AI TrustMark

LLM security companies, products & suppliers

LLM security focuses on attacks against language-model applications: prompt injection, jailbreaks, insecure output handling and retrieval poisoning. It is a specialist slice of AI security for teams shipping chat, RAG or agents.

What is LLM security?

LLM security focuses on attacks against language-model applications: prompt injection, jailbreaks, insecure output handling and retrieval poisoning. It is a specialist slice of AI security for teams shipping chat, RAG or agents.

What problems does it solve?

Chat and RAG apps can be steered into leaking data or calling tools.

Typical business use cases

  • Pre-production red team
  • Runtime prompt filters
  • Output validation

Important capabilities

  • Jailbreak libraries
  • Policy
  • CI checks
  • Runtime

What buyers should evaluate

  • Attack coverage
  • App-layer vs model-layer
  • False positives

Risks and governance considerations

Only demo-prompt coverage, missing tool-calling attacks.

Procurement checklist

  • Scope of attacks
  • CI integration
  • Prompt data handling

Relevant AI Trustmark assurance

Independent testing still uses the live application, not only a vendor's LLM scanner.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • TrojAI Defend

    By A10 Networks

    A10 offers application security and infrastructure solutions to help you build high-performance, AI-ready infrastructure for mission-critical apps and networks. TrojAI Defend is A1

  • CalypsoAI

    By CalypsoAI

    CalypsoAI's AI security technology is now offered by F5 as F5 AI Guardrails. It provides runtime security for deployed AI models, apps and agents, defending against prompt injectio

  • Cisco AI Defense

    By Cisco

    Cisco AI Defense is an AI security platform for enterprises that use third-party AI applications or build their own. It discovers AI workloads, models, data and users across distri

  • Giskard LLM Red Teaming

    By Giskard

    Secure AI agents with Giskard’s continuous AI red teaming. Detect vulnerabilities, improve LLM security, and safeguard your AI systems. Giskard LLM Red Teaming is Giskard's softwar

  • HiddenLayer AISec Platform

    By HiddenLayer

    Secure your AI with HiddenLayer’s end-to-end platform that detects threats, protects models, and ensures safe, compliant AI adoption at scale. HiddenLayer AISec Platform is HiddenL

  • Knostic

    By Knostic

    Adopt AI confidently. Knostic provides enterprise-grade governance, visibility, and real-time protection across users, data, and AI tools. Knostic is Knostic's software product, fr

  • Lakera Guard

    By Lakera

    The AI-native security platform to accelerate GenAI initiatives—trusted by Fortune 500s, backed by the world’s largest AI red team. Lakera Guard is Lakera's software product, from

  • Lasso Security Platform

    By Lasso Security

    Lasso’s AI Security Platform gives enterprises visibility, control, and protection across AI models, agents, and apps. Reduce GenAI risk in real time. Lasso Security Platform is La

  • TrustGate

    By NeuralTrust

    Protect your AI Agents and Applications from attacks, hallucinations and data leakages with our AI native entreprise-grade cybersecurity solutions. TrustGate is NeuralTrust's platf

  • NVIDIA NeMo Guardrails

    By NVIDIA

    NVIDIA NeMo Guardrails is an open-source Python library for adding programmable guardrails to LLM applications, blocking, altering or validating unsafe, off-topic, malicious or pol

  • Prisma AIRS

    By Palo Alto Networks

    Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security Consulting. Cybersecurity Services & Education for CISO’

  • Prompt Security Platform

    By Prompt Security

    Comprehensive AI security resources for practitioners. Open-source tools, research, analysis, and guidance to understand and respond to AI threats. Prompt Security Platform is Prom

  • Proofpoint AI Security

    By Proofpoint

    Proofpoint helps protect people, data and brands against cyberattacks. Offering compliance and cybersecurity solutions for email, web, cloud and more. Proofpoint AI Security is Pro

  • Protecto AI

    By Protecto

    Protecto is the AI Data Control Plane for agentic AI. Detect, mask, and control sensitive data before it reaches any LLM, agent, or MCP tool. Protecto AI is Protecto's software pro

  • Straiker ASCEND AI

    By Straiker

    The agentic AI security company. Straiker detects prompt injection, tool misuse, and runtime attacks across every AI agent you build or deploy, with 98.1% threat detection accuracy

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

Does this replace AppSec?

No. It complements it for LLM-specific failures.

What is LLM security?

LLM security focuses on attacks against language-model applications: prompt injection, jailbreaks, insecure output handling and retrieval poisoning. It is a specialist slice of AI security for teams shipping chat, RAG or agents.

How should prompt injection and tool-output attacks be controlled?

Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.

What security testing evidence should buyers request for an AI product?

Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.

Does a TrustMark on one product cover the rest of the company?

No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.

What incident-handling evidence is useful for AI suppliers?

Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.