Lasso Security
Also known as: Lasso Intent Deputy, Lasso Federal
AI security platform that discovers the customer's agents and applications, red-teams them with multi-turn attacks in CI/CD, and enforces intent-based runtime policies at the gateway with audit trails of agent activity.
Lasso Security sells an AI security platform for the models, agents and applications an enterprise builds or adopts. Discovery connects to CI/CD pipelines and cloud platforms to inventory every agent and application and map its models, system prompts, tools and guardrails, including agents on Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce. Red teaming runs multi-turn adversarial simulations from a library of 3,000+ attack payloads against the customer's models, agents and applications, can run automatically on every application update, and maps each finding to a guardrail, system prompt or tool permission fix.
At runtime Lasso enforces policies inline at the proxy, API or AI gateway layer. Its Intent Security layer monitors each interaction's execution path, checks that tool invocations match the request and the agent's behavioral baseline, and blocks or alerts on a threshold. Lasso keeps audit trails of agent activity and decisions, and covers AI coding assistants, MCP and Claude Enterprise use cases. Lasso displays ISO, AICPA, GDPR and PCI badges, and its product documentation sits behind a login.
Vendor details
Canonical URL
https://www.lasso.security
Category
Security / SOC agent
Funding status
Independent Tel Aviv company founded 2023 by Elad Schulman (CEO), Ophir Dror (CPO), Lior Ziv (CTO), and Yuval Abadi (COO); reported ~$28M raised from Entree Capital, CyberArk Ventures, Singtel Innov8, and Samsung Next; ~74 employees; Gartner Cool Vendor for AI Security 2024 and representative vendor in the Gartner Market Guide for AI Gateways; Axonius co-founder Dean Sysman joined the board Feb 2026
Company status
independent
Use cases & customers
Primary use cases
Target customers
Deployment options
Integrations
Lasso sits in front of AI traffic as a gateway, API or SDK. It discovers agents across Vertex AI, Microsoft Copilot, AWS Bedrock, Salesforce Agentforce and custom agents, and connects to CI/CD and cloud platforms for discovery and red teaming. It covers coding assistant, MCP and Claude Enterprise use cases. API and SDK references are behind a login.
In practice
Your security team does not know which AI agents are running across the company. Lasso discovers agents on Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce and maps each one's models, system prompts, tools and guardrails.
Your developers ship agent updates often and need each release tested against attacks. Lasso red teaming runs simulations over several turns from more than 3,000 payloads on every update through CI/CD, and maps each finding to a guardrail, system prompt or tool permission fix.
Your agent calls tools, and you need to catch calls that do not match what was asked. Lasso's Intent Security checks each tool invocation against the request at the gateway, blocks the request or sends an alert on a threshold, and keeps an audit trail of every agent activity and decision.
Sources & related URLs
Agentic Index coverage score
7.0 / 14 capabilities · 50%
| Integrations & Tool Calling | Full |
|---|---|
|
The platform deploys inline through a gateway, API or SDK in front of the customer's AI traffic. It discovers agents across Vertex AI, Microsoft Copilot, AWS Bedrock and Salesforce Agentforce, connects to CI/CD and cloud platforms, and blocks threats at runtime. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
|
| Workflow Orchestration | Partial |
|
A fixed five stage product lifecycle runs from discovery to protection, with red team findings feeding guardrail updates. Lasso does not orchestrate the customer's agents, and customers build no flows of their own in it. Lasso no longer presents offensive agents as part of the product. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
|
| Knowledge Grounding & RAG | Partial |
|
Discovery inventories every agent and application and maps their models, system prompts, tools and guardrails. The result is a named map of the customer's AI estate. Lasso names no retrieval structure for agents to draw on. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
|
| Human Oversight & Guardrails | Partial |
|
Policies are enforced inline at the proxy, API or gateway. Intent Security acts on a threshold by "either blocking the request or sending an alert". Lasso names no step where a person approves an agent's action before it commits. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
|
| Security, Identity & Governance | Partial |
|
ISO, AICPA, GDPR and PCI badges sit in Lasso's site footer, and its information security policy sits in an embedded document. Lasso names no SSO, role model or audit surface for the product itself, and its product docs sit behind a login. The access controls Lasso sells govern its customers' AI, not who can use Lasso. Sourcelasso.security/information-security-policyread 2026-09-28 |
|
| Observability & Auditability | Full |
|
Intent Security monitors "the entire interaction execution path" and checks each tool invocation against the request, a check Lasso calls Tool and Response Alignment. The agent product keeps "audit trails for every agent activity and decision in real-time". The record covers the customer's agents down to each step and tool call. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
|
| Memory & State Persistence | Not documented |
|
The customer's agents get no memory from Lasso. Intent Security's behavioral baselines are the product's own detection state, and Lasso does not say how long they are kept. The audit trails record what agents did, and the agents do not draw on them as memory. Sourcelasso.security/platform/intent-securityread 2026-09-28 |
|
| Deployment & Data Residency | Not documented |
|
Integration runs through a gateway, API or SDK. No hosting region is published, and Lasso does not say whether customers can run it in their own environment. Its product docs sit behind a login. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
|
| Prebuilt Agents, Templates & Packs | Partial |
|
A prebuilt library of more than 3,000 attack payloads, with more than 500 variants added weekly, ships with prebuilt policies. The catalog has no name of its own, and Lasso ships no prebuilt agents. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
|
| Triggers & Channel Coverage | Full |
|
Inline detection runs on every request and agent action that passes the gateway. Red teaming runs automatically on every application update through CI/CD. Neither needs anyone to start it. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
|
| Model Flexibility & Routing | Not documented |
|
Lasso secures traffic to third party and in house models. It offers no model choice or routing of its own. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
|
| APIs, SDKs & MCP Extensibility | Partial |
|
Customers deploy Lasso "with a single line of code via Gateway, API, or SDK". The API and SDK reference, at app.lasso.security/docs-auth, sits behind a login. Sourcelasso.security/platform/ai-agents-securityread 2026-09-28 |
|
| Testing, Debugging & Optimization | Full |
|
Red teaming tests the customer's models, agents and applications with adversarial simulations over several turns, drawn from a library of more than 3,000 payloads. It runs automatically on every application update through CI/CD. Each result maps to a fix in a guardrail, system prompt or tool permission. The tests run against the customer's deployed agents directly. Sourcelasso.security/platform/ai-red-teamingread 2026-09-28 |
|
| Browser & Computer Use | Not documented |
|
Everything happens at the gateway, API and policy layer, and there is no browser or computer use. Sourcelasso.security/platform/ai-securityread 2026-09-28 |
|
The Agentic Index coverage score grades every vendor Full, Partial or Not documented against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded
Product updates
Claude Enterprise activity can now flow into Lasso through Anthropic's Claude Compliance API, an integration now generally available. Once an admin adds a key, Lasso lists every Claude user as an agent in its inventory with the MCP servers and skills they used, checks activity against policy and, with the enterprise key, scans conversations for sensitive data and secrets.
Bears on: Observability / auditability
View sourceLasso introduced LEAP, AI security guardrails that run on CPUs while aiming for the accuracy of GPU based models, built to evaluate complex agentic workflows. Lasso also announced a $30 million funding round.
Bears on: Security / enterprise
View sourcePricing
Contact sales; no prices published. Demo and a free assessment on request.
Inference, not stated by the vendor: scope of models, agents and applications secured.
What is public
The platform modules (discovery, posture, red teaming, runtime enforcement, intent security) are public; no plans or prices are disclosed.
Variable cost rationale
Inference, not stated by the vendor: cost likely grows with the AI applications, agents and traffic secured and the red teaming scope.
Sales call required
Yes, required for paid access
Free / trial
Free assessment on request.
Related vendors
- 7AI — Agentic SOC from the Cybereason founders: domain specialized agents…
- Abnormal AI — Behavioral AI email security with three named autonomous agents: a…
- AirMDR — AI native MDR whose AI analyst investigates every alert and writes…
- Airrived — Agentic OS that unifies SOC, GRC, IAM, vulnerability management, IT,…
- Andesite — Human-AI SOC platform where customers build their own agents and…
- Anvilogic — Agentic security operations platform that works on top of existing…
Alternatives to Lasso Security
The closest documented capability profiles to Lasso Security among security and SOC agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.
- Noma Security7.0 / 14Fuller documented coverage on Workflow OrchestrationLasso Security vs Noma Security →
- Repello AI8.0 / 14Fuller documented coverage on Workflow Orchestration and APIs, SDKs & MCP Extensibility
- DeepKeep8.5 / 14Adds documented Deployment & Data ResidencyLasso Security vs DeepKeep →
- Pillar Security7.5 / 14Adds documented Deployment & Data ResidencyLasso Security vs Pillar Security →
- Straiker8.5 / 14Adds documented Deployment & Data ResidencyLasso Security vs Straiker →
- Terra Security6.5 / 14Fuller documented coverage on Workflow Orchestration
Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded