All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Olakai sells a management layer for enterprise AI. It measures what coding tools, workplace copilots, and autonomous agents cost and return across vendors, and it governs the prompts and unapproved tools employees use. Olakai has assembled the commercial package an enterprise buyer looks for. It lists per-seat prices of five dollars an employee and twenty-five a developer, holds a completed SOC 2 Type II examination, and offers to run in the customer's own cloud. Yet no named customer appears in the reviewed sources, and the two references Olakai publishes sit on its partner page, one of them a consultancy that shares Olakai's investor. For a company that sells proof of AI value, that is the evidence a buyer would check first.
| Description | Olakai sells an enterprise AI ROI and governance platform that measures the cost, usage, and business return of AI coding tools, workplace copilots, and autonomous agents across vendors, and flags shadow AI use and sensitive data in employee prompts. | [f1] |
|---|---|---|
| HQ | Mountain View, California, US | [f2] |
| Product | What it does |
|---|---|
| Olakai Agentic | Measures and governs AI coding tools and autonomous agents, forecasting month-end token spend, enforcing budgets across six lenses, and attributing AI-assisted output from pull-request data. |
| Olakai Assistive | Tracks adoption, license utilization, and time saved across workplace AI assistants, and uses a browser extension to surface unapproved AI tools and sensitive data in prompts. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Olakai Assistive surfaces every AI tool an employee touches through a browser extension, ranks each by the data it exposes, and enforces policy per tool. These capabilities are mapped to the AI Defense Matrix. The return-measurement core is management tooling outside the matrix. [f3]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Olakai names four buyers with pages of their own, the head of AI, the CFO, the CISO and the VP of engineering, and states the pain precisely, that most leaders cannot prove what AI spend returns while coding-agent costs climbed five to ten times. The quantification reaches the record through Olakai's own manifesto, which cites a PwC survey of more than 4,000 chief executives in which 56% report zero financial benefit, and no independent research in the reviewed sources measures the pain for this product class. [s1, s12, s8, s3] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Olakai documents its mechanisms in detail on its own surfaces, through a public documentation site carrying a KPI formula reference and a REST API specification, versioned client libraries of which the TypeScript one is MIT licensed, and a stated method for classifying pull requests as AI-assisted by reading commit co-author trailers and bot authorship. No third-party technical evaluation, benchmark or customer writeup appears in the reviewed sources, and the openly licensed library covers data collection rather than the measurement engine the product is sold on. [s16, s17, s18, s3, s19] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | The enabler is the move of AI coding tools to usage-based, token-metered billing, which the homepage dates to the end of the subsidized era with coding-agent costs up five to ten times. HP Tech Ventures' February 2026 feature sets that alongside a broader argument that AI is expensive enough for the return questions to get asked. Buyer-side demand in the reviewed sources stays indirect, with no analyst note, budget-line evidence or procurement language for this product class. [s1, s22, s3] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Sources outside Olakai document Xavier Casanova's record, including the chief executive role at NASDAQ-listed Presto and the sales of Liveclicker to Campaign Monitor and Fireclick to Digital River, and the businesses the cited record describes, a restaurant automation company and an email personalization platform, sit outside security and AI governance. The company page names two co-founders and a board member whose backgrounds the reviewed sources do not publish, and the newsroom carries no leadership announcement. [s21, s22, s12, s32] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 | Two named partnerships now carry voices on the record, AI Aspire through managing director Kirsty Tan and the workforce-safety vendor SolusGuard through chief executive Serese Selanders, alongside a Microsoft partnership the integrations page claims. Both quotes sit on Olakai's own page, AI Aspire shares Olakai's investor, and no named customer or independently reported scale appears in the reviewed sources, so the indirect-signal adjustment was not applied. [s14, s10, s24, s13] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | F4's profile records Olakai at seed stage with one backer and no disclosed round amount, HP Tech Ventures records AI Fund as that backer, and nothing in the reviewed sources shows capital outrunning results, a mismatched motion or a stale raise. Shipping is visible in two priced products, a public documentation site, versioned client libraries and a partner program, while no revenue, margin or growth-efficiency figure appears, so the efficiency itself is unconfirmed. [s23, s22, s13, s16, s14] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 | The published price list splits the offer into two products and names the buyer for each, enterprises rolling AI out across the workforce at five dollars an employee and leaders who manage AI budget at twenty-five a developer, so each half points at a budget somebody owns. Olakai still needs more than one label to place itself, calling the platform vendor-neutral analytics and governance while AI Fund brands it Enterprise AI Intelligence, so the category is recognizable and still contested. [s13, s12, s20, s2] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 2/5 | Vendor neutrality is the structural argument, since no AI provider will benchmark itself against rivals, but the neutral lane is crowded: DX measures AI-assisted engineering and names Adyen publicly, Harmonic Security controls workforce AI in the browser, and WitnessAI catalogs shadow AI, agents and MCP servers. Each half of Olakai's offer is separately addressable by a vendor already adjacent to the buyer, and the reviewed sources show no data asset that would raise the cost of that absorption. [s12, s26, s28, s29] |
Olakai sells to the executives who have to justify enterprise AI spending. The homepage states that most leaders cannot prove what their AI spend is returning and that the subsidized era is over, with coding-agent costs up five to ten times, and use-case pages address the head of AI, the CFO, the CISO and the VP of engineering separately. Each of those buyers meets a different alternative, which is why the pitch splits four ways before the product does.
The pain argument is sharpest on engineering spend. Olakai's coding product page describes forecasting month-end spend from a run-rate and firing an alert before the invoice arrives, and the homepage carries a quote from an unnamed engineering leader whose token bill grew fivefold in a quarter after Claude Code moved to usage-based pricing. Every one of those voices is a role without a company behind it, so a buyer cannot trace the pain Olakai describes to an organization that reported it.
Outside voices confirm the question rather than the size of it. HP Tech Ventures' February 2026 feature treats the unanswered question of whether AI investment is working as common across companies, and Olakai's own manifesto reaches for a PwC survey of more than 4,000 chief executives in which 56% report zero financial benefit. That figure is the survey's, carried on Olakai's page, and no independent research in the reviewed sources measures the pain for this product class. [s1, s3, s8, s22, s12]
Olakai now sells two products on one data layer. The platform page states that Olakai includes Olakai Agentic, for the return on AI coding tools and the governance of autonomous agent workflows, and Olakai Assistive, for adoption and return across copilots, chat assistants and AI features inside other software. Underneath them sit three measurement modules and Kai, a conversational layer that answers questions across all of them.
The measurement methods are described rather than asserted. The coding product classifies every pull request as AI-assisted or not by reading commit co-author trailers, bot authorship and body markers, then compares cycle time against the team's own history. A separate measure Olakai calls AI Equivalent Engineers converts the change in code shipped per week after adoption into dollars against a loaded engineer cost. Olakai's documentation states that assistive value comes from estimating the minutes of human work each interaction likely saved, which is an estimate the buyer has to accept rather than a measurement it can check.
Security features run on the same telemetry. A browser extension surfaces unapproved AI tools as employees adopt them, each detected tool is scored for data sensitivity, compliance exposure and security risk, and approval workflows let an administrator approve, monitor or block. The coding side watches agent traffic for personal data, health data and secrets, kept on a separate risk surface so the two halves do not double-count.
Olakai has opened the developer surface since the last review. A public documentation site carries a formula reference, a REST API specification and a roles-and-permissions matrix, and a TypeScript library published under an MIT licence, a Python library and a command-line tool ship through public package registries. Those libraries cover getting AI activity into Olakai. The measurement engine itself is not open to inspection, and no third-party evaluation of it appears in the reviewed sources, so the return figures a buyer would most want to check rest on Olakai's account of its own method. [s2, s3, s4, s5, s6, s7, s8, s16, s17, s18, s19]
Olakai competes on breadth and neutrality rather than depth in any one lane. Its manifesto argues that no AI vendor will build cross-vendor measurement, because doing so would mean showing how its own tool compares with a rival's. That argument holds against the AI providers and does nothing against the other neutral parties already working the same ground.
Each half of the offer meets a different specialist. DX sells measurement of AI-assisted engineering and names Adyen among the customers speaking on video. Harmonic Security sells real-time visibility and control over workforce AI across the browser and desktop, WitnessAI catalogs shadow AI applications, agents and MCP servers, and Singulr AI markets an enterprise AI and agentic control plane. Credo AI works the governance lane and displays a Forrester Wave leader placement, a form of third-party recognition Olakai's record does not carry.
The bundling pressure comes from the platforms Olakai measures. Microsoft ships its own Copilot dashboards, and Olakai's integrations page sells against exactly that, offering the visibility it says Microsoft's own dashboard will not give. The same page names Microsoft as a partner, so the platform Olakai measures is at once a channel and a plausible source of a good-enough native alternative. [s12, s26, s28, s29, s27, s30, s10]
Olakai has moved from a quote-only motion to a published price list. Starter is free for up to four seats, Olakai Assistive lists at five dollars a month an employee, Olakai Agentic at twenty-five a developer, and an Enterprise tier is quoted for regulated and large organizations that want private cloud, on-premises or managed hosting. Publishing the numbers puts Olakai in front of a self-serve buyer without waiting for a sales conversation.
Named references have appeared on Olakai's partner page. The partner page presents two founding partners with executives quoted by name, the consultancy AI Aspire through managing director Kirsty Tan and the workforce-safety vendor SolusGuard through chief executive Serese Selanders, who says the analytics turn a client pilot into a company-wide rollout. AI Aspire is disclosed on the same page as backed by AI Fund, which also backs Olakai, so one of the two references sits inside the investor's network.
The rest of the traction record is still vendor-voiced. The homepage carries four testimonials attributed to roles rather than companies, the newsroom reads that industry updates and announcements are coming soon, and no named customer, case study or independent review appears in any reviewed source. The partner program itself is concrete, publishing a referral fee band for advisors and a deployment margin band for certified firms, which is the kind of detail a consultancy needs before it builds a practice on a young vendor. [s13, s14, s1, s32, s24]
Xavier Casanova's record is the team's documented asset. AI Fund's article records his chief executive role at NASDAQ-listed Presto, his founding of Liveclicker, sold to Campaign Monitor in 2018, and his founding of Fireclick, sold to Digital River in 2004, and credits him with five patents in video and predictive technology. HP Tech Ventures counts Olakai as his sixth venture since he started Fireclick as a Stanford student. The businesses the cited record describes are a restaurant automation company and an email personalization platform, both outside security and AI governance.
The bench under him stays thin in public. Olakai's company page names Walt Mann as co-founder and chief technology officer and Paul Brzozowski as co-founder and chief revenue officer, and the reviewed sources publish no background for either. The newsroom announces no leadership hire, and the reviewed sources establish no headcount.
The backing on the record is affiliated rather than commercial. AI Fund lists Olakai in its portfolio and describes the company in its own words, HP Tech Ventures records AI Fund as the backer, and Olakai's company page names Dean Sysman as a board member. Investor and board names of that kind open doors, and none of them stands in for an arms-length customer. [s21, s22, s12, s20, s32]
Olakai has closed the assurance gap its earlier record showed open. The trust page states that a SOC 2 Type II examination is complete for a period running from March to May 2026 against the security criteria, with the report available under a non-disclosure agreement. It also documents independent penetration testing by outside security firms on a periodic basis, AWS hosting in the us-east-1 region with isolated private networking, and a named list of infrastructure and AI subprocessors.
Deployment options now answer the residency question the single-region hosting raised. The Enterprise tier offers private cloud, on-premises or managed hosting, and the pricing page states that Olakai deploys inside the customer's own cloud by default so data does not leave the customer's control. A buyer weighing where employee prompts land has a choice the earlier record did not offer.
The product concentrates exactly the data its own marketing warns about. Olakai reads prompts to find sensitive content, so it holds the material it tells buyers to protect, and it names Anthropic, OpenAI, Google, Mistral and Perplexity among the providers that process data through API calls with no persistent storage at the provider. A prompt privacy mode that requires explicit authorization before a non-administrator can read prompt content, with access attempts logged, is the control Olakai offers against that concentration. [s11, s13, s8, s15]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| DX | competes with | Competes for the engineering buyer Olakai Agentic courts, selling measurement of AI-assisted engineering to the same organization. | |
| Harmonic Security | competes with | Competes for the security budget that pays for workforce AI governance, the same budget Olakai Assistive asks for. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| WitnessAI | competes with | Competes on shadow AI discovery and prompt governance, the capabilities Olakai Assistive leads with. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Singulr AI | competes with | Competes for the enterprise AI governance mandate with a control-plane framing rather than a return-on-investment framing. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Credo AI | adjacent | Adjacent because it governs AI policy and compliance workflows rather than measuring spend and return. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Zenity | adjacent | Adjacent because it secures agents built on enterprise platforms, the estate Agent IQ measures for cost and outcome. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
Add analyzed competitors to compare them side by side with Olakai.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
Olakai argues that no AI vendor has a reason to compare itself against rivals, which is why an independent measurement layer is worth buying. The friction a customer meets on leaving is local. Olakai holds each account's usage history, budget rules, performance formulas and permanently retained policy-acceptance records, and the cited record does not size the rebuild. Olakai publishes the Shadow AI Map for anyone to browse, so that catalog is not held back for customers, and it curates a second directory of agentic AI deployments. Its completed SOC 2 Type II examination is entry cost for an enterprise sale. A funded competitor could take the same neutral position, earn the same attestation and write the same software, so what Olakai holds is a head start rather than something scarce.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers buy software they run themselves, dashboards, budgets, policy workflows and a conversational query layer, now sold at a published per-seat price. Kai's audited reasoning is a feature of that software rather than a service in which Olakai accepts accountability for the answer, and the customer's own team operates the platform and owns the outcomes. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Olakai holds per-account material a departing buyer would rebuild elsewhere: usage and spend history, budgets defined across six overlapping lenses, key performance measures written in Olakai's own formula language, and policy-acceptance records the trust page says are permanently retained. The cited record documents that accumulation and does not size the migration, and it shows no network effect, no cross-customer asset and no residency obligation binding a customer to Olakai. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Olakai completed a SOC 2 Type II examination covering March to May 2026 and offers audit-ready reporting in its Enterprise tier, which a funded competitor can obtain through ordinary enterprise-market preparation rather than a barrier to replacement. The audit trails Olakai sells help a customer prove its own AI compliance, and the cited record names no mandate requiring this product class. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 2/3 | Reconciling usage and billing across many AI providers, classifying pull requests as AI-assisted from commit trailers and bot authorship, and detecting personal and health data in prompts is non-trivial integration work with moderate algorithmic depth. The documented method estimates the minutes a task likely saved and compares code shipped before and after adoption, which is arithmetic over ingested data rather than the real-time or adversarial systems depth that takes years to build. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 | Olakai courts regulated buyers with an Enterprise tier written for regulated and large organizations, industry pages for financial services and healthcare, and testimonials attributed to a Fortune 500 finance role and a healthcare security role. Every one of those voices is anonymous, the cited record names no regulated buyer of the product, and a free tier for teams under four alongside a five-dollar per-employee list price pull the addressed buyer toward the middle of the market. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Olakai spans a customer's whole AI estate and enforces budgets and policies across it, which is more than a single-purpose reporting application, and it publishes a REST API and client libraries so other systems can send activity into it. Nothing in the cited record depends on Olakai to run, so it sits above the customer's infrastructure rather than inside it. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The two catalogs Olakai curates it publishes rather than holds, a directory of more than 200 agentic AI deployments and a map of more than 700 enterprise AI applications, the second of which an unauthenticated fetch reaches. What accumulates privately sits in each customer's own account as usage history and budget definitions, the patents in the cited record are the founder's five in video and predictive technology rather than assets of this product, and the inputs behind the tool catalog's risk scoring are not described. |
Olakai sells to six named industries and four executive personas at once. The site carries industry pages for technology, financial services, healthcare and life sciences, professional services, retail and manufacturing, and use-case pages for the head of AI, the CFO, the CISO and the VP of engineering. That spread is ambitious for a company whose public masthead names three founders.
The published price list narrows the target. Olakai Assistive is sold to enterprises rolling AI out across the workforce, Olakai Agentic to leaders who manage AI budget and have to prove coding tools and agents are worth the bill, and an Enterprise tier to regulated and large organizations that want private cloud, on-premises or managed hosting. Each tier states its buyer in the vendor's own words.
Demand evidence still lags the marketing. The freshest customer material remains four undated testimonials attributed to roles rather than companies, the newsroom says announcements are coming soon, and no dated, named proof point appears in the reviewed sources. For a vendor selling proof of value, that absence is what a buyer would check before signing.
The claimed problems are specific and consistent across every page. Olakai names unprovable return, volatile usage-based coding spend, idle licenses, ungoverned agents and shadow AI, and each product page describes a mechanism rather than a benefit: admin-API ingestion for spend, pull-request analysis for output, a browser extension for discovery, and content policy enforcement on prompts.
Olakai has opened enough of its method to be argued with. Its documentation states that assistive value comes from estimating the minutes of human work each interaction likely saved, and that coding value comes from the measured change in code shipped per week after adoption against a loaded engineer cost. Agent return is value created divided by execution cost, where that value is again estimated time saved. The coding product classifies pull requests as AI-assisted by reading commit co-author trailers, bot authorship and body markers. A buyer can now see what the numbers are made of, and can also see that the assistive figure is an estimate rather than an observation.
The AI advantage Olakai claims is normalization, not a model. Its differentiation is reading every vendor's usage and billing data into one comparable view, with Kai answering questions across it and showing which sources were queried and which calculations ran. No proprietary training corpus, licensed dataset or cross-customer learning loop is claimed in the reviewed sources, so the AI in the product serves analysis and presentation.
The public developer surface is new and modest. A TypeScript library published under an MIT licence, a Python library and a command-line tool ship through public package registries, and a documentation site carries a REST API specification and a KPI formula reference. Those libraries cover getting activity into Olakai. The measurement engine is not open to inspection and no third party has evaluated it in the reviewed sources, so the return figures a buyer would most want to check rest on Olakai's account of its own method.
Olakai runs a self-serve motion in front of an enterprise sale. Starter is free for up to four seats with no credit card, the two paid products carry published per-seat prices, and a work-email link opens a live environment preloaded with realistic data so an evaluator can click around before talking to anyone. For a young vendor selling measurement, showing the dashboards on realistic data before procurement starts answers the credibility problem directly.
The partner program is the year's substantive change in distribution. Olakai names two founding partners with executives quoted by name, the consultancy AI Aspire through managing director Kirsty Tan and the workforce-safety vendor SolusGuard through chief executive Serese Selanders, and it publishes three partner tracks with referral fees, deployment margins, certification training and co-branded reporting. AI Aspire is disclosed on the same page as AI Fund backed, and AI Fund backs Olakai, so one of the two named references sits inside the investor's network.
Founder-led selling still carries the motion. Casanova fronts the press the company has, a co-founder holds the chief revenue officer title, and no quota-carrying sales organization is visible in the reviewed sources. With no named customer in public evidence, the partner channel is the route by which references could arrive from outside its investor's network.
Olakai has put its prices in public, which is a change a buyer can act on. Starter is free forever for up to four seats and one product edition, Olakai Assistive lists at five dollars a month an employee, Olakai Agentic at twenty-five a month a developer, and Enterprise is quoted with volume and multi-year terms. A comparison table sets out which capabilities each tier carries, down to the seat cap and the on-premises option.
The two units of charge fit the two buyers. Pricing the workforce product per employee ties it to the population being governed, and pricing the coding product per developer ties it to the population burning tokens, so neither line rides the volatility of AI spend itself. That also makes Olakai one more per-seat license inside a stack it audits for idle licenses, a comparison its own product invites.
What a heavy Kai user costs Olakai stays outside the price list. The trust page names Anthropic, OpenAI, Google and Mistral as providers that process data through API calls, and no page in the reviewed sources states which provider answers a Kai query, whether usage limits apply, or what fair-use terms attach to the per-seat price.
Olakai delivers as software with integration-first onboarding. The integrations page says a stack connects by dropping in provider admin API keys and pointing the platform at a GitHub or Bitbucket organization, with data flowing within minutes and no SDK rollout or per-tool instrumentation. The trust page details what runs underneath: containerized applications on AWS in the us-east-1 region, PostgreSQL in a private subnet, and encrypted storage.
The browser extension is the operationally heavy exception. Discovery of unapproved tools and prompt-level controls depend on deploying and maintaining an extension across the employee fleet, which is endpoint management work the minutes-to-connect claim does not cover, and coverage stops wherever the extension does not run. Direct SDK and API calls plus Zapier and n8n hooks extend capture to sources the extension and the admin APIs miss.
Deployment choice is the year's other change. The pricing page states that Olakai deploys inside the customer's own cloud by default so data does not leave the customer's control, and the Enterprise tier offers private cloud, on-premises or managed hosting with zero Olakai access to customer data. A residency-bound buyer that the single-region description would have stopped now has a path.
Olakai has closed the assurance gap its own trust page used to advertise. The trust page states that a SOC 2 Type II examination is complete for a period running from March to May 2026 against the security criteria, with the report available under a non-disclosure agreement, and it documents periodic independent penetration testing by outside security firms, named infrastructure and AI subprocessors, role-based access control, and multi-tenant isolation enforced per query.
What remains undone is narrower than before. Olakai holds no ISO 27001 or equivalent certification in the reviewed sources, the completed examination covers the security criteria alone rather than availability or confidentiality, and the report is available only under agreement, so a buyer verifies it in procurement rather than on the page.
The product concentrates exactly the data its own marketing warns about. Olakai reads prompts to find sensitive content, so it holds the material it tells buyers to protect, and it names Anthropic, OpenAI, Google, Mistral and Perplexity among the providers that process data through API calls with no persistent storage at the provider. A prompt privacy mode requiring explicit authorization before a non-administrator can read prompt content, with every access attempt logged, is the control Olakai offers against that concentration, and an enterprise buyer will still test it.
Olakai calls itself a platform and the architecture partly earns the word. Three measurement modules feed one data model that Kai reasons over, so each new source of activity makes the conversational layer more useful, and the platform page states that both products run on the same data foundation with one set of controls.
The ecosystem around it still runs one way. Olakai consumes data from many vendors through admin APIs, version control and a browser extension, and it now publishes a REST API and client libraries so a customer can send its own activity in. Nothing in the reviewed sources shows a third party building a product on Olakai, and no marketplace listing appears. The Microsoft relationship is the one named alliance, and it doubles as a dependency on a vendor with its own dashboard ambitions.
Becoming the system of record for AI decisions is the platform claim that would matter. Retained policy-acceptance records, budget definitions and return baselines are the assets that could make Olakai the place where an enterprise decides which AI to keep, cut or block. Olakai claims that position and the reviewed sources carry no customer or third party confirming it.
The founder is a commercial operator rather than a domain insider. AI Fund's article records Xavier Casanova as chief executive of NASDAQ-listed Presto, founder of Liveclicker, sold to Campaign Monitor in 2018, and founder of Fireclick, sold to Digital River in 2004, and credits him with five patents in video and predictive technology. HP Tech Ventures counts Olakai as his sixth venture since he started Fireclick as a Stanford student. Selling measurement to enterprises sits inside the analytics and marketing-technology history the cited record describes, a restaurant automation company and an email personalization platform, and that record evidences no comparable background in selling governance to a security buyer.
The bench under him stays thin in public. Olakai's company page names Walt Mann as co-founder and chief technology officer and Paul Brzozowski as co-founder and chief revenue officer, and the reviewed sources publish no background for either. The newsroom announces no leadership hire, and the reviewed sources establish no headcount.
The backing on the record is affiliated rather than commercial. AI Fund lists Olakai in its portfolio, HP Tech Ventures records AI Fund as the backer, the company page names Dean Sysman as a board member, and the partner page discloses AI Fund behind one of the two named partners. Those relationships supply introductions and validation from parties with a stake in the outcome, and the cited record carries no arms-length customer alongside them.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Olakai: homepage | official | 2026-08-23 |
| f2 | Crunchbase profile for Olakai | other | 2026-06-11 |
| f3 | Olakai: CISO use-case page | official | 2026-08-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Olakai: homepage “Most leaders can’t prove what their AI spend is returning. The subsidized era is over. AI coding agent costs surged 5x to 10x.” | official | 2026-08-23 |
| s2 | Olakai: platform overview page “Olakai includes two products: Olakai Agentic™ for proving the ROI of every AI coding tool and governing every autonomous agent workflow across every team and provider, and Olakai Assistive™ for proving adoption and ROI across copilots, chat/GenAI, and AI-powered SaaS.” | official | 2026-08-23 |
| s3 | Olakai: Olakai Agentic product page “A daily job projects month-end spend from your run-rate and fires an alert the moment a budget is breached or forecast to breach, before the invoice arrives.” | official | 2026-08-23 |
| s4 | Olakai: Olakai Assistive product page “Assistive IQ deploys via a browser extension and surfaces every AI tool your team is actually using — including the ones nobody approved.” | official | 2026-08-23 |
| s5 | Olakai: Agent IQ page “Agent IQ sits above every platform and framework, watches every agent execution, and ties it back to the business outcome you actually care about.” | official | 2026-08-23 |
| s6 | Olakai: Kai page “Click any number Kai gives you and you see the reasoning chain — which data sources were queried, which filters were applied, which calculations were run, and which assumptions were made.” | official | 2026-08-23 |
| s7 | Olakai: shadow AI detection page “Every detected AI tool is automatically scored for data sensitivity, compliance exposure, and security risk.” | official | 2026-08-23 |
| s8 | Olakai: CISO use-case page “The browser extension surfaces every AI tool an employee touches — even the ones nobody approved.” | official | 2026-08-23 |
| s9 | Olakai: AI governance page “Codify governance rules that map to your compliance requirements—EU AI Act, SOC 2, HIPAA, or internal policies.” | official | 2026-08-23 |
| s10 | Olakai: integrations page “Drop in your provider admin API keys and point Olakai at your GitHub or Bitbucket org. Data flows within minutes.” | official | 2026-08-23 |
| s11 | Olakai: trust and security page “SOC 2 Type II examination completed (report period March 1 – May 31, 2026; Trust Services Criteria: Security). Report available under NDA.” | official | 2026-08-23 |
| s12 | Olakai: company and manifesto page “So we built it. Olakai is a vendor-neutral analytics and governance platform that works across your entire AI stack.” | official | 2026-08-23 |
| s13 | Olakai: pricing page “Olakai measures, governs, and optimizes your AI investment across AI Coding Agents, Autonomous Agents and employee AI assistive apps. Deployed inside your own cloud by default, so your data never leaves your control.” | official | 2026-08-23 |
| s14 | Olakai: partner program page “AI Aspire, backed by Andrew Ng’s AI Fund, embeds Olakai’s measurement framework into enterprise AI strategy engagements, helping Fortune 500 clients prove AI ROI.” | official | 2026-08-23 |
| s15 | Olakai: terms of service “These Terms shall be governed and construed in accordance with the laws of the State of California, USA, without regard to its conflict of law provisions.” | official | 2026-08-23 |
| s16 | Olakai documentation: developer surface index “| TypeScript SDK | 2.6.0 | @olakai/sdk | `npm install @olakai/sdk` |” | official | 2026-08-23 |
| s17 | Olakai documentation: how Olakai measures AI ROI “Olakai analyzes each AI-assisted interaction and estimates how many minutes of human work it likely saved.” | official | 2026-08-23 |
| s18 | Olakai documentation: REST API reference “The Olakai REST API enables you to build custom clients for submitting AI activity reports directly to the platform.” | official | 2026-08-23 |
| s19 | GitHub: olakai-ai/olakai-sdk-typescript repository “A TypeScript SDK for tracking AI interactions with simple event-based API. Monitor your AI agents, applications, track usage patterns, and enforce content policies with just a few lines of code.” | other | 2026-08-23 |
| s20 | AI Fund: Olakai portfolio page “Co-founded by Xavier Casanova, Olakai gives CIOs, CFOs, and CISOs unified visibility into AI usage, performance, cost, and risk across all vendors.” | other | 2026-08-23 |
| s21 | AI Fund: Olakai, Empowering Enterprises to Safely Manage Their AI Tools (August 1, 2025) “Previously, he was CEO of Presto (NASDAQ: PRST), a restaurant automation company, and founded Liveclicker, an email personalization platform that was acquired by Campaign Monitor in 2018. He also founded Fireclick, which was acquired by Digital River in 2004.” | press | 2026-08-23 |
| s22 | HP Tech Ventures: How Olakai Is Bringing ROI Discipline to Enterprise AI (February 4, 2026) “But Olakai marks his sixth venture since starting Fireclick as a Stanford student.” | press | 2026-08-23 |
| s23 | F4: Olakai startup profile “Olakai is an enterprise AI analytics platform that focuses on measurement, governance, cost control, and security across AI tools” | other | 2026-08-23 |
| s24 | SolusGuard: homepage “Easy-to-use lone worker safety solutions that protect your team and ensure compliance - so you can lead with confidence.” | other | 2026-08-23 |
| s25 | Olakai trust-surface probe 2026-08-23: DNS and HTTPS probe of trust.olakai.ai, security.olakai.ai and a random control subdomain, plus the published trust page | official | 2026-08-23 |
| s26 | DX: homepage “Measure utilization, impact, and ROI of AI-assisted engineering in your organization.” | other | 2026-08-23 |
| s27 | Singulr AI: homepage “The Enterprise AI and Agentic Control Plane that closes the gap between AI policy and runtime reality.” | other | 2026-08-23 |
| s28 | Harmonic Security: homepage “Real-time visibility and control across the browser and desktop” | other | 2026-08-23 |
| s29 | WitnessAI: homepage “Uncover shadow AI usage, catalog your complete AI inventory—applications, MCP servers, and agents—and monitor real-time interactions across your organization.” | other | 2026-08-23 |
| s30 | Credo AI: homepage “Credo AI Named a Leader in the Forrester Wave™: AI Governance Solutions, Q3 2025” | other | 2026-08-23 |
| s31 | Zenity: homepage “Zenity Raises $125 Million to Secure the Era of 1 Billion AI Agents” | other | 2026-08-23 |
| s32 | Olakai: newsroom page “Coming soon. Industry updates and Olakai announcements.” | official | 2026-08-23 |
| s33 | Olakai research-site probe 2026-08-23: unauthenticated HTTPS fetch of shadowaimap.com returned HTTP 200 with no sign-in | other | 2026-08-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Olakai: homepage “Most leaders can’t prove what their AI spend is returning. The subsidized era is over. AI coding agent costs surged 5x to 10x.” | official | 2026-08-23 |
| s2 | Olakai: platform overview page “Olakai includes two products: Olakai Agentic™ for proving the ROI of every AI coding tool and governing every autonomous agent workflow across every team and provider, and Olakai Assistive™ for proving adoption and ROI across copilots, chat/GenAI, and AI-powered SaaS.” | official | 2026-08-23 |
| s3 | Olakai: Olakai Agentic product page “A daily job projects month-end spend from your run-rate and fires an alert the moment a budget is breached or forecast to breach, before the invoice arrives.” | official | 2026-08-23 |
| s4 | Olakai: Olakai Assistive product page “Assistive IQ deploys via a browser extension and surfaces every AI tool your team is actually using — including the ones nobody approved.” | official | 2026-08-23 |
| s5 | Olakai: Agent IQ page “Agent IQ sits above every platform and framework, watches every agent execution, and ties it back to the business outcome you actually care about.” | official | 2026-08-23 |
| s6 | Olakai: Kai page “Click any number Kai gives you and you see the reasoning chain — which data sources were queried, which filters were applied, which calculations were run, and which assumptions were made.” | official | 2026-08-23 |
| s7 | Olakai: shadow AI detection page “Every detected AI tool is automatically scored for data sensitivity, compliance exposure, and security risk.” | official | 2026-08-23 |
| s8 | Olakai: CISO use-case page “The browser extension surfaces every AI tool an employee touches — even the ones nobody approved.” | official | 2026-08-23 |
| s9 | Olakai: AI governance page “Codify governance rules that map to your compliance requirements—EU AI Act, SOC 2, HIPAA, or internal policies.” | official | 2026-08-23 |
| s10 | Olakai: integrations page “Drop in your provider admin API keys and point Olakai at your GitHub or Bitbucket org. Data flows within minutes.” | official | 2026-08-23 |
| s11 | Olakai: trust and security page “SOC 2 Type II examination completed (report period March 1 – May 31, 2026; Trust Services Criteria: Security). Report available under NDA.” | official | 2026-08-23 |
| s12 | Olakai: company and manifesto page “So we built it. Olakai is a vendor-neutral analytics and governance platform that works across your entire AI stack.” | official | 2026-08-23 |
| s13 | Olakai: pricing page “Olakai measures, governs, and optimizes your AI investment across AI Coding Agents, Autonomous Agents and employee AI assistive apps. Deployed inside your own cloud by default, so your data never leaves your control.” | official | 2026-08-23 |
| s14 | Olakai: partner program page “AI Aspire, backed by Andrew Ng’s AI Fund, embeds Olakai’s measurement framework into enterprise AI strategy engagements, helping Fortune 500 clients prove AI ROI.” | official | 2026-08-23 |
| s15 | Olakai: terms of service “These Terms shall be governed and construed in accordance with the laws of the State of California, USA, without regard to its conflict of law provisions.” | official | 2026-08-23 |
| s16 | Olakai documentation: developer surface index “| TypeScript SDK | 2.6.0 | @olakai/sdk | `npm install @olakai/sdk` |” | official | 2026-08-23 |
| s17 | Olakai documentation: how Olakai measures AI ROI “Olakai analyzes each AI-assisted interaction and estimates how many minutes of human work it likely saved.” | official | 2026-08-23 |
| s18 | Olakai documentation: REST API reference “The Olakai REST API enables you to build custom clients for submitting AI activity reports directly to the platform.” | official | 2026-08-23 |
| s19 | GitHub: olakai-ai/olakai-sdk-typescript repository “A TypeScript SDK for tracking AI interactions with simple event-based API. Monitor your AI agents, applications, track usage patterns, and enforce content policies with just a few lines of code.” | other | 2026-08-23 |
| s20 | AI Fund: Olakai portfolio page “Co-founded by Xavier Casanova, Olakai gives CIOs, CFOs, and CISOs unified visibility into AI usage, performance, cost, and risk across all vendors.” | other | 2026-08-23 |
| s21 | AI Fund: Olakai, Empowering Enterprises to Safely Manage Their AI Tools (August 1, 2025) “Previously, he was CEO of Presto (NASDAQ: PRST), a restaurant automation company, and founded Liveclicker, an email personalization platform that was acquired by Campaign Monitor in 2018. He also founded Fireclick, which was acquired by Digital River in 2004.” | press | 2026-08-23 |
| s22 | HP Tech Ventures: How Olakai Is Bringing ROI Discipline to Enterprise AI (February 4, 2026) “But Olakai marks his sixth venture since starting Fireclick as a Stanford student.” | press | 2026-08-23 |
| s23 | F4: Olakai startup profile “Olakai is an enterprise AI analytics platform that focuses on measurement, governance, cost control, and security across AI tools” | other | 2026-08-23 |
| s24 | SolusGuard: homepage “Easy-to-use lone worker safety solutions that protect your team and ensure compliance - so you can lead with confidence.” | other | 2026-08-23 |
| s25 | Olakai trust-surface probe 2026-08-23: DNS and HTTPS probe of trust.olakai.ai, security.olakai.ai and a random control subdomain, plus the published trust page | official | 2026-08-23 |
| s26 | DX: homepage “Measure utilization, impact, and ROI of AI-assisted engineering in your organization.” | other | 2026-08-23 |
| s27 | Singulr AI: homepage “The Enterprise AI and Agentic Control Plane that closes the gap between AI policy and runtime reality.” | other | 2026-08-23 |
| s28 | Harmonic Security: homepage “Real-time visibility and control across the browser and desktop” | other | 2026-08-23 |
| s29 | WitnessAI: homepage “Uncover shadow AI usage, catalog your complete AI inventory—applications, MCP servers, and agents—and monitor real-time interactions across your organization.” | other | 2026-08-23 |
| s30 | Credo AI: homepage “Credo AI Named a Leader in the Forrester Wave™: AI Governance Solutions, Q3 2025” | other | 2026-08-23 |
| s31 | Zenity: homepage “Zenity Raises $125 Million to Secure the Era of 1 Billion AI Agents” | other | 2026-08-23 |
| s32 | Olakai: newsroom page “Coming soon. Industry updates and Olakai announcements.” | official | 2026-08-23 |
| s33 | Olakai research-site probe 2026-08-23: unauthenticated HTTPS fetch of shadowaimap.com returned HTTP 200 with no sign-in | other | 2026-08-23 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.