Geordie AI

• The agent platforms Geordie monitors already bundle native oversight into deals enterprises sign, with Fortune naming Microsoft Agent 365, ServiceNow AI Control Tower, and OpenAI's Frontier governance features, so that bundling could erode the standalone purchase before Geordie builds a switching cost beyond convenience.
• Most of what a buyer can independently verify is commercial momentum, not product efficacy, because no public documentation, independent benchmark, or published research on the Beam engine was found, so a security review could stall on the absence of testable evidence.
• The 1,300% ARR growth figure rests on a single low-authority source and an undisclosed base, so a buyer treating it as proof of traction could misjudge the actual revenue scale.
• Geordie raised at a roughly $180 million post-money valuation that Fortune derived from Companies House filings rather than a confirmed figure, and a valuation set ahead of demonstrated product depth could force a hard down-round if enterprise deals convert slower than the seed-to-Series-A pace implies.
• The differentiation leans on founder pedigree from Darktrace and Snyk rather than a structural product moat, so a key departure or an execution stumble turning operators into product builders could remove the main reason a buyer chooses Geordie over a bundled rival.
• AlphaSense appears only through Fortune and Geordie and lacks a direct public testimonial in the sources reviewed, so a buyer leaning on that account specifically has less to check, even though the CISOs of Owkin, Forge Holidays, and 118 118 Money speak on the record on Geordie's homepage.

Geordie treats the AI agents an enterprise runs as assets it cannot see or govern, and sells a platform to discover, audit, and control them. The product framing is that agents now act autonomously across cloud, code, and endpoint environments with their own tool and MCP connections, faster than security teams can track. The buyer is the CISO enabling agent adoption who has no middle ground between blocking innovation and losing control.

Independent and investor accounts corroborate the gap beyond vendor copy. CEO Henry Comfort told General Catalyst that early CISO calls split between leaders who felt unable to enable innovation for lack of visibility and those who had put the cart before the horse. The Business Wire launch cites a survey finding most enterprise leaders identify roadblocks to agentic adoption, which grounds the pain outside Geordie's own pages.

Geordie positions the consequence as risk that compounds once agents scale. The company argues agentic activity grows exponentially after adoption, creating exposure that manual review cannot keep pace with, which is the problem its discovery and real-time controls are built to address. [s8, s5, s4]

Geordie's product pages describe five capability areas rather than a single control. Per those pages, the platform discovers every agent across cloud, code, and endpoint environments, maps each agent's permissions, tool and MCP connections, models, and sub-tools, and keeps an auditable record of every prompt, plan, response, and tool invocation with anomaly detection. A risk-intelligence layer maps findings to OWASP, NIST, ISO 42001, the EU AI Act, and AIUC-1.

The control layer is where Geordie says it acts in production. The product page describes a Beam engine that intervenes at the agent level in real time with deterministic guardrails, positioned as the step beyond visibility into active remediation. This is the mechanism a security buyer evaluating a runtime product would test against its own agents.

Public evidence stops at the vendor's description. No documentation portal, independent product benchmark, or published Geordie research could be located as of June 2026, so the depth and efficacy of the controls rest on what Geordie states rather than on artifacts a buyer can check independently. [s1, s2]

Geordie competes in agent security and governance against independents and the platforms building toward the same controls. Fortune places it in a crowded field where vendors bundle agent oversight into broader packages, naming Microsoft Agent 365, ServiceNow AI Control Tower, and OpenAI's Frontier governance features, and the agent platforms and clouds Geordie monitors could deepen that native governance over assets they already own.

Geordie's visible differentiator is cross-platform neutrality backed by founder pedigree. A vendor-neutral view across every agent regardless of underlying platform is the pitch a single platform's native tooling cannot match, and the Darktrace and Snyk backgrounds give the founders enterprise distribution reach a first-round company rarely holds.

The structural risk is that neutrality is also exposure. The platforms Geordie watches own the buyer relationship and could fold agent governance into deals enterprises already sign, and no compliance position or proprietary data flywheel yet anchors Geordie against that pressure. [s13, s2, s6]

Geordie shows more named commercial proof than most companies a year out of stealth. Fortune reports the platform deployed across roughly 30 customer environments per CEO Henry Comfort, and names AlphaSense, where Geordie covers tens of thousands of agents, and Owkin, which runs hundreds of agents across more than 50 petabytes of data. Geordie says plugging in at Owkin revealed three times more agents than the company had realized.

The RSAC win is the strongest third-party signal. BankInfoSecurity reports Geordie as the winner of the 2026 RSAC Innovation Sandbox contest, the recognition that has flagged successful security companies for two decades. The AI Insider separately reports 1,300% ARR growth over the opening five months of 2026, a single low-authority source against an undisclosed base, useful as a demand signal rather than verified revenue.

The motion is enterprise and demo-gated. The site routes prospects to book a demo, and the capital is earmarked for engineering and go-to-market growth plus US expansion, which fits negotiated contracts rather than self-service adoption. [s4, s6, s9]

The founders pair domain operating roles at two recognized security companies. Fortune reports Henry Comfort served as COO for the Americas at Darktrace before co-founding Geordie as CEO, Hanah-Marie Darley was Darktrace's former director of security and AI strategy and is now chief AI officer, and Benji Weber was Snyk's former senior director of engineering and is now CTO.

The pedigree is operating depth rather than a prior founder exit. None of the three shows a previous company they founded and sold in the fetched sources, so the credibility comes from senior roles at two recognized security companies rather than on a track record of building and exiting their own.

Investor conviction reinforces the team signal. Ten Eleven Ventures and General Catalyst co-led the seed and followed on, and Balderton and Crosspoint joined the Series A, which is the kind of backing that tends to follow operators the firms have watched at scale. [s11, s5, s7]

Geordie publishes a SafeBase trust center at trust.geordie.ai that lists SOC 2, ISO/IEC 27001:2022, and GDPR, with the SOC 2 report, a pentest report, and a data flow diagram offered as access-gated documents. The product inspects every prompt, plan, response, and tool invocation an enterprise's agents generate, which raises the data-handling question a security review asks first, and the trust center is the public answer that question now has.

The detailed evidence still sits behind a review request. The compliance badges and document list render publicly, but the SOC 2 report, pentest report, and data processing agreement require a buyer to ask for access, so a procurement team confirms the attestations on the portal and then requests the underlying reports rather than downloading them outright. [s12, s2, s1]

Add analyzed competitors to compare them side by side with Geordie AI.

Geordie appears to sell to the enterprise CISO responsible for enabling and governing AI-agent adoption, a buyer who lacks a way to see what those agents do. The company frames the buyer as caught between blocking innovation and losing control, and in a General Catalyst interview CEO Henry Comfort describes early CISO calls splitting between leaders who felt unable to enable agents for lack of visibility and those who had moved too fast. The segment is enterprises far enough into agent adoption that manual review no longer scales.

The entry point is a single source of truth for agentic risk rather than a point control. Geordie's homepage organizes the pitch around five questions a security team cannot answer today: what agents exist, which tools each connects to, what they are doing, what risk that creates, and what to do about it. That framing targets the security team's discovery and governance gap before it targets any one threat.

The named customers show the segment is real and broad. Fortune reports AlphaSense in financial data and Owkin in AI biotech, and Geordie's site adds Forge Holidays, A+E Global Media, OakNorth, and 118 118 Money. The spread across regulated and unregulated sectors fits a horizontal governance buyer rather than a vertical niche.

Geordie's platform spans discovery, posture management, behavioral observability, risk intelligence, and remediation rather than a single capability. Per the product pages, it discovers every agent across cloud, code, SaaS, and endpoint, maps each agent's permissions, tool and MCP connections, models, and sub-tools, and keeps a continuous auditable record of every prompt, plan, response, and tool invocation with anomaly detection. A risk-intelligence layer maps findings to OWASP, NIST, ISO 42001, the EU AI Act, and AIUC-1.

The control engine is where Geordie claims to act in production. Geordie describes Beam as an AI agent remediation suite that uses context engineering to dynamically shape and constrain agent behavior, intervening at the agent level in real time. Fortune quotes CEO Henry Comfort positioning this as an independent layer that does not come from the vendors providing the agents and works across all agent types.

Public evidence stops at the vendor's own description. No independent product benchmark or published Geordie research on Beam could be located as of June 2026, so the depth and efficacy of the controls rest on what Geordie states rather than on artifacts a buyer can test. The one independent technical writeup, an RSAC analysis by NSFOCUS, reports roughly 10 minutes to initial agent visibility but infers the integration internals rather than measuring control efficacy.

Founders front the selling, which fits the revenue stage. CEO Henry Comfort speaks for the company in Fortune and on stage at the RSAC Innovation Sandbox, and the General Catalyst story describes the team chasing leads and working with design customers directly. A roughly year-old company carrying named enterprise references through founder-led sales matches the pattern of a team still building the repeatable motion rather than handing it to a quota-carrying org.

The motion is enterprise and demo-gated. Geordie's site routes prospects to book a demo with no self-service path, and the use of funds points to engineering and US expansion, which fits negotiated contracts. Geordie is a London company expanding into the US market where most of its named competitors sell.

The third-party signals are unusually strong for the stage. BankInfoSecurity confirms the RSAC Innovation Sandbox win, and Fortune notes the contest's past finalists have included Wiz and SentinelOne, while two customer CISOs endorse the product on the record on Geordie's homepage. That on-record reference depth is a strong GTM signal at this stage.

Geordie publishes no pricing and routes every prospect to a demo. The hidden price and the absence of a self-service tier both signal large negotiated enterprise deals rather than seat-based or volume self-purchase, consistent with the buyer being a CISO approving a governance program.

The charging unit is not disclosed, so what Geordie believes buyers pay for cannot be read off a price page. Public customer descriptions emphasize deployment scale in agents, with Geordie telling Fortune that AlphaSense runs tens of thousands and Owkin hundreds, which is consistent with an agent-count or environment-based model, but Geordie has not stated the unit publicly.

The pricing opacity is normal for the segment and stage and is not a defect a buyer should read as evasion. It does mean total cost of ownership and the unit of expansion are diligence items a buyer resolves in the sales conversation rather than on the site.

Geordie is delivered as SaaS that connects across an existing stack without rearchitecting it. The product page states visibility and control reach code, cloud, SaaS, and endpoint without replacing systems, and the RSAC writeup by NSFOCUS notes initial agent visibility in roughly 10 minutes after integration. Fast time to first value is the deployment claim the company leads with.

The operational core is continuous monitoring rather than a one-time scan. Geordie keeps an auditable record of every prompt, plan, response, and tool invocation with behavioral baselining and anomaly detection, which means the product runs as an always-on observability and control plane over live agent traffic. That posture raises a data-handling question because the product inspects proprietary agent activity continuously.

The trust artifacts a security review expects around such a deployment are public. The homepage footer carries SOC 2 Type 2, SOC 3, ISO 27001, and GDPR badges, and a SafeBase trust center at trust.geordie.ai lists SOC 2 and ISO/IEC 27001:2022 with the SOC 2 report, a pentest report, and a data flow diagram offered as access-gated documents. A procurement team can start its review from those reports rather than from sales conversations for a product sitting in the path of sensitive agent traffic, with the open question being the depth of the reports behind the gate.

Geordie publishes a SafeBase trust center at trust.geordie.ai listing SOC 2, ISO/IEC 27001:2022, and GDPR, with the SOC 2 report, a pentest report, and a data flow diagram offered as access-gated documents. The platform reads every prompt, plan, response, and tool invocation an enterprise's agents generate, which is the data-handling concern a security review raises first, and the trust center is the held-certification answer that question now has.

The standards mapping in the product is a separate signal from the certifications Geordie holds. The risk-intelligence layer maps findings to OWASP, NIST, ISO 42001, the EU AI Act, and AIUC-1, which positions the product as a way for buyers to evidence their own compliance. That is a capability the product offers rather than the SOC 2 and ISO 27001 attestations Geordie itself carries, and the two reinforce each other in a security review.

Named references add social proof on top of the artifacts. The Forge Holidays CISO endorses the product publicly, and a buyer can pair that with the audited reports requested through the trust center, so the readiness gap now sits at the depth of those reports rather than at their absence.

Geordie positions itself as the neutral layer across an agent ecosystem it does not own. CEO Henry Comfort calls the company the Switzerland of the future for agents and argues enterprises need an independent view that does not come from the vendors providing the agents, working across multiple model providers. Neutrality is the platform thesis and the answer to why a single vendor's native tooling cannot match it.

The integration surface is the ecosystem asset. Geordie maps each agent's tool and MCP connections across code, cloud, SaaS, and endpoint, so its value grows with the breadth of agent frameworks and platforms it can read. The wider that coverage, the harder a single-platform incumbent can match the cross-vendor view.

The structural risk is that the same platforms Geordie watches own the buyer relationship. Fortune names Microsoft Agent 365, ServiceNow AI Control Tower, and OpenAI's Frontier governance features as offerings that bundle agent oversight into packages enterprises already buy. Comfort himself names the principal threat as incumbents using their distribution advantage, which is the platform-ecosystem pressure Geordie's neutrality both answers and is exposed to.

The founders pair senior operating roles at two recognized security companies. Fortune reports Henry Comfort served as COO for the Americas at Darktrace before co-founding Geordie as CEO, Hanah Darley was Darktrace's director of security and AI strategy and is now Chief AI Officer, and Benji Weber was Snyk's senior director of engineering and is now CTO. The credibility comes from operating pedigree at Darktrace and Snyk rather than a prior founder exit.

Investor conviction reinforces the team signal. Ten Eleven Ventures and General Catalyst co-led the seed and followed on, and Balderton and Crosspoint joined the Series A, the kind of backing that tends to follow operators these firms have watched at scale. General Catalyst's portfolio story describes the team recruiting talent and working design customers directly.

The team is scaled to the stage. Geordie's about page states 37 Geordies and growing, which is proportional to a company about a year out of stealth that has shipped a multi-module platform and is funding US expansion. The headcount sits behind the named-customer and RSAC proof rather than ahead of it.