30 days of agent history to show what a policy would do before enforcement.
What Wave does^[3]: Bay is agentless and deploys through an existing MDM or EDR using Wave, an ephemeral binary. There is no persistent agent to maintain and no proxy in the path.

What it sells: Pillar Security

What Agentic Endpoint does^[7][10]: Pillar deploys through an MDM and inventories the AI coding agents across a fleet: which agents run where, their versions, sandbox state and risk. Runtime Guardian sits in the agent's own pre-tool hook for Claude Code, Codex CLI and Cursor, and decides on every action before it runs. Pillar inventories local and remote servers across a fleet and scores each against a catalog of 23,000+ pre-analyzed servers.

Questions about Bay and Pillar Security

What do Bay and Pillar Security sell?: Bay sells Bay, Lighthouse and Wave. Pillar Security sells Agentic Endpoint.
Are Bay and Pillar Security in the same category?: Yes. AI model and agent security is the primary category of both on CISO Tribune.
Who owns Bay and Pillar Security?: Pillar Security is owned by Vanta.
What have Bay and Pillar Security announced recently?: November 9, 2026: Vanta signed a definitive agreement to acquire Pillar Security, an AI security platform that protects AI agents across their lifecycle.

About Bay

Bay is an AI agent security platform that gives enterprises visibility into every agent across devices, browsers and cloud workloads, and control over what those agents do in real time. Bay describes AI endpoint security as protection for the AI agents, coding assistants and MCP servers running on employee devices. Bay was founded by three engineers who spent their careers in endpoint and API security. Bay is a Series A stage company.^[2][3]

Teams run agents like Claude Code, Codex, Gemini CLI and GitHub Copilot in clusters, cloud workspaces and hosted sessions.^[5]

Bay finds and maps agents first. On the first scan, Bay maps every agent, MCP server, extension, model and skill on devices, including ones nobody approved. Bay finds every agent, extension, CLI tool, MCP server, skill and model on employee devices. Bay builds a contextual entity graph of how everything connects: the user behind each agent, the MCP servers and SaaS apps it touches, and the access it holds. Bay scans every agent, package, extension, MCP server and skill for malicious indicators before approval. In the browser, Bay brings shadow AI into view, covering chatbots, extensions and embedded SaaS agents. In cloud environments, Bay discovers agents across virtual machines, Kubernetes, Coder workspaces and hosted sessions.^{[1][3][5][6][7]}

Lighthouse, Bay's embedded agentic system, drafts policy from an organization's own agent activity. Users answer 7 questions about risk appetite, and Lighthouse recommends a setting for each question and builds the policy. Policies can be scoped by IdP group, device or runtime, and can set which MCP servers can read or write. Before enforcement, Bay replays 30 days of agent history to show what a policy would do before any user is affected. Bay also lets teams run any policy in simulation mode to see what it would allow, ask or block. At runtime, Bay enforces guardrails inline with the agentic action and returns allow, ask, steer or block in milliseconds. Bay can also prevent prompt injection attempts at runtime.^[6]

Bay keeps records of agent activity. Bay keeps full transcripts of prompts, actions and MCP calls, traceable to the person behind each session. A metadata-only mode in Bay keeps prompts on the device when they must not leave it. Bay ties every prompt and agent action to a real identity, corporate or personal. Bay logs every policy change and agent action with who approved it and whether a person or an agent took it. Every decision in Bay is logged against the policy behind it, ready for auditors. Bay connects to an identity provider, so every policy applies to the right people and groups.^[5][6][7][8]

Bay also checks configuration. Bay checks how every agent and AI tool is set up, across devices and cloud workloads, so risky settings can be fixed before an agent puts them to use. Bay spots bypass-permissions mode, sandboxes switched off and unrestricted tool access, rates how serious each one is and shows how to fix it. Bay finds the credentials, tokens and secrets that agents and MCP servers can read.^[9]

Bay deploys with one script through an existing MDM and does not require a proxy to route traffic through. Bay deploys through an existing MDM or EDR using Wave, an ephemeral binary, so there is no persistent agent to maintain. Bay tells corporate AI accounts from personal ones, including in personal Chrome profiles. Bay's enterprise customers include Micron Technology, Peloton and ClickUp.^{[1][2][3][6][7][8]}

Bay on the record

About Pillar Security

Pillar Security sells one platform to discover, test, secure and govern every AI agent across an organization. Pillar catalogs AI agents, models, prompts, frameworks, tools, MCP servers, skills and coding agents through agentless integrations. The catalog covers shadow AI and unapproved systems deployed without oversight. Pillar maps instructions, data sources, tool permissions, and external connections for each agent. Pillar traces dependencies across models and agent harness and scans agent configs, permissions, and identities.^[1][2][3][4]

For discovery, Pillar works through agentless integrations with source code repos, data platforms, and endpoints. Pillar assesses risks in AI stacks from vulnerabilities in models, frameworks, and dependencies. Pillar flags violations when unsanctioned AI appears in an environment. Pillar policy rules enforce approved models, frameworks, and data sovereignty standards across an AI stack. Pillar generates audit reports for GDPR, SOC 2, EU AI Act, and ISO 42001.^[4]

For testing, Pillar executes multi-turn adversarial attacks against complete AI systems to test tool orchestration, permission escalation, and agentic workflows. Pillar maps an AI attack surface as a graph showing relationships between agents, tools, permissions, and data sources. RedGraph maps how tools, prompts, and data combine to create exploitable surfaces specific to an environment. Pillar tests AI platforms, third-party agents, and production systems that a customer does not own or control through multi-step black box adversarial attacks against prompts, tools, and workflows. Pillar documents exploitability with attack transcripts, recordings and reproduction steps, and feeds validated findings into adaptive guardrails.^[2][3][5]

For runtime protection, Pillar analyzes user and agent intent to detect malicious behavior before it impacts production. Pillar identifies PII, PHI, secrets, and credentials flowing through AI interactions in real time. Pillar applies configurable policies to mask, block, or log sensitive data before exposure to AI models or external systems. Pillar guardrails calibrate using red teaming findings from specific applications to tune protection against the manipulation patterns detected during testing. Pillar logs prompts, responses, tool invocations, and results with timestamps. Pillar streams telemetry to security platforms for centralized monitoring.^[6]

For developer machines, Pillar deploys through an MDM and inventories the AI coding agents across a fleet: which agents run where, their versions, sandbox state and risk. Pillar runs full configuration scans for Claude Code, Cursor, Codex CLI, Gemini CLI, OpenCode and Pi Coding Agent, and detects other agents such as Amazon Q, Antigravity, Codeium and OpenClaw by fingerprint. Runtime Guardian sits in the agent's own pre-tool hook for Claude Code, Codex CLI and Cursor, and decides on every action before it runs. Pillar inventories local and remote servers across a fleet and scores each against a catalog of 23,000+ pre-analyzed servers. Pillar rolls out through Jamf Pro, Kandji, JumpCloud or any MDM that runs scripts, on macOS, Linux and Windows. On endpoints, Pillar analyzes permissions, credentials, access scopes, and auto-run settings, then provides step-by-step remediation. At runtime, Pillar monitors every prompt, tool call, and command to detect prompt injection, tool poisoning, and data exfiltration.^[7][8]

For governance, Pillar translates governance policies into technical controls that enforce approved models, licensing standards, and data sovereignty requirements at every stage. Pillar extends governance controls to external AI providers, SaaS platforms, and vendor integrations. Pillar maps governance findings, testing results, and runtime logs to regulatory requirements automatically. Pillar adds a security enforcement layer on AI gateway frameworks without re-architecting a stack. Pillar inspects every prompt and response in real time for sensitive data exposure, prompt injection, toxic content, and policy violations. For tool integrations, Pillar validates at runtime that tool calls match their declared schemas and flags anomalous behavior, like a tool accessing resources outside its expected scope.^[8][9]

Pillar can be deployed in its managed cloud, in a customer's own cloud account or data center, or as a mix of both. Self-hosted deployments include runtime guardrails, AI discovery, red teaming and agentic endpoint security. Adaptive guardrails are available in the managed cloud only today. Telemetry back to Pillar is off unless the customer enables it. A Fortune 300 manufacturer runs Pillar fully self-hosted. Pillar cites SOC 2 Type II and ISO/IEC 27001:2022.^{[1][6][7][8][10]}

Pillar Security on the record

Sources

Bay full record

[1]bay.ioBay · bay.io · undated page, accessed November 5, 2026 · Tier A
[2]Security Researcher — Careers at BayBay · undated page, accessed November 10, 2026 · Tier A
[3]AI Endpoint Security — BayBay · undated page, accessed November 10, 2026 · Tier A
[4]About — BayBay · undated page, accessed November 10, 2026 · Tier A
[5]Cloud Workspaces — BayBay · undated page, accessed November 10, 2026 · Tier A
[6]Platform — BayBay · undated page, accessed November 10, 2026 · Tier A
[7]Browser — BayBay · undated page, accessed November 10, 2026 · Tier A
[8]AI Governance & Compliance — BayBay · undated page, accessed November 10, 2026 · Tier A
[9]AI Security Posture — BayBay · undated page, accessed November 10, 2026 · Tier A

Pillar Security full record

[1]pillar.securityPillar Security · pillar.security · undated page, accessed November 10, 2026 · Tier A
[2]Pillar Security | Securing the Agentic WorkforcePillar Security · undated page, accessed November 11, 2026 · Tier A
[3]Pillar Security Platform | Securing the Entire AI Software LifecyclePillar Security · undated page, accessed November 11, 2026 · Tier A
[4]AI Discovery & Posture | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[5]AI Red Teaming & Risk Detection | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[6]AI Runtime Guardrails | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[7]Agentic Endpoint: Secure AI Coding Agents | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[8]AI Security Solutions | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[9]AI Governance & Compliance | Pillar SecurityPillar Security · undated page, accessed November 11, 2026 · Tier A
[10]Deployment Options: Cloud, Self-Hosted, Hybrid · PillarPillar Security · undated page, accessed November 11, 2026 · Tier A
[11]Vanta to Acquire Pillar Security to Turn AI Policy Into PracticeBusiness Wire · published November 9, 2026 · Tier A

Spot a factual error? Request a correction.