CISO Tribune

Vendor comparison · 2 companies

Lakera vs Orchid Security

Lakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents. Orchid Security sells an identity-first security platform that discovers, analyzes, governs, and proves identity controls across applications. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Lakera
  • Orchid Security
Lakera vs Orchid Security: Products, Customers and Funding Compared
LakeraLakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents.lakera.aiOrchid SecurityOrchid Security sells an identity-first security platform that discovers, analyzes, governs, and proves identity controls across applications.orchid.security
What it sells
  • AI Red Teaming[1][5][6]A continuous workflow to evaluate, scan, and red team AI applications and agents.
  • Orchid Security PlatformAn identity-first security platform that discovers, analyzes, governs, and proves identity controls across all applications.
  • Orchid Identity Audit[8]Continuous observability to identify Identity Dark Matter across all managed and unmanaged environments.
Categories
Headquarters
Zurich, Switzerland[2]Not stated on its pages
Founded
2021[2]Not stated on its pages
Ownership and funding
Owned by Check Point Software Technologies since 2025[3][5]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • September 15, 2026Orchid Security unveiled AI readiness controls for AI agents, covering ongoing identity drift detection and kill switches operating at the application level.[14]
  • September 9, 2026Orchid Security announced identity drift detection and application-level kill switches for AI agents.[12]
  • May 28, 2026Orchid Security extended its Identity Control Plane with capabilities aimed at governing AI agents.[13]
  • February 5, 2026Orchid Security unveiled Identity Audit, which combines audit data from unmanaged applications with audit logs from governed IAM systems into a unified view of identity activity.[11]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Lakera describes organizations that run AI across employees, applications, and autonomous agents as the audience for its three AI security products. Lakera positions AI Agent Security for organizations that build and deploy agents. Lakera Guard is sold for LLM applications.From its own pages, Orchid Security sells mainly to teams in regulated industries under audit pressure and to identity programs with persistent blind spots. Orchid says it covers self-hosted and SaaS applications, along with cloud, on-prem, legacy, and custom-built applications. Orchid describes the risk of orphaned accounts left behind during an acquisition, so organisations that grow through acquisitions are among the buyers it addresses. Orchid integrates with existing IAM, PAM, and IGA tools rather than replacing them, so it speaks to organisations that already run those systems.
Last verified
November 2, 2026October 29, 2026

Where they overlap

  • Lakera and Orchid Security are both filed under AI model and agent security.

Where they differ, field by field

  • Lakera's primary category is AI firewalls and guardrails; Orchid Security's is Identity governance and administration.
  • Lakera is also filed under Workforce AI usage security. Orchid Security is also filed under Privileged access management and Non-human identity security.
  • Lakera lists AI Red Teaming. Orchid Security lists Orchid Security Platform and Orchid Identity Audit.
  • Lakera is headquartered in Zurich, Switzerland.
  • Lakera was founded in 2021.
  • Lakera is owned by Check Point Software Technologies, since 2025.

What it sells: Lakera

What AI Red Teaming does[1][5][6]
AI Red Teaming tests with prompt injection, jailbreaks, tool exploitation, and multi-turn attacks against real systems. AI Red Teaming provides exploit validation, severity scoring, and remediation guidance. AI Red Teaming is available for text, audio, image, and multi-modal systems.

What it sells: Orchid Security

What Orchid Security Platform does
Orchid discovers SaaS, cloud, on-prem, legacy, and custom-built applications automatically. Orchid analyzes authentication and authorization flows, detects risk, enforces policies, and automates remediation. Orchid integrates with existing IAM, PAM, and IGA tools to enhance visibility and governance.
What Orchid Identity Audit does[8]
Orchid Identity Audit maps identities across all applications, including those using legacy or retired domains. Orchid identifies high risk accounts that lack ownership or appear in dark web credential leaks. Orchid provides continuous evidence of decommissioned accounts.

Questions about Lakera and Orchid Security

What do Lakera and Orchid Security sell?
Lakera sells AI Red Teaming. Orchid Security sells Orchid Security Platform and Orchid Identity Audit.
Are Lakera and Orchid Security in the same category?
They share AI model and agent security. Lakera's primary category is AI firewalls and guardrails and Orchid Security's is Identity governance and administration.
Where are Lakera and Orchid Security headquartered?
Lakera is headquartered in Zurich, Switzerland.
When were Lakera and Orchid Security founded?
Lakera was founded in 2021.
Who owns Lakera and Orchid Security?
Lakera is owned by Check Point Software Technologies, since 2025.
Who are Lakera and Orchid Security sold to?
Lakera describes organizations that run AI across employees, applications, and autonomous agents as the audience for its three AI security products. From its own pages, Orchid Security sells mainly to teams in regulated industries under audit pressure and to identity programs with persistent blind spots.
What have Lakera and Orchid Security announced recently?
September 15, 2026: Orchid Security unveiled AI readiness controls for AI agents, covering ongoing identity drift detection and kill switches operating at the application level.

About Lakera

Lakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents. Lakera states that its security prevents prompt injections, data leakage, and jailbreaks before they affect a business. Lakera directs its products at enterprise teams working with GenAI, agents, and MCPs. Lakera states that it is learning from 1M+ hackers around the world.[1][6][8]

AI Agent Security enforces security on every AI interaction an organization runs by inspecting what goes in, controlling what comes out, and governing what agents do. AI Agent Security provides visibility into agent usage and MCP-connected systems across an environment, including agents that teams did not explicitly build or register. AI Agent Security discovers AI agents and MCP-connected tools across an environment and identifies what data, APIs, and systems agents can access. Lakera says AI Agent Security protects agents across the full lifecycle, from discovery and risk assessment to runtime enforcement.[4][8]

AI Agent Security connects cloud, low-code, and custom environments. AI Agent Security assesses each agent based on its configuration, tools, data access, MCP servers, and autonomy. AI Agent Security enforces access controls and runtime guardrails to block threats, prevent data leakage, and govern live agent actions. AI Agent Security detects and blocks prompt attacks, data leakage, unsafe tool use, and unauthorized agent actions as agents operate. Lakera says AI Agent Security blocks indirect injection through connected tools before agents act on compromised instructions. AI Agent Security requires no changes to models or prompts. AI Agent Security extends the AI Defense Plane to the agents organizations build and deploy.[4][8]

AI Red Teaming gives teams a continuous workflow to evaluate, scan, and red team AI applications and agents. AI Red Teaming scoping maps AI architecture, workflows, tools, memory systems, and trust boundaries to build a targeted threat model and test plan. AI Red Teaming tests with prompt injection, jailbreaks, tool exploitation, and multi-turn attacks against real systems. AI Red Teaming provides exploit validation, severity scoring, and remediation guidance. AI Red Teaming is available for text, audio, image, and multi-modal systems. AI Red Teaming assessment covers goal hijacking, tool misuse, privilege escalation, indirect injection, and cascading failures. AI Red Teaming delivers validated vulnerabilities with reproduction steps, severity ratings, and affected workflows.[6]

Workforce AI Security discovers shadow AI, assesses risk, governs employee usage, and stops sensitive data exposure across AI apps, browser extensions, desktop agents, IDEs, and MCP-connected tools. Workforce AI Security covers the places employees prompt, paste, upload, and interact with AI day to day. Workforce AI Security extends visibility and policy enforcement from public chatbots to SaaS copilots to MCP-connected workflows. Workforce AI Security extends visibility into AI workflows where tools can access code, data, and enterprise systems.[1][7]

A Lakera report is based on a 30-day snapshot of production attack traffic observed by Lakera Guard. Lakera states that its security covers chatbots and audio bots across any model. Lakera states that policies can be customized to secure applications horizontally without changing code. Lakera describes Gandalf as an online game designed for learning about AI security.[1][10][11][12]

Dropbox uses AI Agent Security to help safeguard its LLM-powered applications. Lakera and Snyk have partnered on AI agent security research.[1][4][6][7][10]

Lakera on the record

Sources

Lakera full record

  1. [1]Lakera: The AI-Native Security Platform to Accelerate GenAILakera · undated page, accessed September 27, 2026 · Tier A
  2. [2]Check point acquires lakera to deliver end to end ai security for enterprisesCheck Point Software Technologies · checkpoint.com · published September 16, 2025 · Tier A
  3. [3]Check point software reports fourth quarter and 2025 full year resultsCheck Point Software Technologies · checkpoint.com · published February 12, 2026 · Tier A
  4. [4]AI Agent Security Overview | Check Point AI SecurityLakera documentation · undated page, accessed October 26, 2026 · Tier A
  5. [5]Workforce AI Security | Lakera, a Check Point CompanyLakera · undated page, accessed October 26, 2026 · Tier A
  6. [6]AI Red Teaming Services: Expert-led adversarial testingLakera · undated page, accessed October 26, 2026 · Tier A
  7. [7]AI Guardrails Dashboard | Check Point AI SecurityLakera documentation · undated page, accessed October 26, 2026 · Tier A
  8. [8]Secure AI Agents from Discovery to RuntimeLakera · undated page, accessed October 26, 2026 · Tier A
  9. [9]Lakera Launches Open-Source Security Benchmark for LLM Backends in AI AgentsBusiness Wire · published October 28, 2025 · Tier A
  10. [10]Product Peek: Introducing Lakera’s Advanced Content ModerationLakera · undated page, accessed November 10, 2026 · Tier A
  11. [11]Q4 2025 AI Agent Security TrendsLakera · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI Security for Product Teams HandbookLakera · undated page, accessed November 10, 2026 · Tier A

Orchid Security full record

  1. [1]orchid.securityOrchid Security · orchid.security · undated page, accessed October 29, 2026 · Tier A
  2. [2]Ai readinessOrchid Security · orchid.security · published September 9, 2026 · Tier A
  3. [3]Orchid - Identity Visibility and Intelligence for the Application LayerOrchid Security · undated page, accessed November 5, 2026 · Tier A
  4. [4]Bringing Clarity to the Complexity of IdentityOrchid Security · undated page, accessed November 5, 2026 · Tier A
  5. [5]Agentic AI Identity Security: Closing the Gaps Agents ExploitOrchid Security · undated page, accessed November 5, 2026 · Tier A
  6. [6]Identity Security Platform: Uncover Identity Dark MatterOrchid Security · undated page, accessed November 5, 2026 · Tier A
  7. [7]Beyond Shadow IT: The Identity Dark Matter Undermining ComplianceOrchid Security · undated page, accessed November 5, 2026 · Tier A
  8. [8]Security That Survives the Acquisition.Orchid Security · undated page, accessed November 5, 2026 · Tier A
  9. [9]Customer StoriesOrchid Security · undated page, accessed November 5, 2026 · Tier A
  10. [10]Why 50% of Identity Projects Fail (And How to Fix the "Blueprint")Orchid Security · undated page, accessed November 5, 2026 · Tier A
  11. [11]Orchid Launches Identity Audit to Illuminate the Dark Matter of Enterprise Identity ActivityOrchid Security · published February 5, 2026 · Tier A
  12. [12]Orchid Security Adds AI Readiness Controls: Identity Drift Detection and Application-Level Kill Switches for AI AgentsGlobeNewswire · published September 9, 2026 · Tier A
  13. [13]Orchid Security targets AI agent sprawl with new identity governance toolsSiliconANGLE · published May 28, 2026 · Tier B
  14. [14]Orchid Security Introduces AI Agent Readiness Controls Featuring Continuous Identity Monitoring and Kill-Switch CapabilitiesCSO Online · published September 15, 2026 · Tier B

Spot a factual error? Request a correction.