CISO Tribune

Vendor comparison · 2 companies

Noma Security vs Onyx Security

Noma Security sells an Agent Security & Governance Platform for enterprise security teams. Onyx Security sells a secure control plane for AI agents and models. CISO Tribune files both under AI model and agent security and AI governance. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Noma Security
  • Onyx Security
Noma Security vs Onyx Security: Products, Customers and Funding Compared
Noma SecurityNoma Security sells an Agent Security & Governance Platform for enterprise security teams.noma.securityOnyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.security
What it sells
  • AI DiscoveryFinds every AI agent, model, MCP server and tool across cloud, SaaS and developer environments.
  • AI Security Posture Management[7]Defines which agents are approved, what data they can access and what actions they can take, and enforces those policies in real time.
  • AI Red Teaming[4][13]Probes AI applications and agents with multi-turn tests for prompt injection, jailbreak, data leakage and goal drift.
  • Runtime Protection[2]Monitors the full chain of an agent session, including prompts, tool calls and data access, and detects prompt injection and data exfiltration in real time.
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2023[3]Not stated on its pages
Ownership and funding
Privately held[4]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 26, 2026Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer.[15]
  • February 27, 2026Noma Security announced its AI security platform is available through the Extended plan in AWS Security Hub.[16]
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its coverage spans AI assets across endpoint, SaaS, and cloud environments. The pages address organisations whose employees use agents. The pages address organisations whose agents run on SaaS platforms or on cloud platforms.From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.
Last verified
September 27, 2026October 19, 2026

Where they overlap

  • AI model and agent security is the primary category of both Noma Security and Onyx Security; both are also filed under AI governance.

Where they differ, field by field

  • Noma Security is also filed under AI firewalls and guardrails. Onyx Security is also filed under Workforce AI usage security and Non-human identity security.
  • Noma Security lists AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection. Onyx Security lists AI Security and MCP Gateway.
  • Noma Security was founded in 2023.
  • Noma Security is privately held.

How they differ

Noma Security sells AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection. Onyx Security sells AI Security, which is the runtime and posture layer of its Secure AI Control Plane, and an MCP Gateway that inspects every tool call an agent makes to an MCP server. Onyx Security applies five enforcement actions: alert, block, mask, steer, or ask.

Onyx Security also describes an AI gateway that captures per-request cost metadata and shows total AI spend. Onyx Security offers cloud, hybrid, or self-hosted options for organizations with data residency requirements. Noma Security says it finds AI assets across endpoint, SaaS, and cloud environments, and it names Agentforce, Microsoft Copilot and Claude Enterprise among the SaaS platforms where it discovers agents. Onyx Security lists integrations with Okta, Microsoft Entra, Splunk and CrowdStrike NG-SIEM.

Noma Security was founded in 2023 and is privately held. On February 27, 2026, Noma Security announced that its AI security platform is available through the Extended plan in AWS Security Hub. On October 26, 2026, Noma Security appointed a Chief Financial Officer and a Chief Customer Officer. Onyx Security officially launched operations on March 12, 2026 after securing $40 million in initial funding. On July 29, 2026, Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

Questions about Noma Security and Onyx Security

What do Noma Security and Onyx Security sell?
Noma Security sells AI Discovery, AI Security Posture Management, AI Red Teaming and Runtime Protection. Onyx Security sells AI Security and MCP Gateway.
Are Noma Security and Onyx Security in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
When were Noma Security and Onyx Security founded?
Noma Security was founded in 2023.
Who owns Noma Security and Onyx Security?
Noma Security is privately held.
Who are Noma Security and Onyx Security sold to?
Its coverage spans AI assets across endpoint, SaaS, and cloud environments. From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have Noma Security and Onyx Security announced recently?
October 26, 2026: Noma Security appointed Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer Officer. July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

About Noma Security

Noma Security sells an Agent Security & Governance Platform for enterprise security teams. Noma Security says AI adoption is outpacing security across every enterprise.[1][5]

Noma Security finds every AI component in an organisation. Noma Security provides continuous visibility and risk assessments on agents, MCPs, skills, and models across every environment. Noma Security finds AI assets across endpoint, SaaS, and cloud environments. Noma Security shows what those AI assets can reach and which risks need attention.[1][6][7]

Noma Security discovers agents across Agentforce, Microsoft Copilot, Claude Enterprise and other SaaS platforms. Noma Security identifies risk and prevents agents from taking dangerous actions in runtime. Noma Security discovers agents across cloud platforms and surfaces their risks. Noma Security tests agents on cloud platforms for AI-specific risks. Noma Security controls the actions that agents on cloud platforms take in runtime.[8][9]

Noma Security secures the identity, access, and actions of each agent. Noma Security discovers the agents that employees are using. Noma Security defines what each of those agents is allowed to do and stops the ones that break the rules at runtime. Noma Security defines what actions each agent can take and scopes permissions by identity. Noma Security enforces policies at the moment a connection or action is attempted.[1][10][11]

Noma Security discovers, governs, and protects MCP servers. Noma Security discovers MCP servers and assesses their risks. Noma Security controls tool access for MCP servers and stops threats at runtime.

Noma Security stops dangerous agent behavior at runtime. Noma Security describes agents as able to go rogue or be manipulated. Noma uses context to detect dangerous behavior and enforce policies.[12]

Noma Security tests AI applications and agents for security, compliance, and privacy risks. Noma Security tests AI applications and agents to find weaknesses before attackers or customers do. Noma Security answers questions about AI risk with evidence. Noma Security brings together AI inventory, evaluation results, and runtime records. Noma Security shows what an organisation runs, how it tests it, and how controls are enforced.[1][2][8][9][10][13][14]

Noma Security on the record

Sources

Noma Security full record

  1. [1]Agent Security and Governance | NomaNoma Security · undated page, accessed September 27, 2026 · Tier A
  2. [2]Noma security raises 100m to drive adoption of ai agent security 302518641Noma Security via PR Newswire · prnewswire.com · published July 31, 2025 · Tier A
  3. [3]Noma security raises 100 million for ai security platformSecurityWeek · securityweek.com · published July 31, 2025 · Tier B
  4. [4]MCP Security: Discover, Govern, and Protect MCP Servers | NomaNoma Security · undated page, accessed October 28, 2026 · Tier A
  5. [5]AI Security Solutions for Secure AI, Everywhere | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Shadow AI Discovery: Find Every Agent in Your Organization | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI-SPM: AI Security Posture Management | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]SaaS Agent Security for Copilot Studio & AgentForce | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI Application Security for Bedrock, Azure & Databricks | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Agentic Identity: Know Who Your Agents Are and What They're Doing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Agent Access Control | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI-DR: AI Detection and Response | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI Red Teaming: Automated Adversarial Testing | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI Compliance and Reporting | NomaNoma Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]Noma Security Appoints Bobby Shoker as Chief Financial Officer and Alberto Rodrigues as Chief Customer OfficerPRNewswire · published October 26, 2026 · Tier A
  16. [16]Noma AI Security Integrates with New Extended Plan for AWS Security HubPRNewswire · published February 27, 2026 · Tier A

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.