What do Enkrypt AI and Impart Security sell?

Enkrypt AI sells AI Data Risk Audit and MCP Gateway. Impart Security sells Agent Protection, API Security and Runtime Defense Harness.

Are Enkrypt AI and Impart Security in the same category?

They share AI model and agent security and AI firewalls and guardrails. Enkrypt AI's primary category is AI model and agent security and Impart Security's is AI firewalls and guardrails.

Where are Enkrypt AI and Impart Security headquartered?

Enkrypt AI is headquartered in Brighton, United States. Impart Security is headquartered in San Francisco, United States.

When were Enkrypt AI and Impart Security founded?

Enkrypt AI was founded in 2022.

Who owns Enkrypt AI and Impart Security?

Enkrypt AI is privately held. Impart Security is privately held.

Vendor comparison · 2 companies

Enkrypt AI vs Impart Security

Enkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic. Impart Security sells programmable, deterministic Layer 7 protection across AI, applications and APIs. CISO Tribune files both under AI model and agent security and AI firewalls and guardrails. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Enkrypt AI
Impart Security

Add a company

Enkrypt AI vs Impart Security: Products, Customers and Funding Compared
What it sells
	Enkrypt AIEnkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic.enkryptai.com	Impart SecurityImpart Security sells programmable, deterministic Layer 7 protection across AI, applications and APIs.impart.ai
What it sells	AI Data Risk Audit^[1][6]Produces a sign-off packet for Security and Legal on the data an AI system uses. MCP Gateway^[1][4][8]Open-source control plane that sits inline between agents and MCP servers.	Agent Protection^[3][10]Enforces application-specific policies on agent traffic and tool interactions. API Security^[5][8][10]Enforces controls based on how APIs behave across requests and sessions. Runtime Defense Harness^[10]Uses AI-assisted investigation to develop targeted virtual patches.
Categories
Categories	AI model and agent security (primary category) AI firewalls and guardrails AI governance	AI firewalls and guardrails (primary category) AI model and agent security Bot and abuse management
Headquarters
Headquarters	Brighton, United States	San Francisco, United States
Founded
Founded	2022^[2]	Not stated on its pages
Ownership and funding
Ownership and funding	Privately held^[1][7]	Privately held
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Enkrypt AI sells mainly to teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. Its pricing describes plans for startups launching AI, small teams, growing companies with multiple agents, and large enterprises in regulated industries needing VPC or on-prem deployment. Enkrypt AI states that its release packet is meant to give Security, Legal, and Product what they need to approve an agent. Teams adopting MCP are named as a stated audience for its MCP products.	Impart describes protection that runs inside an organisation's existing ingress. The stated coverage spans AI, applications and APIs. Impart also describes integrating its protection into existing ingress and egress infrastructure, with policies and runtime state synchronized across distributed environments.
Last verified
Last verified	November 9, 2026	September 27, 2026

Where they overlap

Enkrypt AI and Impart Security are both filed under AI model and agent security and AI firewalls and guardrails.
Both are headquartered in the United States.
Both are privately held.

Where they differ, field by field

Enkrypt AI's primary category is AI model and agent security; Impart Security's is AI firewalls and guardrails.
Enkrypt AI is also filed under AI governance. Impart Security is also filed under Bot and abuse management.
Enkrypt AI lists AI Data Risk Audit and MCP Gateway. Impart Security lists Agent Protection, API Security and Runtime Defense Harness.
Enkrypt AI is headquartered in Brighton, United States. Impart Security is headquartered in San Francisco, United States.
Enkrypt AI was founded in 2022.

What it sells: Enkrypt AI

What AI Data Risk Audit does^[1][6]: Enkrypt AI Data Risk Audit evaluates the datasets a customer brings for a specific AI system and intended use. Intended uses include TRAIN, RAG, and EVAL. Enkrypt AI Data Risk Audit works across text, audio and images, in multiple languages. It is re-run when datasets or connectors change.
What MCP Gateway does^[1][4][8]: MCP Gateway approves, modifies, or blocks tool calls. MCP Gateway runs as a sidecar or gateway in the tool path. Enkrypt AI adds enterprise capabilities such as centralized policy management, tenant-aware enforcement, reporting, and support.

What it sells: Impart Security

What Agent Protection does^[3][10]: Agent Protection enforces application-specific policies on agent traffic and tool interactions, using runtime context to restrict unauthorized actions and access. Agent Protection runs on the same ingress-layer enforcement engine that inspects the full attack surface.
What API Security does^[5][8][10]: API Security enforces controls based on how APIs behave across requests and sessions, not just individual request signatures. Impart applies inline, sequence-aware enforcement to every API call. API Security detects and blocks shadow APIs as they are accessed. API Security prevents sensitive data (PII) from leaving the system.
What Runtime Defense Harness does^[10]: Runtime Defense Harness uses AI-assisted investigation to develop targeted virtual patches and deploy protection through the same engine already protecting the applications. Targeted virtual patches are generated and tested against runtime traffic, with Policy as Code validated before deployment. AI-generated virtual patches are informed by runtime behavior, tested against live traffic and enforced through programmable Layer 7 controls.

Questions about Enkrypt AI and Impart Security

What do Enkrypt AI and Impart Security sell?: Enkrypt AI sells AI Data Risk Audit and MCP Gateway. Impart Security sells Agent Protection, API Security and Runtime Defense Harness.
Are Enkrypt AI and Impart Security in the same category?: They share AI model and agent security and AI firewalls and guardrails. Enkrypt AI's primary category is AI model and agent security and Impart Security's is AI firewalls and guardrails.
Where are Enkrypt AI and Impart Security headquartered?: Enkrypt AI is headquartered in Brighton, United States. Impart Security is headquartered in San Francisco, United States.
When were Enkrypt AI and Impart Security founded?: Enkrypt AI was founded in 2022.
Who owns Enkrypt AI and Impart Security?: Enkrypt AI is privately held. Impart Security is privately held.
Who are Enkrypt AI and Impart Security sold to?: From its own pages, Enkrypt AI sells mainly to teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. Impart describes protection that runs inside an organisation's existing ingress.

About Enkrypt AI

Enkrypt AI Red Teaming finds failure modes across text, audio, and vision, including agents, tools, RAG, and MCP. Enkrypt AI Red Teaming turns findings into prioritized fixes and evidence-ready reports for security, risk, and compliance. Enkrypt AI Red Teaming adds closure evidence and regression tests to a CI gate. Findings can be promoted into Guardrails policies and monitored in production.^[3]

Enkrypt AI Guardrails is the runtime layer that approves, modifies, or blocks risky behavior across agents, tools, RAG, and MCP. Every enforcement decision is logged, and Enkrypt AI says each decision includes a policy id, policy version, and reason code. Enkrypt AI Guardrails takes SSO and IAM claims for role-aware and tenant-aware policies, including Okta, Azure AD, and custom JWT claims. Enkrypt AI Guardrails can apply guardrails inline in the MCP Gateway, not just in the model prompt. Enkrypt AI Guardrails is API-first and works with an existing model stack.^[4]

Enkrypt AI Policy Engine converts natural-language AI governance policy and regulatory text, including PDFs, into controls. Enkrypt AI Policy Engine enforces those controls across the platform with traceability that can be audited. Controls are reviewed and approved, then published to dev, stage, and prod environments. Policies are versioned, with diff review, staged rollouts, and rollback. Enkrypt AI Policy Engine combines internal governance requirements with external standards into a single control model. OWASP, NIST, and EU AI Act are included as defaults.^[5]

Enkrypt AI Data Risk Audit produces a sign-off packet for Security and Legal covering what data an AI system uses, what risk it carries, and what is approved for AI. Enkrypt AI Data Risk Audit evaluates the datasets a customer brings for a specific AI system and intended use. Intended uses include TRAIN, RAG, and EVAL. Enkrypt AI Data Risk Audit can block a dataset for TRAIN and approve it for RAG with conditions. Enkrypt AI Data Risk Audit works across text, audio and images, in multiple languages. Enkrypt AI Data Risk Audit connects to Jira and ServiceNow for remediation and approvals, and is re-run when datasets or connectors change.^[6]

Enkrypt AI MCP Scanner discovers tools, analyzes capabilities and permissions, and surfaces high-risk exposure. MCP Scanner covers configuration, permissions, tool schemas, endpoints, and common vulnerability patterns on MCP servers and tool surfaces. MCP Scanner scans internal MCP servers during development and before rollout, not just public MCPs. MCP Scanner scores severity on exploitability and impact, and on exposure. MCP Gateway is open source and sits inline between agents and MCP servers to approve, modify, or block tool calls. Enkrypt AI adds enterprise capabilities to MCP Gateway such as centralized policy management, tenant-aware enforcement, reporting, and support. MCP Gateway runs as a sidecar or gateway in the tool path, in Kubernetes, edge, or service mesh patterns. MCP Scanner findings inform an approved registry and policy defaults, and MCP Gateway enforces those decisions at runtime.^[8]

Enkrypt AI says its customer-facing agents offering targets teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. Enkrypt AI produces an Agent Release Packet, a single, forwardable document that gives every stakeholder the evidence they need to approve an agent. Enkrypt AI says teams that used to spend 4 to 6 months in review loops ship in 30 days. Enkrypt AI describes a large insurance services provider that used Enkrypt AI to secure its customer-facing AI-powered Chatbot app. Enkrypt AI describes a financial organization that scaled its tax preparation services through an AI-enabled tax chatbot. Enkrypt AI describes a medical device company that wanted to deploy an AI app for personalized medicine adherence. NetApp partnered with Enkrypt AI to ensure data readiness for Gen AI and to remove data risks on its platform.^[9][10]

Enkrypt AI lists SOC 2 Type II and ISO 27001 among its security and compliance credentials. Its address is 1660 Soldiers Field Rd. Brighton, MA 02135.^[11]

Enkrypt AI on the record

About Impart Security

Impart Security sells programmable, deterministic Layer 7 protection across AI, applications and APIs. Impart enforces security policies directly in the application traffic path. Impart describes one programmable engine that unifies OWASP coverage, stateful behavioral analysis and custom security logic to block threats inline. Impart defines runtime enforcement as the ability to detect and block a threat at the moment the request is made, inline in the path of live traffic. Impart integrates programmable Layer 7 protection into existing ingress and egress infrastructure, enforces deterministic controls locally, and synchronizes policies and runtime state across distributed environments.^{[4][6][9][10]}

For bots, Impart blocks credential stuffing, scraping and AI-driven automation with stateful controls that evaluate request patterns and session behavior. For agents, Impart enforces application-specific policies on agent traffic and tool interactions, using runtime context to restrict unauthorized actions and access. Impart detects and blocks shadow APIs as they are accessed. Impart's API enforcement prevents sensitive data (PII) from leaving the system.^[8][10]

Impart sits between the agent and the customer's systems, enforcing security before any action executes. Agent protection runs on the same ingress-layer enforcement engine that inspects the full attack surface. Impart evaluates each prompt using session history, identity, prior model interactions and the chain of tool calls behind it. Impart's LLM enforcement sits inline between the caller and the model and runs before the prompt reaches inference. Impart builds a live catalog of every MCP server reaching the environment, sanctioned or not, and every tool exposed by each one. Policy-as-code in Impart applies the same way to AI clients, CLI users, web apps and direct API callers.^[3][5][6][8]

Runtime Defense Harness uses AI-assisted investigation to develop targeted virtual patches and deploy protection through the same engine already protecting the applications. Impart generates and tests targeted virtual patches against runtime traffic, validating Policy as Code before deployment. Impart deploys custom virtual patches in under 60 minutes. Impart executes custom security logic inline using request context and shared session state, and blocks attacks without model inference in the traffic path.^[4][10]

Impart runs inside the existing ingress, without adding an extra traffic hop or single point of failure. A lightweight module runs inside the existing ingress controller, capturing HTTP requests after TLS termination and passing them to a local inspector. If the inspector fails or times out, the module fails open. The Impart inspector runs locally alongside the ingress to evaluate request context, runtime state and custom security logic. Enforcement decisions in Impart are deterministic, and no AI inference or cloud round trip is required. Impart Cloud keeps policies and shared state in sync. Impart extends programmable Layer 7 protection to outbound AI requests and agent interactions through supported AI gateway infrastructure. Impart inspects traffic, applies custom security logic and protects sensitive data without replacing the existing gateway, routing or cost controls. The Impart Security plugin runs natively inside Kong Gateway, paired with an Impart Inspector running in the customer's own environment.^[5][9][10]

Impart inspects every request to AI applications, web applications and APIs in the traffic path where it sits. The Impart integration with Wiz sends hosts to a Wiz tenant as Imported Assets, next to the cloud resources. Impart sends hostnames to Wiz and does not read Wiz issues, findings or resources. FanDuel replaced black-box security with Impart. Impart offered Crossbeam a single solution for web application, API security and LLM protection.^{[1][2][3][4][5][6][7][8][9][10]}

Impart Security on the record

Sources

Enkrypt AI full record

[1]Enkrypt AI | World's Most Comprehensive AI Security PlatformEnkrypt AI · undated page, accessed September 27, 2026 · Tier A
[2]MultimodalaisecurityEnkrypt AI · enkryptai.com · undated page, accessed September 27, 2026 · Tier A
[3]Enkrypt AI Agent Red TeamingEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[4]Enkrypt AI Agent Guardrails | Secure AI Agents EffortlesslyEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[5]Enkrypt AI Agent Policy Engine | Secure & Control AI Agents EffortlesslyEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[6]Enkrypt AI Data Risk Audit | Secure Your AI Data NowEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[7]Enkrypt AI MCP Scanner: Advanced AI Threat Detection & SecurityEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[8]Enkrypt AI MCP Gateway | Inline Policy Control for MCP Tool TrafficEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[9]Secure Customer-Facing Agents | Enkrypt AI Compliance & ReleaseEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[10]Industry | Enkrypt AIEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
[11]Pricing | Enkrypt AIEnkrypt AI · undated page, accessed November 6, 2026 · Tier A

Impart Security full record

[1]impart.aiImpart Security · impart.ai · undated page, accessed September 27, 2026 · Tier A
[2]impart.aiImpart Security · impart.ai · undated page, accessed September 27, 2026 · Tier A
[3]Agent Protection - Control AI Agent Behavior | ImpartImpart Security · undated page, accessed September 27, 2026 · Tier A
[4]AI Runtime Defense | Impart Security PlatformImpart Security · undated page, accessed October 25, 2026 · Tier A
[5]LLM Protection | Deterministic Agent Controls | ImpartImpart Security · undated page, accessed October 25, 2026 · Tier A
[6]MCP Protection | Runtime Control for MCP Layer | ImpartImpart Security · undated page, accessed October 25, 2026 · Tier A
[7]WAF for the Agentic Era | Impart SecurityImpart Security · undated page, accessed October 25, 2026 · Tier A
[8]API Security for the Agentic Era | Impart SecurityImpart Security · undated page, accessed October 25, 2026 · Tier A
[9]Integrations with Impart Security | Impart Security Runtime ProtectionImpart Security · undated page, accessed November 10, 2026 · Tier A
[10]Programmable Layer 7 Firewall | Impart SecurityImpart Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.