CISO Tribune

Vendor comparison · 2 companies

Dreadnode vs Noma Security

Dreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities. Noma Security sells an Agent Security & Governance Platform for enterprise security teams. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Dreadnode
  • Noma Security
Dreadnode vs Noma Security: Products, Customers and Funding Compared
DreadnodeDreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities.dreadnode.ioNoma SecurityNoma Security sells an Agent Security & Governance Platform for enterprise security teams.noma.security
What it sells
  • AI Red Teaming[2][3][5]AI red teaming across AI systems in production, from traditional machine learning models to multi-agent systems.
  • Dreadnode Platform[3][4]Infrastructure for security teams to own, operationalize, and improve agentic cyber capabilities.
  • AI DiscoveryFinds every AI agent, model, MCP server and tool across cloud, SaaS and developer environments.
  • AI Security Posture Management[7]Defines which agents are approved, what data they can access and what actions they can take, and enforces those policies in real time.
  • AI Red Teaming[4][13]Probes AI applications and agents with multi-turn tests for prompt injection, jailbreak, data leakage and goal drift.
  • Runtime Protection[2]Monitors the full chain of an agent session, including prompts, tool calls and data access, and detects prompt injection and data exfiltration in real time.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pages2023[3]
Ownership and funding
Not stated on its pagesPrivately held[4]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • October 26, 2026Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer.[15]
  • February 27, 2026Noma Security announced its AI security platform is available through the Extended plan in AWS Security Hub.[16]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Dreadnode sells to organizations that require scaled agentic workloads and custom capabilities. Dreadnode describes a cyber eval engagement for a frontier model provider. Organizations that need to run inside their own boundary can deploy Dreadnode on a Kubernetes cluster or in air-gapped environments, and on-prem deployment is available with the Enterprise plan.Its coverage spans AI assets across endpoint, SaaS, and cloud environments. The pages address organisations whose employees use agents. The pages address organisations whose agents run on SaaS platforms or on cloud platforms.
Last verified
November 6, 2026September 27, 2026

Where they overlap

  • AI model and agent security is the primary category of both Dreadnode and Noma Security.

Where they differ, field by field

  • Dreadnode is also filed under Breach simulation and automated pen-testing and Penetration testing and red team services. Noma Security is also filed under AI firewalls and guardrails and AI governance.
  • Dreadnode lists AI Red Teaming and Dreadnode Platform. Noma Security lists AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection.
  • Noma Security was founded in 2023.
  • Noma Security is privately held.

How they differ

CISO Tribune files both Dreadnode and Noma Security under AI model and agent security as their primary category, and both sell AI red teaming. Beyond that shared area, the offerings are built around different work. Dreadnode sells an infrastructure platform for security teams to own, operationalize, and improve agentic cyber capabilities, with agents used for security testing, research, and operations. It also offers web application penetration testing with 83 attack technique playbooks, and CISO Tribune also files it under breach simulation and automated pen-testing. Noma Security sells an Agent Security & Governance Platform for enterprise security teams, and CISO Tribune also files it under AI firewalls and guardrails and AI governance. Its products cover AI Discovery, AI Security Posture Management, AI Red Teaming, and Runtime Protection.

Deployment is a point of contrast in the records. Dreadnode runs on an existing Kubernetes cluster or an embedded cluster on a dedicated VM, with offline installation bundles for air-gapped deployments, and on-prem deployment comes with the Enterprise plan. Noma Security finds AI assets across endpoint, SaaS, and cloud environments, and discovers agents across Agentforce, Microsoft Copilot, Claude Enterprise and other SaaS platforms. Dreadnode states that it is SOC 2, ISO 27001:2022, and ISO 27701 compliant.

On ownership, Noma Security was founded in 2023 and is privately held. Among named work, Dreadnode describes a cyber eval engagement for a tier 1 frontier model provider. Noma Security announced on February 27, 2026 that its AI security platform is available through the Extended plan in AWS Security Hub. On October 26, 2026, Noma Security appointed a Chief Financial Officer and a Chief Customer Officer.

What it sells: Dreadnode

What AI Red Teaming does[2][3][5]
Dreadnode applies AI red teaming across the full range of AI systems in production today, from traditional machine learning models to multi-agent systems. Dreadnode Platform evaluations probe models, applications, and deployed agents with adversarial attacks across supported languages and modalities.
What Dreadnode Platform does[3][4]
The Dreadnode Platform equips defenders with ready-to-run capabilities and shared operational knowledge. Dreadnode can be deployed on an existing Kubernetes cluster or an embedded cluster on a dedicated VM, with offline installation bundles for air-gapped deployments.

Questions about Dreadnode and Noma Security

What do Dreadnode and Noma Security sell?
Dreadnode sells AI Red Teaming and Dreadnode Platform. Noma Security sells AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection.
Are Dreadnode and Noma Security in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
When were Dreadnode and Noma Security founded?
Noma Security was founded in 2023.
Who owns Dreadnode and Noma Security?
Noma Security is privately held.
Who are Dreadnode and Noma Security sold to?
Dreadnode sells to organizations that require scaled agentic workloads and custom capabilities. Its coverage spans AI assets across endpoint, SaaS, and cloud environments.
What have Dreadnode and Noma Security announced recently?
October 26, 2026: Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer.

About Dreadnode

Dreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities. The Dreadnode Platform equips defenders with ready-to-run capabilities, shared operational knowledge, and the ability to run agents. Dreadnode describes the path to operationalize agents as fragmented and opaque. Dreadnode's capabilities are operator-authored agents for security testing, research, and operations, connected to the tools a team already uses.[3][5]

Ready-to-run cyber capabilities on the Dreadnode Platform put agents to work on security testing, research, and operations. The Dreadnode Platform supports persistent sessions across web and terminal, with search of past work and sharing with a team. Dreadnode Platform workflows coordinate agents by sequencing tasks, running work in parallel, and branching or combining results. The Dreadnode Platform connects existing command-line tools, MCP servers, and custom integrations. Versioned capabilities on the Dreadnode Platform can be shared with their instructions, tools, and dependency setup.[4]

Dreadnode Platform agents carry saved project context into new sessions and retrieve findings from earlier work. Dreadnode Platform users can review structured findings and assets with supporting evidence and relationships. The Dreadnode Platform versions and reuses datasets across evaluations, optimization, and training. Dreadnode Platform users can post-train models with demonstrations or rewards and retain the resulting model artifacts.[4]

Dreadnode combines task evaluations, LLM judges, and AI red teaming so a team can set the criteria for greater responsibility. Dreadnode Platform evaluations benchmark agents against published security tasks and a team's own tasks and environments. Dreadnode uses LLM judges to assess correctness, scope adherence, and signs of cheating against a team's criteria. The Dreadnode Platform probes models, applications, and deployed agents with adversarial attacks across supported languages and modalities. The Dreadnode Platform compares models, prompts, and capability versions with per-sample results and judge reasoning.[3][4]

Dreadnode Platform observability follows active agent sessions with live progress, metrics, and logs. The Dreadnode Platform inspects nested model and tool calls with their arguments and results. Dreadnode Platform traces connect findings back to the execution that produced them. Dreadnode Platform users can query traces to investigate failures and compare latency, token usage, and cost. Runtime policies in the Dreadnode Platform restrict tool access and check proposed actions against scope, and they allow, block, or request approval.[4]

Dreadnode offers AI red teaming across AI systems in production today, from traditional machine learning models to multi-agent systems. Dreadnode offers web application penetration testing with 83 attack technique playbooks. Dreadnode describes an autonomous pentester with a built-in headless browser and 84 skills. Dreadnode agents run network discovery and Active Directory assessments, connected to attack-path analysis and C2 tools. Dreadnode's authored capabilities cover web, AI, network, reverse engineering, and forensics.[2][3][4]

Dreadnode can be deployed on a customer's infrastructure, with application records, execution evidence, and capability artifacts in data stores the customer controls. Dreadnode runs on an existing Kubernetes cluster or on an embedded cluster on a dedicated VM, and offline installation bundles support air-gapped deployments. Dreadnode routes inference to approved providers or to models a customer hosts itself. Dreadnode offers on-prem deployment with the Enterprise plan. Dreadnode states that all evaluation, training, Worlds, and AI red teaming data stays within a customer's organization environment. Dreadnode SaaS meters workloads against a shared organization credit balance. Dreadnode stores secret values without returning them in normal API reads and injects them only into the remote runtimes and evaluations a user selects.[3][4][5][6][7]

Dreadnode treats organizations as an ownership boundary, and workspaces as the main collaboration boundary inside an organization. In SaaS mode, creating or updating workspaces on Dreadnode requires a Pro plan or higher. Dreadnode is SOC 2, ISO 27001:2022, and ISO 27701 compliant. Dreadnode charges a one-time annual fee that varies based on deployment requirements, SLAs, and custom work. Dreadnode built an initial suite of ER-Spatial security tasks during a cyber eval engagement for a tier 1 frontier model provider.[3][4][5][8][9][10][11]

Dreadnode on the record

Sources

Dreadnode full record

  1. [1]Dreadnode v2 security agent infrastructure platformDreadnode · dreadnode.io · published March 24, 2026 · Tier A
  2. [2]dreadnode.ioDreadnode · dreadnode.io · undated page, accessed November 6, 2026 · Tier A
  3. [3]Dreadnode — AI Infrastructure for CybersecurityDreadnode · undated page, accessed November 10, 2026 · Tier A
  4. [4]The Dreadnode PlatformDreadnode · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  6. [6]Credits | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  7. [7]Secrets | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  8. [8]Organizations | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  9. [9]Workspaces | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  10. [10]Projects | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  11. [11]Beyond the Terminal: Offensive Security Evals for Embodied Reasoning | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A

Noma Security full record

  1. [1]Agent Security and Governance | NomaNoma Security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Noma security raises 100m to drive adoption of ai agent security 302518641Noma Security via PR Newswire · prnewswire.com · published July 31, 2025 · Tier A
  3. [3]Noma security raises 100 million for ai security platformSecurityWeek · securityweek.com · published July 31, 2025 · Tier B
  4. [4]MCP Security: Discover, Govern, and Protect MCP Servers | NomaNoma Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]AI Security Solutions for Secure AI, Everywhere | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Shadow AI Discovery: Find Every Agent in Your Organization | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI-SPM: AI Security Posture Management | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]SaaS Agent Security for Copilot Studio & AgentForce | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Application Security for Bedrock, Azure & Databricks | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity: Know Who Your Agents Are and What They're Doing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Agent Access Control | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI-DR: AI Detection and Response | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI Red Teaming: Automated Adversarial Testing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI Compliance and Reporting | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]Noma Security Appoints Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer OfficerPRNewswire · published October 26, 2026 · Tier A
  16. [16]Noma AI Security Integrates with New Extended Plan for AWS Security HubPRNewswire · published February 27, 2026 · Tier A

Spot a factual error? Request a correction.