AI TrustMark

AI security companies, products & suppliers

AI security products protect AI systems from abuse: prompt injection, data exfiltration through models, poisoned retrieval, and unsafe tool use. They are not generic antivirus. Procurement should ask which layer they cover — model, application, or gateway.

What is AI security?

AI security products protect AI systems from abuse: prompt injection, data exfiltration through models, poisoned retrieval, and unsafe tool use. They are not generic antivirus. Procurement should ask which layer they cover — model, application, or gateway.

What problems does it solve?

LLM applications fail traditional AppSec tests and still ship with tool access.

Typical business use cases

  • Runtime filters
  • Red team
  • Gateway policies
  • Secure SDLC for AI

Important capabilities

  • Attack libraries
  • Policy
  • Findings
  • Runtime

What buyers should evaluate

  • Stack coverage
  • Where prompts are sent
  • Evidence quality

Risks and governance considerations

The scanner becoming a prompt store.

Procurement checklist

  • Prompt handling
  • Retention
  • Integration
  • Retest

Relevant AI Trustmark assurance

Vendor scan output is not a Trustmark technical test.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • Corgea

    By Corgea

    Corgea finds, triages, and fixes vulnerabilities across code, packages, infrastructure, and containers. Corgea is Corgea's software product, from Corgea, Inc. Published at corgea.c

  • CybSafe

    By CybSafe

    CybSafe is a London cyber-security company selling behaviour-based security awareness software. Public marketing covers measuring and changing employee security behaviour rather th

  • Darktrace

    By Darktrace

    Darktrace sells AI cyber-security products that learn a customer's environment to detect and respond to threats. Public marketing covers threat detection, autonomous response and r

  • Model Armor

    By Google

    Model Armor is a Google Cloud security service that screens AI prompts, responses and agent interactions at runtime. It protects against prompt injection and jailbreak attempts, he

  • Harmonic Protect

    By Harmonic Security

    Govern AI wherever your workforce runs it. Detect shadow AI, prevent data leaks, and coach employees inline — across web, desktop, and agentic workflows. Harmonic Protect is Harmon

  • HiddenLayer Automated Red Team

    By HiddenLayer

    Secure your AI with HiddenLayer’s end-to-end platform that detects threats, protects models, and ensures safe, compliant AI adoption at scale. HiddenLayer Automated Red Team is Hid

  • Mindgard AI Security Labs

    By Mindgard

    Discover, assess and red team AI models, agents and applications with Mindgard’s attacker-aligned AI security platform. Mindgard AI Security Labs is Mindgard's software product, fr

  • NCC Group

    By NCC Group

    NCC Group is a UK cyber-security company. Public pages describe assurance, testing, incident response and related security services, including assessment of AI-enabled systems. NCC

  • TrustLens

    By NeuralTrust

    Protect your AI Agents and Applications from attacks, hallucinations and data leakages with our AI native entreprise-grade cybersecurity solutions. TrustLens is NeuralTrust's softw

  • Noma AI Security Platform

    By Noma Security

    From models to agents, get secure, safe, and trustworthy AI with an award-winning AI security platform designed to stay ahead of AI risk. Noma AI Security Platform is Noma Security

  • AI Runtime Security

    By Palo Alto Networks

    Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security Consulting. Cybersecurity Services & Education for CISO’

  • Pillar Secure AI

    By Pillar Security

    One platform to discover, govern, and secure every AI agent or workflow across your organization. Pillar Secure AI is Pillar Security's software product, from Pillar Security Techn

  • Prompt Security Platform

    By Prompt Security

    Comprehensive AI security resources for practitioners. Open-source tools, research, analysis, and guidance to understand and respond to AI threats. Prompt Security Platform is Prom

  • Protect AI Platform

    By Protect AI

    Deploy Bravely with the world’s most comprehensive AI security platform securing your AI agents, apps, models and data at every step. Protect AI Platform is Protect AI's plat

  • Wiz AI-SPM

    By Wiz

    Wiz connects code, cloud, and runtime into one agentic cybersecurity platform. Prevent risk, detect threats, and start secure – across every cloud and AI layer. Wiz AI-SPM is Wiz's

  • Zenity AI Security and Governance Platform

    By Zenity

    Decide exactly what your AI agents can and can’t do. Zenity evaluates every agent action in real time and steers it. Zenity AI Security and Governance Platform is Zenity's software

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

How is this different from LLM security?

LLM security is narrower, focused on language-model applications. AI security also covers ML pipelines and model supply chain.

What is AI security?

AI security products protect AI systems from abuse: prompt injection, data exfiltration through models, poisoned retrieval, and unsafe tool use. They are not generic antivirus. Procurement should ask which layer they cover — model, application, or gateway.

What security testing evidence should buyers request for an AI product?

Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.

How should prompt injection and tool-output attacks be controlled?

Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.

Does a TrustMark on one product cover the rest of the company?

No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.

What incident-handling evidence is useful for AI suppliers?

Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.