CISO Tribune

Vendor comparison · 2 companies

HiddenLayer vs Onyx Security

HiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build. Onyx Security sells a secure control plane for AI agents and models. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HiddenLayer
  • Onyx Security
HiddenLayer vs Onyx Security: Products, Customers and Funding Compared
HiddenLayerHiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build.hiddenlayer.comOnyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.security
What it sells
  • Model Scanning[1][4][6]Scans third-party and proprietary machine learning models to detect hidden risks.
  • Red Teaming[1][6][10]Runs continuous testing intended to identify threats early and validate AI defenses.
  • AI Guardrails[1][11]Applies policy-based controls intended to prevent misuse, data leakage and adversarial attacks on AI systems.
  • Agentic and MCP Protection[1][4][5][6]Monitors autonomous AI agents and MCP connections and is intended to guard against rogue behavior.
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
Categories
Headquarters
Austin, United States[2]Not stated on its pages
Founded
2022[2]Not stated on its pages
Ownership and funding
Privately held[3]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 12, 2026HiddenLayer announced the appointment of Mike Gesnaldo as Chief Revenue Officer.[14]
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. HiddenLayer offers protection of agentic, generative, and predictive AI systems for mission assurance. HiddenLayer describes deployment through APIs, gateways, SDKs, or lightweight on-device integrations.From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.
Last verified
November 2, 2026October 19, 2026

Where they overlap

  • AI model and agent security is the primary category of both HiddenLayer and Onyx Security.

Where they differ, field by field

  • HiddenLayer is also filed under AI firewalls and guardrails. Onyx Security is also filed under AI governance, Workforce AI usage security and Non-human identity security.
  • HiddenLayer lists Model Scanning, Red Teaming, AI Guardrails and Agentic and MCP Protection. Onyx Security lists AI Security and MCP Gateway.
  • HiddenLayer is headquartered in Austin, United States.
  • HiddenLayer was founded in 2022.
  • HiddenLayer is privately held.

How they differ

CISO Tribune files HiddenLayer under AI model and agent security and AI firewalls and guardrails, and files Onyx Security under AI model and agent security, AI governance, Workforce AI usage security and Non-human identity security. HiddenLayer sells Model Scanning, Red Teaming, AI Guardrails, and Agentic and MCP Protection. Its scanning covers model files and URLs for malware, CVEs, backdoors, and integrity issues before deployment. Onyx Security sells a secure control plane for AI agents and models, with an AI Security runtime and posture layer and an MCP Gateway. Onyx also shows total AI spend and lets teams define AI adoption targets by department, use case, or tool category.

HiddenLayer is headquartered in Austin, United States, was founded in 2022, and is privately held. Onyx Security officially launched operations on March 12, 2026 after securing $40 million in initial funding. On July 29, 2026, it announced a $113 million Series B funding round led by Bessemer Venture Partners. HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.

HiddenLayer offers deployment through APIs, gateways, SDKs, or lightweight on-device integrations. Onyx Security offers cloud, hybrid, or self-hosted options and forwards alerts to Splunk and CrowdStrike NG-SIEM. On August 12, 2026, HiddenLayer announced the appointment of a Chief Revenue Officer.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

Questions about HiddenLayer and Onyx Security

What do HiddenLayer and Onyx Security sell?
HiddenLayer sells Model Scanning, Red Teaming, AI Guardrails and Agentic and MCP Protection. Onyx Security sells AI Security and MCP Gateway.
Are HiddenLayer and Onyx Security in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Where are HiddenLayer and Onyx Security headquartered?
HiddenLayer is headquartered in Austin, United States.
When were HiddenLayer and Onyx Security founded?
HiddenLayer was founded in 2022.
Who owns HiddenLayer and Onyx Security?
HiddenLayer is privately held.
Who are HiddenLayer and Onyx Security sold to?
HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have HiddenLayer and Onyx Security announced recently?
August 12, 2026: HiddenLayer announced the appointment of Mike Gesnaldo as Chief Revenue Officer. July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

About HiddenLayer

HiddenLayer sells AI security that analyzes AI applications, models, and assets, identifies their risks, and protects them as teams build. HiddenLayer builds an inventory of the AI applications, models, and assets in a customer environment. HiddenLayer offers a firewall that monitors, detects, and responds in real time to adversarial threats on agentic and generative AI applications. HiddenLayer continually identifies threats and validates defenses for agentic and generative AI applications.[1]

HiddenLayer says developers are embedding AI into tools and workflows faster than security teams can track. HiddenLayer says third-party models introduce unknown code and vulnerabilities. HiddenLayer says coding agents can read sensitive files, execute shell commands, install dependencies, or expose credentials. HiddenLayer says attackers can manipulate AI systems through prompts, retrieved content, tool output, or other untrusted inputs.[1][4][5]

HiddenLayer automatically builds a living inventory of AI across an environment, including shadow AI. HiddenLayer scans cloud accounts, repos, endpoints, and pipelines to detect every model and associated agent. HiddenLayer scans AWS, Azure, GCP, VMs, containers, and APIs for AI assets. HiddenLayer automatically associates AI assets with owners, business units, sensitivity, and risk levels. HiddenLayer aligns AI assets with NIST, OWASP, and ATLAS frameworks.[6][7]

HiddenLayer analyzes models for malware, vulnerabilities, backdoors, and unknown components before they reach production. HiddenLayer scans model files and URLs for malware, CVEs, backdoors, and integrity issues before deployment. HiddenLayer analyzes architectures, layers, weights, and artifacts for tampering or anomalies. HiddenLayer tests commercial models for safety and security before integration. HiddenLayer identifies where models come from, including origin and licensing.[4][6][7][8]

HiddenLayer continuously tests AI systems against evolving attacks and uncovers weaknesses early. HiddenLayer tests for jailbreaks, injection, role confusion, and harmful response patterns. HiddenLayer probes for extraction of PHI, PII, or proprietary data. HiddenLayer simulates unauthorized actions through agent tools and APIs.[6][9][10]

HiddenLayer detects and responds to AI attacks in production. HiddenLayer monitors prompts, outputs, memory, and agent actions in real time to detect and block prompt injection, data leakage, model theft, and unsafe tool use. HiddenLayer observes and reconstructs agent interactions across tools, data, and workflows in real time. HiddenLayer detects, blocks, or redacts unsafe actions and sensitive information according to policy and platform capabilities. HiddenLayer integrates runtime detections and enforcement events with existing SIEM, SOAR, and security operations workflows. HiddenLayer extends Runtime Security into AI coding agents through lightweight, on-device integration.[5][6][10]

HiddenLayer enforces boundaries around content, toxicity, bias, and regulatory restrictions. HiddenLayer detects and prevents PII, PHI, and proprietary data exposure in generated content. HiddenLayer enforces safe, compliant, and policy aligned AI behavior across applications, models, and business units. HiddenLayer combines safety guardrails with real time threat detection and prompt injection blocking. HiddenLayer protects autonomous agents and MCP based systems from prompt injection, unsafe tool use, and harmful autonomous actions.[1][6][11]

HiddenLayer says its platform deploys across any architecture without exposing intellectual property, weights, prompts, or customer data. HiddenLayer offers deployment through APIs, gateways, SDKs, or lightweight on-device integrations. HiddenLayer offers services modeled after active adversarial campaigns targeting enterprise AI applications. HiddenLayer services evaluate every layer from AI asset discovery to data and model supply chains to runtime environments. HiddenLayer services provide detailed remediation playbooks tailored to models, infrastructure, and compliance needs. HiddenLayer services work in concert with the HiddenLayer AI Security Platform for ongoing protection. HiddenLayer services align with emerging AI governance standards, including NIST AI RMF and EU AI Act requirements.[4][6][12]

HiddenLayer describes securing AI used for fraud detection, trading, compliance, and customer engagement. HiddenLayer describes establishing governance controls aligned with FFIEC and OCC frameworks. HiddenLayer detects malware, tampered artifacts, and backdoored weights in pretrained models and libraries. HiddenLayer protects agentic, generative, and predictive AI systems for mission assurance.[1][4][6][10][13]

HiddenLayer on the record

Sources

HiddenLayer full record

  1. [1]HiddenLayer | Total AI SecurityHiddenLayer · undated page, accessed September 27, 2026 · Tier A
  2. [2]Hiddenlayer launches the first security solution to protect ai powered products 301587864HiddenLayer via PR Newswire · prnewswire.com · published July 19, 2022 · Tier A
  3. [3]Hiddenlayer 100m series b ai securityHiddenLayer · hiddenlayer.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Application Developers | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Runtime Security | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Discovery | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Supply Chain Security | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Attack Simulation | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  10. [10]CISO | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Guardrails | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  12. [12]Services | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  13. [13]Financial Services | HiddenLayerHiddenLayer · undated page, accessed November 10, 2026 · Tier A
  14. [14]HiddenLayer Appoints Mike Gesnaldo as Chief Revenue OfficerHiddenLayer · published August 12, 2026 · Tier A

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.