Agentic Index
Lasso Security vs Pillar Security (2026)
Both vendors last verified
Lasso Security and Pillar Security both discover the customer's agents, red team them and enforce guardrails at runtime. That verdict is the Agentic Index coverage score, graded from each vendor's own published materials.
Lasso connects to CI/CD and cloud platforms, covering agents on Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce, attacks them from more than 3,000 payloads and enforces intent based policies at its gateway, with a free assessment on request. Pillar maps exploitable paths with RedGraph, runs multi turn and black box attacks, logs every tool call and can run in the customer's VPC. Neither publishes a price. Choose Lasso for gateway enforcement across the big agent platforms, and Pillar to keep the platform in your own VPC.
On the Agentic Index AI SOC ranking, neither Lasso Security nor Pillar Security clears the bar, which asks for all five investigation loop capabilities documented in full. Neither documents workflow orchestration in full, nor human oversight and guardrails. 25 of the 86 vendors in the lane clear it. See the AI SOC ranking
On the Agentic Index agent infrastructure ranking, neither Lasso Security nor Pillar Security clears the bar, which asks for all five production contract capabilities documented in full. Lasso Security documents two of the five in full; Pillar Security does not document security and identity governance in full, nor model flexibility and routing. 33 of the 186 vendors in the lane clear it. See the agent infrastructure ranking
This comparison is published by Agentic Index, an independent agentic AI vendor research platform. Lasso Security and Pillar Security are each graded against the same 14 capability Agentic Index taxonomy, from the vendor's own public materials under the Agentic Index verification standard, alongside 1,084 researched vendors. No vendor pays for placement and no vendor has reviewed this page. How this evidence is graded
Choose Lasso Security if
- Your agents run on Vertex AI, Copilot, Bedrock or Agentforce.
- Runtime policy should enforce intent at a gateway.
- Agents on Vertex AI, Copilot, Bedrock and Agentforce all need protecting.
Choose Pillar Security if
- Deployment inside your own VPC is required.
- You want attack paths mapped across tools, prompts and data.
- Every tool call should be logged through the guardrails.
| Feature | L Lasso Security |
P Pillar Security |
|---|---|---|
| Action & orchestration | ||
|
Integrations & Tool Calling Ability to connect agents to real systems through native integrations, OAuth-authenticated actions, custom tools, APIs, webhooks, or MCP-compatible tools. |
||
|
Lasso SecurityIntegrations & Tool Calling The platform deploys inline through a gateway, API or SDK in front of the customer's AI traffic. It discovers agents across Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce, connects to CI/CD and cloud platforms, and blocks threats at runtime. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
||
|
Pillar SecurityIntegrations & Tool Calling Discovery connects across the customer's environment to inventory agents and models along with MCP servers and tools. Runtime guardrails block and redact agent traffic, and telemetry streams to SIEM platforms. Discovery reaches code repositories, cloud infrastructure, AI platforms and MCP servers, and the guardrails plug into AI gateways such as LiteLLM, Kong, TrueFoundry and Agent Router. SourcePillar Security, pillar.security/platform and /platform/runtime-guardrailsread 2026-10-05 |
||
|
Workflow Orchestration Ability to sequence, branch, retry, route, and combine deterministic workflow nodes with autonomous agent steps. |
||
|
Lasso SecurityWorkflow Orchestration A fixed five stage product lifecycle runs from discovery to protection, with red team findings feeding guardrail updates. Lasso does not orchestrate the customer's agents, and customers build no flows of their own in it. Lasso no longer presents offensive agents as part of the product. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
||
|
Pillar SecurityWorkflow Orchestration The product runs a fixed loop of discovery, red teaming and runtime guardrails, with governance on top and findings that tune the guardrails. Pillar does not orchestrate the customer's agents or offer a flow the customer builds. The loop covers coding agents, MCP servers and skill marketplaces. SourcePillar Security, pillar.security/platform and pillar.securityread 2026-10-05 |
||
|
Triggers & Channel Coverage How agents wake up and where they work: schedules, webhooks, message events, CRM events, inbox events, chat, email, voice, and collaboration tools. |
||
|
Lasso SecurityTriggers & Channel Coverage Inline detection runs on every request and agent action that passes the gateway. Red teaming runs automatically on every application update through CI/CD. Neither needs anyone to start it. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
||
|
Pillar SecurityTriggers & Channel Coverage Runtime guardrails act on every prompt and response, and on retrieved content and tool invocations, as they happen. Behavioral monitoring flags when an agent strays from its purpose, so work starts without anyone launching it. The guardrails judge intent rather than only matching patterns, blocking prompt injection, jailbreaks and tool manipulation as they happen. SourcePillar Security, pillar.security/platform/runtime-guardrailsread 2026-10-05 |
||
| Knowledge & context | ||
|
Knowledge Grounding & RAG Ability to ground agent behavior in company data through document ingestion, retrieval, external knowledge APIs, semantic search, or RAG layers. |
||
|
Lasso SecurityKnowledge Grounding & RAG Discovery inventories every agent and application and maps their models, system prompts, tools and guardrails. The result is a named map of the customer's AI estate. Lasso names no retrieval structure for agents to draw on. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
||
|
Pillar SecurityKnowledge Grounding & RAG A full inventory covers the customer's agents and models along with MCP servers and tools, with agent permissions mapped to data sources, and RedGraph maps how tools, prompts and data combine. Together they chart the customer's AI estate, including shadow AI, and Pillar describes no retrieval structure its agents draw on. Runtime guardrails also trace PII and secrets from source to destination. SourcePillar Security, pillar.security/platformread 2026-10-05 |
||
|
Memory & State Persistence Ability to persist context across a run, conversation, workflow, user, team, or longer-term memory layer. |
||
|
Lasso SecurityMemory & State Persistence The customer's agents get no memory from Lasso. Intent Security's behavioral baselines are the product's own detection state, and Lasso does not say how long they are kept. The audit trails record what agents did, and the agents do not draw on them as memory. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
||
|
Pillar SecurityMemory & State Persistence There is no memory for the customer's agents. The asset map and the interaction logs are records about the agents, not memory the agents use. Sourcepillar.security/platformread 2026-09-28 |
||
| Control & trust | ||
|
Human Oversight & Guardrails Approval steps, consent checkpoints, escalation rules, structured guardrails, policy constraints, and pause/resume controls. |
||
|
Lasso SecurityHuman Oversight & Guardrails Policies are enforced inline at the proxy, API or gateway. Intent Security acts on a threshold by "either blocking the request or sending an alert". Lasso names no step where a person approves an agent's action before it commits. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
||
|
Pillar SecurityHuman Oversight & Guardrails Runtime guardrails block malicious instructions and interactions that break data handling rules, and they redact sensitive content. Approved model lists and MCP allowlists set further limits. The customer sets these limits, and Pillar describes no step that asks a person to approve before an agent action goes through. Blocking follows configurable policies for data handling and data sovereignty. SourcePillar Security, pillar.security/platform/runtime-guardrails and /platformread 2026-10-05 |
||
|
Security, Identity & Governance RBAC, SSO, auditability, encryption, least-privilege tool access, compliance posture, and data handling policy. |
||
|
Lasso SecuritySecurity, Identity & Governance ISO, AICPA, GDPR and PCI badges sit in Lasso's site footer, and its information security policy sits in an embedded document. Lasso names no SSO, role model or audit surface for the product itself, and its product docs sit behind a login. The access controls Lasso sells govern its customers' AI, not who can use Lasso. Sourcelasso.security/information-security-policyread 2026-09-28 |
||
|
Pillar SecuritySecurity, Identity & Governance Pillar reports a SOC 2 Type II audit, and its trust center is at trust.pillar.security. Pillar names no SSO, role model or audit surface for people using the Pillar console. SourcePillar Security, pillar.securityread 2026-10-05 |
||
|
Observability & Auditability Traces, logs, execution histories, metrics, audit events, and debugging detail for production agent behavior. |
||
|
Lasso SecurityObservability & Auditability Intent Security monitors "the entire interaction execution path" and checks each tool invocation against the request, a check Lasso calls Tool and Response Alignment. The agent product keeps "audit trails for every agent activity and decision in real-time". The record covers the customer's agents down to each step and tool call. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
||
|
Pillar SecurityObservability & Auditability Runtime guardrails log every prompt, response and tool call with metadata and timestamps for the customer's agents, along with results, and stream telemetry to SIEM, giving a record of every tool call. Audit logs, compliance reports and policy lifecycle management sit under governance. SourcePillar Security, pillar.security/platform/runtime-guardrails and /platformread 2026-10-05 |
||
|
Deployment & Data Residency Deployment modes and options, including SaaS, dedicated cloud, VPC, on-prem, hybrid, local runtime, and self-hosting. |
||
|
Lasso SecurityDeployment & Data Residency Integration runs through a gateway, API or SDK. No hosting region is published, and Lasso does not say whether customers can run it in their own environment. Its product docs sit behind a login. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
||
|
Pillar SecurityDeployment & Data Residency Customers can deploy Pillar in their own VPC with their own data and models, so it can run in the customer's own environment. Pillar is offered as cloud, self hosted or hybrid. SourcePillar Security, pillar.security and /platformread 2026-10-05 |
||
| Solution readiness | ||
|
Prebuilt Agents, Templates & Packs Ready-made workflows, packaged employees, templates, blueprints, industry solutions, and role-specific agents that reduce time-to-value. |
||
|
Lasso SecurityPrebuilt Agents, Templates & Packs A prebuilt library of more than 3,000 attack payloads, with more than 500 variants added weekly, ships with prebuilt policies. The catalog has no name of its own, and Lasso ships no prebuilt agents. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
||
|
Pillar SecurityPrebuilt Agents, Templates & Packs Prebuilt guardrails ship, along with compliance reports for GDPR and CCPA and the published SAIL framework, now in version 2.0, but Pillar does not name them as a catalog and offers no prebuilt agents. The platform has five modules. They are discovery and posture, red teaming, runtime guardrails, governance and compliance, and an agentic endpoint module. SourcePillar Security, pillar.security/platformread 2026-10-05 |
||
| Platform extensibility | ||
|
Model Flexibility & Routing Ability to work across multiple foundation models, route tasks to different models, or let buyers bring their own providers and keys. |
||
|
Lasso SecurityModel Flexibility & Routing Lasso secures traffic to third party and in house models. It offers no model choice or routing of its own. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
||
|
Pillar SecurityModel Flexibility & Routing Pillar enforces approved model lists but offers no model choice or routing of its own. Its guardrails mask PII, PHI, secrets and credentials before they reach the models. SourcePillar Security, pillar.security/platform and /platform/runtime-guardrailsread 2026-10-05 |
||
|
APIs, SDKs & MCP Extensibility Composability layer: stable APIs, SDKs, MCP tool consumption/serving, custom tools, and integration into internal systems. |
||
|
Lasso SecurityAPIs, SDKs & MCP Extensibility Customers deploy Lasso "with a single line of code via Gateway, API, or SDK". The API and SDK reference, at app.lasso.security/docs-auth, sits behind a login. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
||
|
Pillar SecurityAPIs, SDKs & MCP Extensibility No public API, SDK or MCP server is published for building on Pillar. MCP allowlists are something the product enforces, not a way to build on it. AI gateways can call the runtime guardrails through an API, but Pillar publishes no reference for it. SourcePillar Security, pillar.security/platform and /platform/runtime-guardrailsread 2026-10-05 |
||
|
Testing, Debugging & Optimization Testing, debugging, scoring, retries, fallbacks, quality gates, and optimization loops for improving agent workflows before and after deployment. |
||
|
Lasso SecurityTesting, Debugging & Optimization Red teaming tests the customer's models, agents and applications with adversarial simulations over several turns, drawn from a library of more than 3,000 payloads. It runs automatically on every application update through CI/CD. Each result maps to a fix in a guardrail, system prompt or tool permission. The tests run against the customer's deployed agents directly. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
||
|
Pillar SecurityTesting, Debugging & Optimization Adversarial attacks over many turns target the customer's AI agents and workflows, including black box attacks on production systems, with full attack transcripts and reproduction steps, and assessments run continuously. RedGraph maps the surfaces that can be exploited in the customer's environment. This is red teaming of the agents the customer has deployed. RedGraph builds attack graphs specific to the environment, showing lateral movement and tool chaining paths that other security tools miss. SourcePillar Security, pillar.security/platformread 2026-10-05 |
||
| Specialist automation | ||
|
Browser & Computer Use Browser, desktop, or remote/local computer control for workflows that cannot be handled through stable APIs alone. |
||
|
Lasso SecurityBrowser & Computer Use Everything happens at the gateway, API and policy layer, and there is no browser or computer use. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
||
|
Pillar SecurityBrowser & Computer Use Pillar describes no browser or computer use by its own agents. It secures coding agents against prompt injection, data exfiltration, unauthorized actions, excessive permissions and malicious code execution. SourcePillar Security, pillar.securityread 2026-10-05 |
||
Pricing snapshot
Sourced from the Index pricing dataset · open each vendor's profile for full detail.
| Pricing | L Lasso Security |
P Pillar Security |
|---|---|---|
|
Entry price Lowest public entry point |
Contact sales; no prices published. Demo and a free assessment on request. | Contact sales; no prices published. Demo on request. |
|
Pricing confidence How public the numbers are |
Contact only | Contact only |
|
Billing Primary billing axis |
Inference, not stated by the vendor: scope of models, agents and applications secured. | Inference, not stated by the vendor: scope of AI assets, agents and applications secured. |
|
Variable cost Workload / overage exposure |
Medium variable cost | Medium variable cost |
|
Free tier / trial Try before you buy |
No free tier
|
No free tier
|
|
Buying motion Self-serve vs sales call |
Sales call | Sales call |
|
Pricing verified When this pricing was last checked |
Product updates
Newest first, each linked to its source.
Lasso Security
-
· Integrations
Claude Enterprise activity can now flow into Lasso through Anthropic's Claude Compliance API, an integration now generally available.
Source -
· Security / enterprise
Lasso introduced LEAP, AI security guardrails that run on CPUs while aiming for the accuracy of GPU based models, built to evaluate complex agentic workflows.
Source
More comparisons with Lasso Security or Pillar Security
Other matchups in security and SOC agents
Not the pairing you were after? These compare a different set of security and SOC agents on the same 14 capabilities.