Kipling Secure

• A platform vendor whose tools providers already run could ship native AI-usage controls, folding Kipling's service pitch into a license those providers already buy.
• Kipio reaches the same providers with AI discovery and governance deployable through their existing RMM and MDM tools, so the channel position Kipling built is contested rather than held.
• If the named customer base does not grow beyond F1 IT and CBTech Support over the coming year, the conference and partner-program spending will have outrun the product's public proof.
• Enterprise-focused AI-usage security vendors could move down-market through the same provider channel.
• Kipling's own sources describe its scope differently, from a broad threat-protection platform to AI detection and response, so a provider comparing two of them gets two answers about what it would be reselling.

Kipling Secure sells to managed service providers whose small and midsize clients adopted AI tools faster than anyone set rules for them. Employees paste business data into consumer AI applications, AI arrives embedded across the SaaS platforms those clients already use, and the provider running the client's IT is asked to control a surface it cannot see. The company reports finding 122 AI applications in a single customer environment, its own illustration of how far usage outruns awareness.

The scale evidence is the company's own. Kipling offers its discovery count and testimonials from provider customers, one of which describes clients using tools such as ChatGPT and Gemini with no formal governance. CRN's 2026 roundup notes that organizations keep seeking help with sanctioned and unsanctioned AI deployments, which places the demand without measuring it for this buyer. No analyst report, regulatory driver, or incident record in the reviewed sources sizes the problem for the provider market. [s1, s5, s14]

The Kipling Secure Platform runs a discover, assess, govern, respond, and monetize arc. It finds sanctioned and shadow AI across users, browsers, apps, and devices, inspects prompts and responses in real time to redact or block sensitive data, enforces policies written in plain language, and generates provider-branded monthly AI usage and risk reports. The company's blog calls this discipline AI detection and response, defining it as continuous monitoring, identification, analysis, and response to AI-related activity and policy violations.

A SiliconIndia profile adds the mechanism the marketing pages leave out. It describes behavioral baselining across users, applications, and devices, encrypted traffic analysis that detects without full payload inspection, transformer-based classification of algorithmically generated malicious URLs, and policy-driven containment that isolates devices or terminates sessions. That profile was developed from an interview with the chief executive, so the architecture is the company's account of itself.

The reviewed sources hold no external check on any of it. They carry no documentation portal, no third-party technical evaluation, and no component a buyer could inspect. CRN's entry on the product attributes each capability to the company. [s1, s6, s8, s14]

Kipling builds its product around the managed service provider's workflow. MSP Influencer describes the product as built around provider workflows rather than adapted from an enterprise product for the channel. Its information kit addresses providers supporting SMB customers, virtual CISO practices, compliance consultants, and technology advisors.

That position is now contested inside the same trade coverage. CRN's 2026 roundup also lists Kipio, describing an AI operations and security platform built to help providers secure and govern AI use across their customers, with a multi-tenant console deployable through the RMM and MDM tools providers already run. Two vendors reaching the same buyer with the same pitch is what an early category looks like.

The company's sources describe its scope inconsistently. The August 2025 channel interview described a broad AI-based platform helping businesses protect, detect, and respond to cyber threats, and the 2026 SiliconIndia profile still describes endpoint, identity, and network protection integrated into one system. The site a buyer reads today sells AI discovery, governance, and data-leak blocking, so the scope a provider sees depends on which source it reads. [s5, s14, s9, s8, s15]

Kipling documents its conference calendar and partner-program work in more detail than its customer results. The company sponsors ChannelPro DEFEND, ASCII Edge, and MES IT Security, attends GTIA ChannelCon, XChange Security, and Right of Boom, holds a place in ConnectWise's PitchIT cohort, and publishes a 30-day sequence for converting an AI visibility assessment into a recurring managed service. MSP Influencer reports that the company invests between 200,000 and 500,000 dollars a year in channel growth, a figure drawn from Kipling's own award submission.

Two third-party notices landed this summer. CRN listed the product among ten hot security products for managed service providers in 2026, and MSP Influencer named it a ForzaDash Vendor Excellence Award winner. Both measure the attention a vendor earns rather than the deployments it holds, and the award write-up draws its onboarding figure from the company's submission.

Named proof is narrower. Two providers endorse the product by name on vendor pages, F1 IT of Fort Worth and CBTech Support of New Providence, two further testimonial speakers carry titles without company names, and no independent source reports a customer count, a revenue figure, or the scale the homepage claims. [s4, s5, s11, s14, s15]

The public team is a four-person leadership roster led by a founder with a verifiable engineering record. Saurabh Sandhir, co-founder and chief executive, holds two issued US patents in network routing, US 7,940,650 from 2011 and US 7206856 from 2002, and lists a University of California, Berkeley business-school background. The company page names Harmeet Sahni as VP of Product, Raja Sivaramakrishnan as CTO, and Daniel De La Garza as Head of Sales Engineering, and describes the team as having spent decades building products and scaling MSP ecosystems.

What the reviewed sources do not show is a prior build or exit in security. Sandhir's verifiable technical record is network engineering, no security product he led appears in the cited pages, and no exit or sustained publication record appears for any of the four. For a company asking providers to trust it to define a new security service, that missing track record is the team's open question. [s2, s12, s8]

Kipling now publishes a completed attestation. The trust center at trust.kiplingsecure.ai, run on Comp AI, shows SOC 2 Type 2 as compliant, lists 25 internal policies and 35 monitored controls, and offers one document, a CPA-signed final SOC 2 Type 2 report. The portal lists the report and an NDA, and labels the security questionnaire Request Access, so a buyer reads the summary and then asks for the paperwork.

The company's LinkedIn page announced the completed audit, describing it as months of proof rather than a single snapshot. A provider reselling Kipling into compliance-sensitive clients can now point to a completed audit, and one endorser on the vendor's own pages describes pushing the product out to regulated customers. The portal lists no subprocessors and no ISO certification, and the privacy policy names Kipling Secure Inc. as the operating entity. [s7, s11, s3, s5]

Kipling Secure segments by the service provider rather than the end customer. Its information kit addresses providers supporting SMB customers, virtual CISO practices, compliance consultants, and technology advisors, all intermediaries that deliver security services to smaller organizations. The homepage title names MSPs and SMBs together, so the reviewed sources place the provider first without establishing that the company declines direct business.

The end market reached through that channel is the small and midsize business whose employees adopted AI tools before anyone set rules for them. The named endorsements match the target. F1 IT of Fort Worth and CBTech Support of New Providence are the two named providers, and the CBTech quote describes clients using tools such as ChatGPT and Gemini with no formal governance.

Deal sizing on the site's own form runs from under 500 endpoints to more than 5,000. The reviewed sources name no enterprise buyer and no public-sector buyer.

The platform's capability arc runs discover, assess, govern, respond, and monetize. It finds sanctioned and shadow AI across users, browsers, apps, and devices, reporting one customer environment with 122 AI applications. It inspects prompts and responses in real time to redact or block sensitive data, enforces policies written in plain language, and generates provider-branded monthly AI usage and risk reports. CRN's entry describes automated real-time blocking of policy-violating actions, attributed to the company.

AI is both the subject and the operating method. The August 2025 channel interview says operators execute tasks with natural-language commands, and a 2026 SiliconIndia profile sharpens that to natural-language prompts used instead of scripts and multi-system workflows. That profile also describes behavioral baselining across users and devices, encrypted traffic analysis that avoids full payload inspection, and transformer-based classification of algorithmically generated malicious URLs.

SiliconIndia developed that profile from an interview with the chief executive, so the architecture is the company describing itself in an outlet's voice. The reviewed sources hold no documentation portal, no third-party evaluation, and no inspectable component, so capability depth rests on vendor surfaces and channel press that relays company claims.

The go-to-market is channel-first and founder-fronted. Kipling sponsors ChannelPro DEFEND, ASCII Edge, and MES IT Security, attends GTIA ChannelCon, XChange Security, and Right of Boom, and holds a place in ConnectWise's PitchIT cohort. Saurabh Sandhir gave the August 2025 e-ChannelNews interview and appeared on Marvin Bee's IT Business Podcast to discuss the PitchIT cohort.

The site packages the sales motion for the provider as well. A 30-day sequence turns an AI visibility assessment into a recurring managed service. MSP Influencer describes the same report-first motion and reports onboarding completed in under an hour, a figure drawn from Kipling's own award submission.

Partner economics get more disclosure than customer results. The award write-up lists co-selling support, market development funds, and channel investment the company puts at 200,000 to 500,000 dollars a year, each reported by the company. Named proof is two provider endorsements on vendor pages, and the reviewed sources carry no customer count or independent scale reporting.

The MSP section of the site says price per user, while the 2026 SiliconIndia profile describes per-endpoint SaaS pricing that scales linearly with customer growth, so the published unit varies between user and endpoint even as the linear-scaling pitch stays constant. The information kit's download form sizes prospects by endpoint count, from under 500 to more than 5,000.

No product price appears in the reviewed sources. The reviewed vendor pages publish no price list and no starting price, and the award write-up describes predictable monthly billing without naming an amount, so a provider evaluating the product learns the billing unit and not the rate.

The pricing story aims at provider economics rather than end-customer budgets. The provider buys per unit, packages assessments and reports on top, and resells the result at a margin as its own AI-security service. That makes Kipling's price a cost line inside someone else's product, dependent on the provider's incentive to keep reselling it.

Delivery is multi-tenant software built to sit beside the tools a provider already runs. The site emphasizes deployment with existing tools, a multi-tenant console for managing many client environments, and automated monthly reporting. MSP Influencer reports automated onboarding completed in under an hour, from the company's award submission.

Operating scale is small and mostly vendor-described. LinkedIn shows 15 employees against a PitchBook figure of 12, and the homepage claims AI usage secured across thousands of customer environments without naming a count. MSP Influencer reports around-the-clock support and dedicated account management, drawn from the company's own award materials, and no uptime commitment appears in the reviewed sources.

Nothing in the reviewed sources contradicts the delivery claims. The evidence is the vendor's own description, now sitting alongside a completed SOC 2 Type 2 audit that tests operating controls over a period rather than at a point.

Kipling now publishes a completed attestation. The trust center at trust.kiplingsecure.ai, run on the Comp AI platform, shows SOC 2 Type 2 as compliant, lists 25 internal policies and 35 monitored controls, and holds one document, a CPA-signed final SOC 2 Type 2 report. The company's LinkedIn page announced the completed audit, describing it as months of proof rather than a single snapshot.

The portal lists the report and an NDA, and labels the security questionnaire Request Access. It publishes the compliance state and names the underlying documents. The portal lists no subprocessors and no ISO certification.

The attestation matters more here than for a direct-sale vendor, because the buyer is an intermediary. A provider reselling Kipling into compliance-sensitive clients can now point to a completed audit of the vendor beneath its own service. A funded competitor can obtain the same report through ordinary enterprise-market preparation, so it clears an objection rather than blocking a replacement. The privacy policy names Kipling Secure Inc. as the operating entity.

Kipling's visible ecosystem work is a partner-program place and a conference calendar. The company holds a slot in ConnectWise's PitchIT cohort and lists IT Nation Connect Global among its 2026 events, alongside the MSP conferences it sponsors and attends through the year.

Integration evidence stays generic. The reviewed vendor pages claim deployment alongside existing tools and multi-tenant management but name no marketplace listing, no published integration catalog, and no named connector to a remote-monitoring or professional-services-automation product. CRN's entry on Kipio, by contrast, states that the rival platform can be deployed through the RMM and MDM tools providers already run, so a competitor has documented the integration path Kipling's own pages leave unnamed.

The multi-tenant position creates a latent data path. AI-usage signals aggregated across a provider's tenants, such as which AI tools recur across client industries, could become benchmarks a single provider cannot assemble alone. The reviewed sources evidence no such cross-customer dataset today.

The public team is a four-person leadership roster led by a founder with a verifiable engineering record. Saurabh Sandhir, co-founder and chief executive, holds two issued US patents in network routing, US 7,940,650 from 2011 and US 7206856 from 2002, and lists a University of California, Berkeley business-school background. The company page names Harmeet Sahni as VP of Product, Raja Sivaramakrishnan as CTO, and Daniel De La Garza as Head of Sales Engineering, and says the team spent decades building products and scaling MSP ecosystems.

The accessible record documents network engineering rather than a prior security product build. No security product any of the four led before Kipling appears in the cited pages, no exit appears, and no sustained publication record appears. Sandhir is the company's public voice, carrying the channel interview and the podcast appearance.

For a company asking providers to trust it to define a new security service, the missing in-domain build is the team's open question. The patents establish depth in a different discipline.