CISO Tribune

Vendor comparison · 2 companies

Onyx Security vs Straiker

Onyx Security sells a secure control plane for AI agents and models. Straiker lets security teams discover agents, MCP servers, and Skills, test how they can fail, and stop malicious behavior at runtime. CISO Tribune files both under AI model and agent security and AI governance. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Onyx Security
  • Straiker
Onyx Security vs Straiker: Products, Customers and Funding Compared
Onyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.securityStraikerStraiker lets security teams discover agents, MCP servers, and Skills, test how they can fail, and stop malicious behavior at runtime.straiker.ai
What it sells
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
  • Discover AI[2][3][4][5][12]Maps every AI agent, MCP server, and agentic workflow in an environment.
  • Ascend AI[2][3][7][12]Ascend AI is Straiker's adversarial testing engine for AI agents.
  • Defend AI[2][3][8][9][12]Defend AI delivers runtime security for AI agents.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
  • August 11, 2026Straiker was named an OpenAI Select Partner within the OpenAI Partner Network.[16]
  • August 4, 2026Straiker launched the Agentic Kill Switch, a control that lets security teams take a misbehaving or compromised AI agent offline.[15]
  • June 29, 2026Straiker announced a $64 million Series A, bringing its total funding to $85 million.[14]
  • June 29, 2026Straiker announced a $64 million Series A, bringing its total funding to $85 million.[13]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.Not written yet
Last verified
October 19, 2026November 5, 2026

Where they overlap

  • AI model and agent security is the primary category of both Onyx Security and Straiker; both are also filed under AI governance.

Where they differ, field by field

  • Onyx Security is also filed under Workforce AI usage security and Non-human identity security. Straiker is also filed under AI firewalls and guardrails.
  • Onyx Security lists AI Security and MCP Gateway. Straiker lists Discover AI, Ascend AI and Defend AI.

How they differ

CISO Tribune files both Onyx Security and Straiker under AI model and agent security as the primary category, and both also appear under AI governance. Onyx Security sells a control plane for AI agents and models, including an AI Security product for runtime and posture and an MCP Gateway for the agent-to-tool surface. Onyx inspects prompts, tool calls, and model responses inline and offers five enforcement actions: alert, block, mask, steer, or ask. Straiker sells three products: Discover AI, which maps agents, MCP servers, and agentic workflows; Ascend AI, an adversarial testing engine; and Defend AI, which provides runtime security for AI agents.

The two overlap on MCP traffic and runtime enforcement, though the packaging differs. Onyx adds AI spend and cost reporting, and offers cloud, hybrid, or self-hosted deployment. Straiker adds continuous adversarial testing in CI/CD pipelines, staging environments, and production deployments, where a successful Ascend AI attack can become a Defend AI policy. Onyx forwards alerts to Splunk and CrowdStrike NG-SIEM and pulls identity context from Okta and Microsoft Entra. Straiker's Defend AI covers coding agents such as Cursor, GitHub Copilot, and Claude Code.

On recent activity, Onyx Security announced a $113 million Series B led by Bessemer Venture Partners on July 29, 2026, after launching operations on March 12, 2026 with $40 million in initial funding. Straiker announced a $64 million Series A on June 29, 2026, bringing its total funding to $85 million. Straiker launched the Agentic Kill Switch on August 4, 2026, and was named an OpenAI Select Partner on August 11, 2026.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

What it sells: Straiker

What Discover AI does[2][3][4][5][12]
Discover AI delivers continuous posture monitoring, misconfiguration detection, and governance. Discover AI evaluates agent configurations, permissions, and blast radius to surface misconfigurations and risky integrations before they become incidents. Discover AI covers builder platforms like Bedrock Agentcore, Azure Foundry, and MS Copilot Studio.
What Ascend AI does[2][3][7][12]
Ascend AI tests for prompt injection, goal hijacking, tool misuse, and inter-agent manipulation. Ascend AI integrates into CI/CD pipelines, staging environments, and production deployments to run continuous adversarial testing. A successful Ascend AI attack can become a Defend AI policy.
What Defend AI does[2][3][8][9][12]
Defend AI detects and blocks identity abuse, memory poisoning, data exfiltration, and resource exploitation at runtime. Defend AI secures coding agents such as Cursor, GitHub Copilot, and Claude Code with runtime protection against destructive actions, data exfiltration, and malicious MCP server and Skill connections. Defend AI detects data exfiltration across SaaS applications, blocks prompt injection delivered through enterprise content like emails and documents, and surfaces unapproved agent usage.

Questions about Onyx Security and Straiker

What do Onyx Security and Straiker sell?
Onyx Security sells AI Security and MCP Gateway. Straiker sells Discover AI, Ascend AI and Defend AI.
Are Onyx Security and Straiker in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Who are Onyx Security and Straiker sold to?
From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have Onyx Security and Straiker announced recently?
July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners. August 11, 2026: Straiker was named an OpenAI Select Partner within the OpenAI Partner Network.

About Onyx Security

Onyx Security sells a secure control plane for AI agents and models. Onyx gives security, governance, and AI teams control to protect, optimize, and measure AI agent adoption across the enterprise. Onyx was founded around a single goal: to control the most advanced forms of AI. Onyx describes its secure AI control plane as a single platform that serves security, governance, and infrastructure teams as they oversee how AI agents are used, ensure they are secure and compliant, and measure their effectiveness.[1][2]

Onyx says enterprises were deploying autonomous agents faster than they could see, govern, or control them. Onyx offers one console for every AI agent and model across SaaS, cloud, endpoint, and code. Onyx discovers sanctioned and shadow AI across the enterprise, with visibility into every prompt, response, and agent action. Onyx identifies every agent, MCP server, AI tool, copilot, and embedded AI surface continuously, across SaaS, cloud, endpoints, and code. Onyx combines directory scanning, native platform APIs, and behavioral signature learning for browser-based AI to keep the inventory current. Onyx records every prompt, model response, and tool call by name, argument, and result, with the reasoning context preserved across turns. Onyx correlates agent activity to the invoking user and the agent owner, and captures the identity used on each tool and MCP call. Onyx forwards alerts and their session records to Splunk and CrowdStrike NG-SIEM.[1][2][4][5][8]

Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx applies five enforcement actions: alert, block, mask, steer, or ask (human in-the-loop). Onyx evaluates every agent on deployment and continuously across its lifecycle. Onyx red teaming continuously attacks deployed agents, generating attack plans across reconnaissance, jailbreaking, and weaponization. Onyx identifies supply chain risks in agents, MCP servers, models, and AI assets.[4][6]

Onyx gives an agent its own identity, separate from the invoker, when multiple users delegate to the same agent across tools. Onyx lets teams sanction approved tools and control MCP server access. Onyx offers pre-populated policy templates aligned to industry regulations. Onyx helps teams meet security standards from MITRE, NIST, OWASP, and more.[4][7]

Onyx centralizes all AI traffic on a fully-managed, OSS AI gateway. Onyx routes across popular LLMs to automate failover, minimize latency, and balance load by task complexity and cost constraints. Onyx proxies all MCP traffic with an inline gateway, logs every request and response, and enforces guardrails. Onyx evaluates every tool call an agent makes to an MCP server against scope, identity, data class, and policy before the call lands.[4][8]

Onyx lets teams define AI adoption targets by department, use case, or tool category. Onyx shows total AI spend, avoidable costs, and optimization opportunities. Onyx correlates AI usage, cost, risk, and outcomes to the same activity record. The Onyx AI Gateway captures per-request cost metadata at runtime: cost, tokens, model, and identity context. The Onyx Guardian Agent is a supervisory AI that continuously works across the platform to identify risks and remediate issues.[2][4][9]

Onyx offers cloud, hybrid, or self-hosted options for sensitive data residency requirements. Onyx supports deployment with AWS VPC, Bedrock Gateway, and custom proxy configurations. Onyx offers 100+ pre-built integrations that connect to agent platforms, frontier model providers, SIEM, and cloud platforms. Onyx pulls identity context from Okta and Microsoft Entra, and endpoint management context from Intune, Jamf, and Tanium. Onyx integrates with Claude Enterprise through the Compliance API, pulling conversation content, uploaded files, project data, and activity logs into the Onyx control plane. Onyx integrates with the OpenAI Compliance API, ingesting ChatGPT Enterprise workspace activity. Onyx integrates with Amazon Bedrock Agents through Bedrock Agent configuration APIs, agent invocation logs delivered to S3, and CloudTrail data events. Onyx integrates with Microsoft Copilot Studio through the Microsoft Graph API. Onyx Security is SOC 2 Type II and ISO 27001 certified.[1][4][6][7][8][10][11][12][13]

Onyx Security on the record

Sources

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Straiker full record

  1. [1]AboutStraiker · straiker.ai · undated page, accessed November 5, 2026 · Tier A
  2. [2]Straiker | The Agentic AI Security CompanyStraiker · undated page, accessed November 10, 2026 · Tier A
  3. [3]AI Agent Security Platform | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  4. [4]Discover AI: AI Agent Inventory, AI-SPM & Agent-SPM | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  5. [5]Security for Coding Copilots and Agents | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security Testing and Red Teaming | Straiker Ascend AIStraiker · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Red Teaming for Agentic Applications and AI Agents | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Agent Runtime Security and Protection | Straiker Defend AIStraiker · undated page, accessed November 10, 2026 · Tier A
  9. [9]Runtime AI Guardrails for Agentic Applications | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  10. [10]MCP & Agent Skills Security | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  11. [11]GenAI and Agentic AI Threat Detection | StraikerStraiker · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI Agent Compliance & Governance | Visibility, Audit Trails & Runtime ControlsStraiker · undated page, accessed November 10, 2026 · Tier A
  13. [13]Straiker Raises $64M Series A to Secure the Agentic WorkforcePR Newswire · published June 29, 2026 · Tier A
  14. [14]Straiker Raises $64M Series A for AI Agent SecurityStraiker · published June 29, 2026 · Tier A
  15. [15]Straiker Launches First AI Agent Kill Switch for EnterprisesStraiker · published August 4, 2026 · Tier A
  16. [16]Straiker Named OpenAI Select Partner | AI Agent SecurityStraiker · published August 11, 2026 · Tier A

Spot a factual error? Request a correction.