Back to vendors
L

Lasso Security

Also known as: Lasso Intent Deputy, Lasso Federal

Visit site
Entry priceContact sales; no prices published. Demo and a free assessment on request.Full pricing detail

AI security platform that discovers the customer's agents and applications, red-teams them with multi-turn attacks in CI/CD, and enforces intent-based runtime policies at the gateway with audit trails of agent activity.

Lasso Security sells an AI security platform for the models, agents and applications an enterprise builds or adopts. Discovery connects to CI/CD pipelines and cloud platforms to inventory every agent and application and map its models, system prompts, tools and guardrails, including agents on Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce. Red teaming runs multi-turn adversarial simulations from a library of 3,000+ attack payloads against the customer's models, agents and applications, can run automatically on every application update, and maps each finding to a guardrail, system prompt or tool permission fix.

At runtime Lasso enforces policies inline at the proxy, API or AI gateway layer. Its Intent Security layer monitors each interaction's execution path, checks that tool invocations match the request and the agent's behavioral baseline, and blocks or alerts on a threshold. Lasso keeps audit trails of agent activity and decisions, and covers AI coding assistants, MCP and Claude Enterprise use cases. Lasso displays ISO, AICPA, GDPR and PCI badges, and its product documentation sits behind a login.

Vendor details

Canonical URL

https://www.lasso.security

Category

Security / SOC agent

Funding status

Independent Tel Aviv company founded 2023 by Elad Schulman (CEO), Ophir Dror (CPO), Lior Ziv (CTO), and Yuval Abadi (COO); reported ~$28M raised from Entree Capital, CyberArk Ventures, Singtel Innov8, and Samsung Next; ~74 employees; Gartner Cool Vendor for AI Security 2024 and representative vendor in the Gartner Market Guide for AI Gateways; Axonius co-founder Dean Sysman joined the board Feb 2026

Company status

independent

Use cases & customers

Primary use cases

shadow AI and agent discovery and inventoryAI security posture assessment for agents and applicationsautomated red teaming and adversarial testing of GenAI systemsruntime guardrails and inline policy enforcement for LLM trafficagentic AI intent monitoring and MCP security

Target customers

enterprise security teams adopting GenAI and agentsfinancial services, healthcare, and regulated industriesUS public sector via Lasso Federal LLCengineering teams running homegrown LLM applications behind gateways

Deployment options

gateway, API or SDK integration in front of AI traffic; hosting environment not stated on the pages read

Integrations

Lasso sits in front of AI traffic as a gateway, API or SDK. It discovers agents across Vertex AI, Microsoft Copilot, AWS Bedrock, Salesforce Agentforce and custom agents, and connects to CI/CD and cloud platforms for discovery and red teaming. It covers coding assistant, MCP and Claude Enterprise use cases. API and SDK references are behind a login.

In practice

Your security team does not know which AI agents are running across the company. Lasso discovers agents on Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce and maps each one's models, system prompts, tools and guardrails.

Your developers ship agent updates often and need each release tested against attacks. Lasso red teaming runs simulations over several turns from more than 3,000 payloads on every update through CI/CD, and maps each finding to a guardrail, system prompt or tool permission fix.

Your agent calls tools, and you need to catch calls that do not match what was asked. Lasso's Intent Security checks each tool invocation against the request at the gateway, blocks the request or sends an alert on a threshold, and keeps an audit trail of every agent activity and decision.

Agentic Index coverage score

7.0 / 14 capabilities · 50%

Integrations & Tool Calling Full

The platform deploys inline through a gateway, API or SDK in front of the customer's AI traffic. It discovers agents across Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce, connects to CI/CD and cloud platforms, and blocks threats at runtime.

Sourcelasso.security/platform/ai-agents-securityread 2026-09-28

Workflow Orchestration Partial

A fixed five stage product lifecycle runs from discovery to protection, with red team findings feeding guardrail updates. Lasso does not orchestrate the customer's agents, and customers build no flows of their own in it. Lasso no longer presents offensive agents as part of the product.

Sourcelasso.security/platform/ai-securityread 2026-09-28

Knowledge Grounding & RAG Partial

Discovery inventories every agent and application and maps their models, system prompts, tools and guardrails. The result is a named map of the customer's AI estate. Lasso names no retrieval structure for agents to draw on.

Sourcelasso.security/platform/ai-securityread 2026-09-28

Human Oversight & Guardrails Partial

Policies are enforced inline at the proxy, API or gateway. Intent Security acts on a threshold by "either blocking the request or sending an alert". Lasso names no step where a person approves an agent's action before it commits.

Sourcelasso.security/platform/intent-securityread 2026-09-28

Security, Identity & Governance Partial

ISO, AICPA, GDPR and PCI badges sit in Lasso's site footer, and its information security policy sits in an embedded document. Lasso names no SSO, role model or audit surface for the product itself, and its product docs sit behind a login. The access controls Lasso sells govern its customers' AI, not who can use Lasso.

Sourcelasso.security/information-security-policyread 2026-09-28

Observability & Auditability Full

Intent Security monitors "the entire interaction execution path" and checks each tool invocation against the request, a check Lasso calls Tool and Response Alignment. The agent product keeps "audit trails for every agent activity and decision in real-time". The record covers the customer's agents down to each step and tool call.

Sourcelasso.security/platform/intent-securityread 2026-09-28

Memory & State Persistence Not documented

The customer's agents get no memory from Lasso. Intent Security's behavioral baselines are the product's own detection state, and Lasso does not say how long they are kept. The audit trails record what agents did, and the agents do not draw on them as memory.

Sourcelasso.security/platform/intent-securityread 2026-09-28

Deployment & Data Residency Not documented

Integration runs through a gateway, API or SDK. No hosting region is published, and Lasso does not say whether customers can run it in their own environment. Its product docs sit behind a login.

Sourcelasso.security/platform/ai-agents-securityread 2026-09-28

Prebuilt Agents, Templates & Packs Partial

A prebuilt library of more than 3,000 attack payloads, with more than 500 variants added weekly, ships with prebuilt policies. The catalog has no name of its own, and Lasso ships no prebuilt agents.

Sourcelasso.security/platform/ai-red-teamingread 2026-09-28

Triggers & Channel Coverage Full

Inline detection runs on every request and agent action that passes the gateway. Red teaming runs automatically on every application update through CI/CD. Neither needs anyone to start it.

Sourcelasso.security/platform/ai-red-teamingread 2026-09-28

Model Flexibility & Routing Not documented

Lasso secures traffic to third party and in house models. It offers no model choice or routing of its own.

Sourcelasso.security/platform/ai-securityread 2026-09-28

APIs, SDKs & MCP Extensibility Partial

Customers deploy Lasso "with a single line of code via Gateway, API, or SDK". The API and SDK reference, at app.lasso.security/docs-auth, sits behind a login.

Sourcelasso.security/platform/ai-agents-securityread 2026-09-28

Testing, Debugging & Optimization Full

Red teaming tests the customer's models, agents and applications with adversarial simulations over several turns, drawn from a library of more than 3,000 payloads. It runs automatically on every application update through CI/CD. Each result maps to a fix in a guardrail, system prompt or tool permission. The tests run against the customer's deployed agents directly.

Sourcelasso.security/platform/ai-red-teamingread 2026-09-28

Browser & Computer Use Not documented

Everything happens at the gateway, API and policy layer, and there is no browser or computer use.

Sourcelasso.security/platform/ai-securityread 2026-09-28

The Agentic Index coverage score grades every vendor Full, Partial or Not documented against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded

Product updates

·IntegrationsVerified

Claude Enterprise activity can now flow into Lasso through Anthropic's Claude Compliance API, an integration now generally available. Once an admin adds a key, Lasso lists every Claude user as an agent in its inventory with the MCP servers and skills they used, checks activity against policy and, with the enterprise key, scans conversations for sensitive data and secrets.

Bears on: Observability / auditability

View source
·Security / enterpriseVerified

Lasso introduced LEAP, AI security guardrails that run on CPUs while aiming for the accuracy of GPU based models, built to evaluate complex agentic workflows. Lasso also announced a $30 million funding round.

Bears on: Security / enterprise

View source
View all 2 Lasso Security updates →Tracked since Sep 2026 · Verified from public vendor sources

Pricing

Contact sales; no prices published. Demo and a free assessment on request.

Inference, not stated by the vendor: scope of models, agents and applications secured.

What is public

The platform modules (discovery, posture, red teaming, runtime enforcement, intent security) are public; no plans or prices are disclosed.

Variable cost rationale

Inference, not stated by the vendor: cost likely grows with the AI applications, agents and traffic secured and the red teaming scope.

Sales call required

Yes, required for paid access

Free / trial

Free assessment on request.

Agentic Index verified 2026-09-28

Alternatives to Lasso Security

The closest documented capability profiles to Lasso Security among security and SOC agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.

Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded

Contact us

Found a vendor we missed? Have feedback on the index? We'd love to hear from you.