Arthur AI

Security for AI

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Emerging: Market readiness of 24 or below. Below the typical band, where few analyzed companies sit.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2018
Funding $60.3M
Last updated 2026-10-16

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Arthur sells software that finds a company's AI agents and screens their prompts and responses for hijacking and leaked personal data. It sells to security and governance teams in banking, healthcare, and insurance. Founded in 2018, it has 21 to 100 employees per Welcome to the Jungle and names Axios, Expel, and The Philadelphia Inquirer as customers. VentureBeat reported in 2023 that Arthur counted three of the top five US banks, Humana, John Deere, and the Defense Department as customers. It raised a $42 million Series B in 2022 and sold $2.7 million in a 2026 offering. A customer leaving Arthur has to move or recreate its AI tests and policies. CSO Online lists Microsoft and CrowdStrike as covering AI security in larger platforms, so their customers can obtain overlapping features.

Sourced Details

Description Arthur finds the AI agents running across an enterprise's endpoints, clouds, and data centers, then lets security and governance teams monitor them and enforce policy on them. [f1]
Founded 2018 [f2]
HQ New York, United States [f3]
Funding $60.3M total [f4]
Latest funding Equity offering, $2,668,819 sold (Form D, August 2026) [f3]
Deployment SaaS [f5]

Products

Product What it does
Arthur Platform that discovers AI agents across endpoints and clouds, monitors and evaluates models and agents, and enforces guardrail and governance policies on AI traffic.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

Arthur is an AI lifecycle platform with built-in guardrails that screen AI interactions for misuse, off-brand content, and unsafe prompts and responses, plus monitoring for models and agents. It is mapped to the AI Defense Matrix. [f6]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Emerging 24 /40 Emerging: Market readiness of 24 or below. Below the typical band, where few analyzed companies sit.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 Arthur names its buyers and their problem (s1, s5). It pitches security, audit, and governance teams on finding and controlling AI agents that run on endpoints, in clouds, and in data centers. In a June 2026 buyer’s guide, CSO Online relays Microsoft’s finding that 80% of Fortune 500 companies use active AI agents while only 10% have a clear strategy for managing them (s15). That article is the one independent source in the record quantifying the pain, so the problem is clear and specific while its corroboration stays single-sourced. [s1, s5, s15]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 Arthur documents its architecture in detail on its own pages, including a deployable runner that executes evaluations and guardrail checks in the customer's environment, custom metrics written in SQL or Python, and a stateless validation endpoint for its built-in guardrail checks. GitHub lists star and fork counts for the public Arthur Engine repository, which is not independent technical scrutiny, and CSO Online describes the features without an Arthur-specific test, so no external validation reaches the next rung. [s2, s9, s10, s15]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 The enabler is the spread of AI agents inside enterprises during 2025 and 2026, which Arthur answered by launching its Agent Discovery and Governance platform in December 2025 (s20). The buyer-side evidence is one kind of signal, CSO Online’s June 2026 buyer’s guide to AI security posture management tools, which also relays Microsoft survey data on unmanaged agents (s15). With one independent kind of signal, Arthur’s timing is plausible. [s20, s15, s21]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 3/5 Co-founder and CEO Adam Wenchel was VP of AI and Data Validation at Capital One, a verifiable senior in-domain role, and Arthur highlights that background on its platform page (s24, s2). Co-founder John Dickerson, the founder with the academic research record, now runs Mozilla.ai and describes his Arthur role in the past tense (s23). The cited sources document senior experience for the current leaders. No exit or sustained publication record for the current leaders appears in the cited sources. [s24, s2, s23, s6]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 3/5 Arthur publishes customer stories for Axios, The Philadelphia Inquirer, Upsolve AI, and Expel, and in its Expel story Arthur quotes Tyler Beauregard of Expel’s data science team (s1, s8). In 2023 VentureBeat relayed Arthur’s claim that three of the top five US banks, Humana, John Deere, and the Department of Defense are customers (s14). Arthur itself publishes or claims these customer relationships. TechCrunch reported 55 employees and 58% average ARR growth in 2022 (s12). The cited sources contain no current revenue figure or total customer count. [s1, s8, s14, s5, s12]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 2/5 Arthur raised a $42 million Series B in September 2022, when TechCrunch reported 55 employees and 58% average ARR growth (s12). Its next disclosed financing is an equity offering on an August 2026 Form D, with $2,668,819 sold against a $5,999,999 offering (s16). That offering was still open at its August 2026 filing, so it was no completed round then, and Arthur discloses no revenue or margin. Four years on from the Series B, no step-change financing appears in the record. [s12, s16, s17]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5 CSO Online and AppSec Santa place Arthur in recognized categories without relying on Arthur’s framing. In its June 2026 buyer’s guide, CSO Online lists the Arthur Platform among 14 AI security posture management tools (s15). In a May 2026 review, AppSec Santa lists Arthur among AI security tools (s26). Arthur’s own pages describe the category as agent security and governance (s1). [s15, s26, s1]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 Arthur’s federated engine runs next to customer workloads, and customers such as Upsolve build their own evaluations and gold-standard datasets on it, which adds friction to replacing it (s2, s7). CSO Online lists CrowdStrike’s AI posture coverage as part of its Falcon platform and Microsoft’s as part of Purview, so bundling pressure from large platform vendors is concrete (s15). The cited record evidences no proprietary data flywheel or procurement lock beyond that friction. [s2, s7, s15]
Business Risks Platform vendors in the same buyer’s guide, including Microsoft with Purview and CrowdStrike with its Falcon platform, could cover agent discovery and AI posture inside platforms they already sell…
  • Platform vendors in the same buyer’s guide, including Microsoft with Purview and CrowdStrike with its Falcon platform, could cover agent discovery and AI posture inside platforms they already sell.
  • Arthur’s latest disclosed financing is a 2026 equity sale under a tenth the size of its 2022 Series B.
  • Arthur itself publishes or claims most of its named customers.
  • CSO Online notes that Arthur offers a narrower range of third-party integrations than other AI security posture tools, which could cost it deals with buyers who want broad coverage.
  • The Arthur Engine repository has 92 GitHub stars, and GitHub marks the Arthur Bench repository as archived.
Problem & Market Arthur sells software that finds the AI agents running across an enterprise and brings them under security and governance policy…

Arthur sells software that finds the AI agents running across an enterprise and brings them under security and governance policy. On its homepage, Arthur describes discovery across endpoints, clouds, and private data centers and pitches security, audit, and governance teams alongside the people building AI. The company began in machine-learning monitoring and still monitors traditional models, generative AI, and agents in one product.

The problem Arthur targets is agent sprawl that security teams struggle to track. On its agent page, Arthur says agents are proliferating faster than any team can track, creating security blind spots and compliance risk. In a June 2026 buyer’s guide, CSO Online relays Microsoft’s finding that the average enterprise manages 37 agents, with more than half running without security oversight or logging.

Regulated industries are the market Arthur names. On its platform page, Arthur cites banking, healthcare, and insurance, where oversight and auditability are essential. On its homepage, it describes the product as trusted by leaders at Fortune 500s. [s1, s5, s15, s2]

Product Capabilities Arthur combines agent discovery, runtime security, evaluation, and governance in one product…

Arthur combines agent discovery, runtime security, evaluation, and governance in one product. On its agent page, Arthur describes five discovery sensors. They watch application telemetry through OpenTelemetry, agent tool connections through MCP servers, network traffic, the agent APIs of AWS Bedrock, Google Vertex AI, and Azure AI Foundry, and employee machines. Its Agent Behavioral Analytics alerts on anomalous agent behavior and streams findings to CrowdStrike Falcon, Elastic, Splunk, and Datadog.

Policy enforcement runs through verdicts the customer’s application applies. Arthur evaluates each request for prompt injection, PII exposure, restricted models, and off-policy tool use, and the application blocks, redacts, or re-prompts through Arthur’s SDK. Arthur Shield, the company’s earlier LLM firewall, sits between the application and deployment layers, blocks prompt-injection attempts, and detects likely hallucinations.

In its hybrid, or federated, deployment, Arthur keeps inference data inside the customer’s network. The evaluation engine runs next to the customer’s workloads, and only lightweight metrics flow to Arthur’s control plane. Arthur publishes that engine as MIT-licensed open source with PII, sensitive-data, custom LLM, and regex rules built in. [s5, s1, s3, s2, s4, s10]

Competitive Positioning Arthur competes against AI security specialists and large security platforms at once…

Arthur competes against AI security specialists and large security platforms at once. In its June 2026 buyer’s guide, CSO Online lists Arthur beside Microsoft Purview, CrowdStrike’s Falcon platform, Cyera, and Orca Security. In a May 2026 review, AppSec Santa says Arthur focuses on model observability, bias detection, and governance, and points buyers who want prompt injection defense alone to Lakera Guard or Prompt Security.

It monitors traditional models, generative AI, and agents in one product, runs evaluations inside the customer’s environment, and sells through both the AWS and Google Cloud marketplaces. CSO Online notes that Arthur offers a narrower range of third-party integrations than other AI security posture tools.

Platform vendors put direct competitive pressure on Arthur. According to the same guide, Microsoft covers AI posture as part of Purview and CrowdStrike as part of its Falcon platform, so a buyer may already have overlapping features from one of them. [s15, s26, s2, s5]

Go-to-Market & Traction Arthur sells through self-serve plans, enterprise contracts, and two cloud marketplaces…

Arthur sells through self-serve plans, enterprise contracts, and two cloud marketplaces. On its pricing page, Arthur lists a free plan and a Premium plan at $60 a month for startups and growing teams. Its custom-priced Enterprise plan includes virtual private cloud options, single sign-on, service commitments, and a business associate agreement. Arthur lists the product on the AWS and Google Cloud marketplaces and announced the Google Cloud listing in January 2026. In its June 2026 guide, CSO Online reported paid plans starting at $10,000 a year for smaller networks.

Most named customers come from Arthur’s own customer stories. On its homepage, Arthur presents stories for Axios, The Philadelphia Inquirer, Upsolve AI, and Expel. Expel, a managed detection and response provider, uses Arthur to monitor its machine-learning models, and Upsolve used Arthur’s forward-deployed engineers to build evaluations for its Analysis AI Agent.

Older reporting adds regulated names. In 2023 VentureBeat relayed Arthur’s claim that three of the top five US banks, Humana, John Deere, and the Department of Defense are customers. In February 2022 Arthur announced that the Defense Department’s Joint Artificial Intelligence Center selected it under a test and evaluation purchasing agreement. [s4, s5, s21, s15, s1, s8, s7, s14, s22]

Team & Credibility Arthur’s chief executive brings senior enterprise AI experience…

Arthur’s chief executive brings senior enterprise AI experience. According to a Welcome to the Jungle profile, co-founder Adam Wenchel was VP of AI and Data Validation at Capital One. He earlier held CTO and CEO roles at Everfi and Anax Security.

John Dickerson, a former tenured University of Maryland computer science professor, previously served as Arthur’s co-founder and chief scientist. He now leads Mozilla.ai. Wenchel’s Capital One background is the leadership credential Arthur highlights on its platform page. Arthur lists him on its team page as CEO alongside engineering and operations leads.

Arthur is a small company by headcount. TechCrunch reported 55 employees in 2022, and Welcome to the Jungle now lists 21 to 100 employees with a 14% decline over 12 months. [s24, s2, s23, s6, s12]

Trust Readiness Arthur states SOC 2 Type II compliance and offers a business associate agreement for HIPAA-aligned work…

Arthur states SOC 2 Type II compliance and offers a business associate agreement for HIPAA-aligned work. On its platform page, Arthur says it meets standards including SOC 2 Type II and enterprise data residency policies and can execute a standard BAA on request. Arthur’s Enterprise plan includes SSO, SLAs, and a BAA.

Arthur answers data-exposure concerns mainly through deployment design. In the hybrid deployment, inference data stays in the customer’s VPC, only lightweight metrics reach Arthur’s control plane, and Arthur offers single-tenant SaaS, a self-managed VPC, and on-premises deployment.

Arthur’s SOC 2 report does not appear on the public surfaces probed, so a buyer cannot read it there. The trust portal at trust.arthur.ai resolves but fails its TLS handshake, and the security, trust, and compliance paths on arthur.ai return no page. [s2, s4, s25]

Competitors Arize AI, Fiddler AI, Lasso Security, HiddenLayer, Guardrails AI, Giskard, Lakera, Langfuse, Google Cloud…
Company Relationship Note Compare
Arize AI competes with Competes with Arthur for the same enterprise AI teams that monitor and evaluate models and agents.
Fiddler AI competes with Competes with Arthur for enterprise buyers of AI observability and security.
Lasso Security competes with Competes with Arthur for enterprise buyers of AI security controls.
HiddenLayer competes with Competes with Arthur for enterprise buyers of AI security controls.
Guardrails AI competes with Overlaps Arthur’s runtime guardrail checks for teams building on large language models. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Giskard competes with Overlaps Arthur’s model evaluation and open-source evaluation motion for the same AI teams.
Lakera competes with Overlaps Arthur’s runtime guardrail layer for applications built on large language models.
Langfuse adjacent Adjacent to Arthur’s tracing and evaluation features for teams that run production agents.
Google Cloud adjacent Sells Arthur’s agent governance product through its marketplace and runs the AI services Arthur governs. N/AGoogle Cloud is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product.

Add analyzed competitors to compare them side by side with Arthur AI.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

Arthur sells software that finds AI agents across an enterprise and evaluates, monitors, and governs them. Its assets include a granted US patent on machine-learning monitoring and the evaluations, datasets, and policies customers build on the product. A customer would have to move or recreate those to leave. Its SOC 2 Type II compliance and HIPAA business associate agreement are assurances rivals can also obtain. Microsoft and CrowdStrike already cover AI security posture inside larger platforms, so their customers can get features that overlap Arthur’s.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 Customers buy software they configure and run, from free self-serve plans to custom enterprise contracts, and their own teams own the outcomes (s4, s2). Arthur’s forward-deployed engineers helped Upsolve integrate the platform, and deployed engineering support comes with each deployment option, while the customer keeps responsibility for the results (s7, s5).
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 A team that leaves Arthur would have to move or recreate the custom evaluations, gold-standard datasets, governance policies, and alert routing it configured there, which is meaningful friction (s7, s2, s5, s1). The switching mechanism is documented, and the cited record does not size the migration or show a network effect, non-portable state, or regulatory tie that would make exit expensive.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 Arthur states SOC 2 Type II compliance and offers a HIPAA business associate agreement, assurances a funded rival can obtain through ordinary enterprise preparation (s2, s4). The cited sources name no federal authorization or regulator-approved status that would block a customer from replacing Arthur.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Arthur runs agent discovery across five sensor types, guardrail verdicts with thresholds tuned per use case, and evaluations that span model drift, generative AI hallucination, and agent tool selection (s5, s2). Building that across model types and running it next to customer workloads takes applied machine-learning and systems engineering, and Arthur holds a granted patent on machine-learning monitoring (s19).
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 Arthur builds and sells the product for regulated enterprises and government. It names banking, healthcare, and insurance, offers a HIPAA business associate agreement, and announced a 2022 selection under a Defense Department test and evaluation purchasing agreement (s2, s22). Free and $60-a-month plans and a startup program also reach smaller buyers, while Arthur aims its Enterprise tier, with VPC isolation, SLAs, and a BAA, at the regulated buyer (s4, s14).
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 2/3 Arthur works beside the application as an evaluation and governance plane. Its validation API returns a verdict on each request, and the customer’s application decides whether to block, redact, or re-prompt, so requests depend on the application’s enforcement code (s5). Arthur discovers agents, records their execution steps, and alerts on anomalous behavior (s1). Arthur places Arthur Shield between the application and deployment layers, and the cited record shows no customer deployment routing live traffic through it (s3).
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 2/3 Arthur holds a granted US patent on machine-learning monitoring systems and methods, assigned to Arthur AI and listed by Google Patents as active through 2041 (s19). The record evidences that IP without establishing its breadth, and it shows no retained cross-customer dataset, so the advantage is real and replicable with time and effort.
Strategic Market Segmentation Arthur sells to two groups inside large enterprises, the security and governance teams that must control agents and the builders who ship them…

Arthur sells to two groups inside large enterprises, the security and governance teams that must control agents and the builders who ship them. On its homepage, Arthur addresses CISOs and security teams, governance, audit, and compliance teams, and chief AI officers and engineering leaders as separate audiences. On its platform page, Arthur names banking, healthcare, and insurance as the regulated industries it serves. In a May 2026 review, AppSec Santa calls the platform particularly valuable for regulated industries, including financial services, healthcare, insurance, and government.

Arthur’s price list also reaches small teams. Below the custom Enterprise tier, Arthur offers a free plan, a Premium plan at $60 a month aimed at AI-native startups, and a startup partner program for venture-backed agent builders.

Government is a documented segment. In 2022, Arthur announced that the Defense Department’s Joint Artificial Intelligence Center selected it under a test and evaluation purchasing agreement. Arthur now publishes a post on governing AI agents in federal environments.

Product Capabilities & AI Advantages Arthur’s product covers finding agents, watching them, and enforcing policy on them…

Arthur’s product covers finding agents, watching them, and enforcing policy on them. Five sensors look for agents in OpenTelemetry streams, new MCP servers, network traffic, cloud AI services, and employee machines. Tracing shows each agent’s reasoning steps, tool calls, and retrievals, and evaluations score groundedness, tool selection, and data drift.

Enforcement runs through verdicts the customer’s application applies. Arthur scores each request for prompt injection, PII exposure, restricted models, and off-policy tool use, and the application blocks, redacts, or re-prompts through the SDK. Customers can tune guardrail thresholds per use case and write custom metrics in SQL or Python.

The engineering assets in the record are an open-source engine and a granted patent. The MIT-licensed Arthur Engine repository was updated on October 15, 2026, while GitHub marks the Arthur Bench evaluator repository as archived. Arthur holds a US patent on machine-learning monitoring systems and methods, granted in March 2024.

Sales Engagement & Go-to-Market Arthur reaches buyers through self-serve plans, direct enterprise sales, and the AWS and Google Cloud marketplaces…

Arthur reaches buyers through self-serve plans, direct enterprise sales, and the AWS and Google Cloud marketplaces. It launched its Agent Discovery and Governance platform in December 2025 and announced the Google Cloud Marketplace listing for it in January 2026.

Arthur’s named customers come mainly from its own customer stories. It presents Axios, The Philadelphia Inquirer, Upsolve AI, and Expel. According to Arthur’s case study, Expel cut engineering time on model-specific monitoring by 50% after adopting the platform.

Older reporting adds regulated names. In 2023 VentureBeat relayed Arthur’s claim that three of the top five US banks, Humana, John Deere, and the Department of Defense are customers. TechCrunch’s 2022 report of 58% average ARR growth is the latest growth figure in the cited sources.

Pricing Model Arthur publishes its plans…

Arthur publishes its plans. The free plan covers up to 4 use cases with unlimited seats, Premium costs $60 a month for up to 100 use cases, and Enterprise carries custom pricing. Arthur sets limits on jobs, spans, inferences, and evaluations for each tier.

Enterprise pricing buys deployment control and support. At the Enterprise tier, Arthur adds dedicated and managed VPC options, a dedicated customer success manager, SSO, SLAs, and a BAA. In its June 2026 guide, CSO Online reported paid plans starting at $10,000 a year for smaller networks.

The open-source engine is the free entry point. On its pricing page, Arthur offers the Arthur Evals Engine with PII, sensitive-data, custom LLM, and regex rules built in for self-serve deployment.

Product Delivery & Operations Arthur delivers software in three deployment forms…

Arthur delivers software in three deployment forms. It offers fully hosted SaaS, on-premises deployment, and a hybrid design where the evaluation engine runs next to the customer’s workloads. Arthur says RBAC, SSO, and deployed engineering support come with each option.

The hybrid design separates data from management. The engine runs as a Docker or Kubernetes runner inside the customer’s network, which keeps raw data there without inbound connections. Arthur’s Enterprise plan includes SLAs and a dedicated customer success manager.

Arthur ships platform updates on a near-monthly cadence. In its documentation changelog, Arthur lists release notes for ten months between November 2025 and September 2026.

Earning Customers' Trust Arthur states SOC 2 Type II compliance and offers a business associate agreement for HIPAA-aligned work…

Arthur states SOC 2 Type II compliance and offers a business associate agreement for HIPAA-aligned work. On its platform page, Arthur says it meets standards including SOC 2 Type II and enterprise data residency policies and can execute a standard BAA on request.

Arthur answers data-exposure concerns by keeping inference data in the customer’s VPC, with only lightweight metrics reaching its control plane. Arthur also retains every eval result, policy check, and enforcement action as evidence for examinations, according to its agent page.

Arthur’s SOC 2 report does not appear on the public surfaces probed, so a buyer cannot read it there. The trust portal at trust.arthur.ai resolves but fails its TLS handshake, and the security, trust, and compliance paths on arthur.ai return no page.

Platform Strategy & Ecosystem Positioning Arthur positions itself as a governance layer across the AI platforms a customer already runs…

Arthur positions itself as a governance layer across the AI platforms a customer already runs. It discovers agents through the APIs of AWS Bedrock, Google Vertex AI, and Azure AI Foundry. In its December 2025 launch release, Arthur named integrations with Google Cloud Gemini and Vertex, AWS Bedrock, and Microsoft Agent Foundry. Findings stream to CrowdStrike Falcon, Elastic, Splunk, and Datadog.

Arthur sells through the same cloud vendors whose AI services it governs. It lists the product on the AWS and Google Cloud marketplaces. In its buyer’s guide, CSO Online lists Microsoft, CrowdStrike, and a Wiz and Google product among vendors with AI posture coverage, so platform owners already sell into Arthur’s category.

The Arthur Engine repository has 92 GitHub stars and 17 forks, and GitHub marks the Arthur Bench repository as archived.

Team & Execution Capability Arthur’s chief executive brings senior enterprise AI experience…

Arthur’s chief executive brings senior enterprise AI experience. Co-founder Adam Wenchel was VP of AI and Data Validation at Capital One, according to a Welcome to the Jungle profile, and Arthur highlights that background on its platform page.

John Dickerson, a former tenured University of Maryland computer science professor, describes his Arthur co-founder and chief scientist role in the past tense and now leads Mozilla.ai. Wenchel also signed Arthur’s August 2026 Form D as chief executive officer.

Arthur is small by headcount. TechCrunch reported 55 employees in 2022, and Welcome to the Jungle lists 21 to 100 employees with a 14% decline over 12 months.

Sources

Company Detail Sources (6)
Id Source Tier Accessed
f1 Arthur: homepage official 2026-10-16
f2 AlleyWatch on Arthur founding year press 2026-10-16
f3 SEC EDGAR: Arthur AI, Inc. Form D, accession 0001231919-26-000847 regulatory 2026-10-16
f4 AlleyWatch interview on Arthur funding press 2026-06-14
f5 AI Defense Matrix Catalog entry other 2026-06-09
f6 AI Defense Matrix Catalog mapping other 2026-06-23
Profile Analysis Sources (25)
Id Source Tier Accessed
s1 Arthur: homepage official 2026-10-16
s2 Arthur: platform page and FAQ official 2026-10-16
s3 Arthur: Arthur Shield product page official 2026-10-16
s4 Arthur: pricing page official 2026-10-16
s5 Arthur: agent security and governance page official 2026-10-16
s6 Arthur: team page official 2026-10-16
s7 Arthur: Upsolve case study official 2026-10-16
s8 Arthur: Expel case study official 2026-10-16
s9 Arthur documentation: platform changelog official 2026-10-16
s10 GitHub API: arthur-ai/arthur-engine repository metadata research 2026-10-16
s11 GitHub API: arthur-ai/bench repository metadata research 2026-10-16
s12 TechCrunch: Arthur Series B coverage press 2026-10-16
s13 SiliconANGLE: Arthur Bench launch coverage press 2026-10-16
s14 VentureBeat: Arthur Shield coverage by Sean Michael Kerner press 2026-10-16
s15 CSO Online: AI-SPM buyer’s guide by David Strom press 2026-10-16
s16 SEC EDGAR: Arthur AI, Inc. Form D, accession 0001231919-26-000847 regulatory 2026-10-16
s17 SEC EDGAR full-text search: Arthur AI, Inc. Form D filings regulatory 2026-10-16
s19 Google Patents: US11922280B2, Machine learning monitoring systems and methods regulatory 2026-10-16
s20 PR Newswire: Arthur release on its Agent Discovery and Governance platform press 2026-10-16
s21 PR Newswire: Arthur release on its Google Cloud Marketplace listing press 2026-10-16
s22 PR Newswire: Arthur release on its Defense Department selection press 2026-10-16
s23 John P. Dickerson: personal site other 2026-10-16
s24 Welcome to the Jungle: Arthur AI company profile other 2026-10-16
s25 Probe: trust.arthur.ai resolves but fails its TLS handshake, and arthur.ai/security, /trust and /compliance return 404 (curl, 2026-10-16) official 2026-10-16
s26 AppSec Santa: Arthur AI review by Suphi Cankurt research 2026-10-16
Deep-Dive Sources (25)
Id Source Tier Accessed
s1 Arthur: homepage official 2026-10-16
s2 Arthur: platform page and FAQ official 2026-10-16
s3 Arthur: Arthur Shield product page official 2026-10-16
s4 Arthur: pricing page official 2026-10-16
s5 Arthur: agent security and governance page official 2026-10-16
s6 Arthur: team page official 2026-10-16
s7 Arthur: Upsolve case study official 2026-10-16
s8 Arthur: Expel case study official 2026-10-16
s9 Arthur documentation: platform changelog official 2026-10-16
s10 GitHub API: arthur-ai/arthur-engine repository metadata research 2026-10-16
s11 GitHub API: arthur-ai/bench repository metadata research 2026-10-16
s12 TechCrunch: Arthur Series B coverage press 2026-10-16
s13 SiliconANGLE: Arthur Bench launch coverage press 2026-10-16
s14 VentureBeat: Arthur Shield coverage by Sean Michael Kerner press 2026-10-16
s15 CSO Online: AI-SPM buyer’s guide by David Strom press 2026-10-16
s16 SEC EDGAR: Arthur AI, Inc. Form D, accession 0001231919-26-000847 regulatory 2026-10-16
s17 SEC EDGAR full-text search: Arthur AI, Inc. Form D filings regulatory 2026-10-16
s19 Google Patents: US11922280B2, Machine learning monitoring systems and methods regulatory 2026-10-16
s20 PR Newswire: Arthur release on its Agent Discovery and Governance platform press 2026-10-16
s21 PR Newswire: Arthur release on its Google Cloud Marketplace listing press 2026-10-16
s22 PR Newswire: Arthur release on its Defense Department selection press 2026-10-16
s23 John P. Dickerson: personal site other 2026-10-16
s24 Welcome to the Jungle: Arthur AI company profile other 2026-10-16
s25 Probe: trust.arthur.ai resolves but fails its TLS handshake, and arthur.ai/security, /trust and /compliance return 404 (curl, 2026-10-16) official 2026-10-16
s26 AppSec Santa: Arthur AI review by Suphi Cankurt research 2026-10-16

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.