CISO Tribune

Vendor comparison · 2 companies

SplxAI vs Veracode

SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. Veracode sells an Application Risk Management Platform that identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance. CISO Tribune files both under Static application security testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • SplxAI
  • Veracode
SplxAI vs Veracode: Products, Customers and Funding Compared
SplxAISplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems.splx.aiVeracodeVeracode sells an Application Risk Management Platform that identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance.veracode.com
What it sells
  • Agentic Radar[1][5]An open-source security scanner for agentic AI.
  • Veracode Dynamic Analysis[13]Dynamic scanning for runtime vulnerabilities in web apps and APIs.
  • Veracode Fix[15]AI-powered remediation for in-house code and open-source libraries.
  • eLearning[4][11]Hands-on training to build secure coding skills.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2023[2]Not stated on its pages
Ownership and funding
Owned by Zscaler since 2025[3]Owned by Thoma Bravo since 2019[2][4][10][14]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • February 5, 2026Veracode announced that its new Annual Contract Value rose 81 percent year over year in the final quarter of 2025.[9]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability. Its asset management messaging speaks to organisations that want visibility and control over the AI assets used in the organisation. Its runtime messaging addresses teams with AI systems in production. Its governance messaging speaks to teams working with global AI security frameworks and internal risk policies.The company says its platform gives enterprises a clearer view of application risk from code to runtime. The company addresses financial institutions on GLBA compliance. The company addresses healthcare regulations like HIPAA and GDPR. The company addresses developers who want remediation guidance and AI-driven fixes inside the tools they already use.
Last verified
September 30, 2026September 27, 2026

Where they overlap

  • SplxAI and Veracode are both filed under Static application security testing.

Where they differ, field by field

  • SplxAI's primary category is AI model and agent security; Veracode's is Static application security testing.
  • SplxAI is also filed under AI governance and AI firewalls and guardrails. Veracode is also filed under Dynamic application security testing, Software composition analysis and Software supply chain security.
  • SplxAI lists Agentic Radar. Veracode lists Veracode Dynamic Analysis, Veracode Fix and eLearning.
  • SplxAI was founded in 2023.
  • SplxAI is owned by Zscaler, since 2025. Veracode is owned by Thoma Bravo, since 2019.

What it sells: Veracode

What Veracode Dynamic Analysis does[13]
Dynamic application security testing identifies and addresses runtime vulnerabilities in web apps and APIs through simulated attacks. Dynamic scans can be automated or scheduled to match release frequency, compliance, and policy needs. Dynamic scans can cover hundreds of assets across environments, including those behind a firewall.
What Veracode Fix does[15]
Veracode Fix brings AI-powered remediation to the code written in-house and the open-source libraries it depends on. Veracode Fix integrates into the IDE, CLI, or CI/CD tool, with interactive and batch modes.

Questions about SplxAI and Veracode

What do SplxAI and Veracode sell?
SplxAI sells Agentic Radar. Veracode sells Veracode Dynamic Analysis, Veracode Fix and eLearning.
Are SplxAI and Veracode in the same category?
They share Static application security testing. SplxAI's primary category is AI model and agent security and Veracode's is Static application security testing.
When were SplxAI and Veracode founded?
SplxAI was founded in 2023.
Who owns SplxAI and Veracode?
SplxAI is owned by Zscaler, since 2025. Veracode is owned by Thoma Bravo, since 2019.
Who are SplxAI and Veracode sold to?
From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability. The company says its platform gives enterprises a clearer view of application risk from code to runtime.
What have SplxAI and Veracode announced recently?
February 5, 2026: Veracode announced that its new Annual Contract Value rose 81 percent year over year in the final quarter of 2025.

About SplxAI

SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. SPLX delivers security tooling for red teaming, runtime security, governance and remediation to build, deploy and scale AI systems. SPLX helps global enterprises secure AI systems end-to-end. SPLX describes security teams as lacking the tools to continuously map, monitor, or validate dynamic LLM behavior and vulnerabilities.[4][5][7][9][11]

SPLX builds an AI-BOM, uncovers vulnerabilities, and helps users stay aligned with compliance frameworks. SPLX detects LLMs used across an organization and shows benchmark scores for each. SPLX lets users approve or block usage of the LLMs it detects. SPLX scans code repos to visualize every agent, tool, and MCP server in AI workflows. SPLX discovers MCP servers in an environment and scans for exploitable vulnerabilities in orchestration layers. SPLX connects to cloud platforms, code repos, ML and AI platforms for a unified inventory of AI assets in an organization.[5][8]

SPLX runs automated red teaming that continuously uncovers vulnerabilities in AI systems. SPLX red teaming runs high-scale vulnerability assessments and simulates domain-specific attacks on AI systems from build to runtime. SPLX red teaming tests malicious prompts from adversarial and regular user personas. SPLX red teaming covers prompt injections, off-topic, hallucinations, and social engineering. SPLX lets users create custom AI assessments to test for specific risk scenarios and security criteria. SPLX lets users upload predefined datasets tailored to their threat models for red teaming. SPLX red teaming simulates attack scenarios with different input types for multi-modal AI assistants. The SplxAI platform integrates into the CI/CD pipeline.[1][4][5][7][9]

SPLX generates hardened system prompts and applies targeted remediation steps based on red teaming insights. SPLX hardens a system prompt and applies dynamic remediation strategies. SPLX enforces input and output guardrails during live deployments to detect malicious behavior, prevent prompt injections, and stop sensitive data leakage in real time. SPLX lets users define off-topic rules and risk boundaries through natural language. SPLX provides detailed logs of blocked prompts and flagged outputs. SPLX scans LLM logs to detect jailbreaks, prompt injections, and malicious queries in near real time. SPLX lets users select risk scanners and upload LLM logs for threat discovery.[1][4][5][7][10][12]

The SPLX Platform maps an AI risk surface to global and industry-specific frameworks to help identify compliance gaps. SPLX automatically maps test results to AI frameworks to spot gaps and eliminate manual tracking. SPLX lets users set custom governance rules or import JSON policies to enforce internal security standards. SPLX stress-tests open-source and commercial language models with thousands of attacks. SPLX model testing shows how models perform with no prompt, a basic prompt, and a hardened prompt.[1][4][5][6][13]

SPLX offers API integration that allows for connections to any type of endpoint. Agentic Radar is an open-source security scanner for agentic AI. Agentic Radar visualizes workflows, surfaces attack patterns and tool-level vulnerabilities, and provides hardening recommendations for each agent.[1][4][5]

SPLX says it has put controls in place to meet the compliance needs of highly regulated industries. SPLX describes itself as a remote-first team.[1][4][5][6][7][9][10][11][14][15]

SplxAI on the record

Sources

SplxAI full record

  1. [1]splx.aiSplxAI · splx.ai · undated page, accessed September 30, 2026 · Tier A
  2. [2]SplxAI Closes $7M Seed Funding Round to Help Organizations Secure Agentic AI SystemsBusiness Wire · businesswire.com · published March 26, 2025 · Tier A
  3. [3]Zscaler acquires splxSplxAI · splx.ai · published November 3, 2025 · Tier A
  4. [4]SPLX Platform | End-to-End Security for the AI LifecycleSPLX · undated page, accessed October 31, 2026 · Tier A
  5. [5]SPLX | End-to-End Security for AISPLX · undated page, accessed October 31, 2026 · Tier A
  6. [6]AI Governance & Compliance | Stay Aligned with AI PoliciesSPLX · undated page, accessed October 31, 2026 · Tier A
  7. [7]Remediation | Harden your LLM system prompts to mitigate risksSPLX · undated page, accessed October 31, 2026 · Tier A
  8. [8]AI Asset Management | Unified Inventory & Security for Enterprise AISPLX · undated page, accessed October 31, 2026 · Tier A
  9. [9]Probe | Automated & Continuous Red Teaming for Conversational AISPLX · undated page, accessed October 31, 2026 · Tier A
  10. [10]AI Runtime Protection | Real-Time AI Threat DetectionSPLX · undated page, accessed October 31, 2026 · Tier A
  11. [11]SplxAI | The future of automated AI Red TeamingSPLX · undated page, accessed November 10, 2026 · Tier A
  12. [12]Monitoring | Analyze LLM Logs to proactively identify malicious user activitySPLX · undated page, accessed November 10, 2026 · Tier A
  13. [13]LLM Benchmarks | Compare and Evaluate the Security of Leading AI ModelsSPLX · undated page, accessed November 10, 2026 · Tier A
  14. [14]Security and TrustSPLX · undated page, accessed November 10, 2026 · Tier A
  15. [15]Pricing & PlansSPLX · undated page, accessed November 10, 2026 · Tier A

Veracode full record

  1. [1]PlatformVeracode · veracode.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Thoma bravo completes acquisition of veracode softwareThoma Bravo · thomabravo.com · published January 2, 2019 · Tier A
  3. [3]Veracode | Application Risk Management PlatformVeracode · undated page, accessed October 30, 2026 · Tier A
  4. [4]Application Risk Management: Secure Your SoftwareVeracode · undated page, accessed October 30, 2026 · Tier A
  5. [5]Static Application Security Testing (SAST) with VeracodeVeracode · undated page, accessed October 30, 2026 · Tier A
  6. [6]Code Confidently with Veracode Package FirewallVeracode · undated page, accessed October 30, 2026 · Tier A
  7. [7]Container Security | VeracodeVeracode · undated page, accessed October 30, 2026 · Tier A
  8. [8]Scan containers, IaC, and secrets | Veracode DocsVeracode Docs · undated page, accessed October 30, 2026 · Tier A
  9. [9]Veracode Closes Record Year of Growth and Innovation Amid Surging Demand for Application Risk ManagementBusiness Wire · published February 5, 2026 · Tier A
  10. [10]Veracode Application Security Platform Reviews & Product DetailsG2 · undated page, accessed October 30, 2026 · Tier C
  11. [11]Veracode | Application Risk Management SolutionsVeracode · undated page, accessed November 4, 2026 · Tier A
  12. [12]Chief Risk Officer (CRO) | Application Risk Management | VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A
  13. [13]Dynamic Application Security Testing (DAST) with VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A
  14. [14]Application Security for Healthcare | VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A
  15. [15]AI Code Remediation | Fix Application Vulnerabilities with VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A
  16. [16]Application Security for the Energy Sector | VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A
  17. [17]GLBA Financial Security Compliance | VeracodeVeracode · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.