All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Protect AI's clearest differentiated public asset is huntr, a bug bounty community of over 17,000 security researchers whose research feeds Recon's weekly-updated library of over 450 attacks, while Guardian separately scans every public model on Hugging Face continuously. That community, not the scanning software, is the asset closest to something a rival cannot copy by coding, since the products a customer configures and runs are what any funded competitor can rebuild. Palo Alto Networks bought Protect AI in 2025 for a price press put above five hundred million dollars and folded it into Prisma AIRS. The reported price marks what a platform vendor paid for that depth, not evidence that the depth was defensible.
| Description | Protect AI secures AI applications across the lifecycle, from model selection and testing to runtime, through its Guardian, Recon, and Layer products for model defense, red teaming, and runtime protection. | [f1] |
|---|---|---|
| Acquisition | Palo Alto Networks, announced 2025-04-28 , now Prisma AIRS | [f2] |
| Founded | 2022 | [f3] |
| HQ | Seattle, WA | [f4] |
| Funding | $108.5M total | [f4] |
| Latest funding | Series B, $60M, led by Evolution Equity Partners (2024) | [f4] |
| Deployment | SaaS, Self-hosted | [f5] |
| Product | What it does |
|---|---|
| Guardian | Scans more than 35 model formats to catch deserialization attacks, architectural backdoors, and runtime threats before a model reaches production. |
| Recon | Automated red teaming that tests and retests AI applications in hours against a library of more than 450 known attacks plus an AI agent scan. |
| Layer | Runtime protection that inspects AI traffic in production, giving security teams visibility into and control over live model behavior. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Protect AI secures the AI lifecycle with model scanning in Guardian, automated red teaming in Recon, and runtime protection in Layer. It is mapped to the AI Defense Matrix. [f6]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | The buyer (enterprise security teams running AI models and apps, named as Fortune 500 by GeekWire) is clear, but the corroboration is market funding rather than independently quantified pain, so it sits at present but unproven. [s10, s8, s1] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | Three documented products run on one platform: Guardian scans models for deserialization and backdoors across formats, Recon red teams AI apps with a 450-plus attack library, and Layer blocks threats at runtime. SiliconANGLE independently describes Recon testing AI workloads with a library of 450 simulated attacks and Layer filtering malicious prompts, the external validation point HiddenLayer also has. [s2, s3, s11] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 4/5 | Enterprise adoption of generative and agentic AI from 2023 onward created the attack surface Protect AI sold against, and the 2025 wave of platform vendors buying AI security companies is the clearest buyer-side signal that budget was forming. Protect AI's own reported sale above five hundred million dollars is part of that wave. [s8, s11, s9] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | Protect AI was founded by former engineering leaders at Amazon and Oracle per GeekWire, and sustained an in-domain research record through the huntr AI bug bounty, the open-source ModelScan, and a run of monthly vulnerability reports. That verifiable in-domain build and research record is real, short of the multi-year independent publication standing a 5 needs. [s10, s6, s7] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Palo Alto Networks acquiring the company and folding it into Prisma AIRS is strong independent traction, but the reported price above five hundred million is press-sourced and undisclosed and the Fortune 500 customers are unnamed, short of confirmed exceptional scale. [s9, s11, s10, s12] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Protect AI raised 108.5 million and shows visible shipping (three products plus ModelScan and huntr), but with no disclosed revenue or margin and a press-sourced exit price, efficiency stays unconfirmed, the honest default for a funded private startup. [s12, s11, s1] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 3/5 | Security for AI is a forming and consolidating category whose sub-slots (model scanning, red teaming, runtime) stay contested, so placement reads as present but unproven even though press named the slots without coaching. [s10, s11, s9] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | The capability was absorbable by a platform vendor, and the clearest proof is that Protect AI itself folded into Prisma AIRS, the outcome this dimension warns against. The huntr community and ModelScan adoption raised replication cost, and the reported price marks what an acquirer paid for that depth rather than evidence of a moat. [s9, s6, s11] |
Protect AI treated the AI models and applications an enterprise builds and runs as the asset under attack and sold a platform to secure them across their lifecycle. The company aimed at the security team responsible for AI that the business deploys, and GeekWire reports it served Fortune 500 customers across finance, healthcare, and government before the acquisition. Palo Alto Networks described the same buyers when it acquired the company, naming enterprises and government organizations building ecosystems of AI models, agents, infrastructure, and tools.
The threat is the new attack surface that AI adoption opened. Palo Alto Networks framed the pain as threat actors exploiting model manipulation, data poisoning, and prompt injection across the layers of an AI system, which grounds the problem in techniques security teams already track. The acquisition itself is evidence of demand, since a category leader paid a reported half a billion dollars or more for the capability.
Independent framing confirms the category was funded. Palo Alto Networks paid a reported half a billion dollars or more to buy Protect AI and stand up an AI security platform, a price that shows an incumbent putting real budget behind securing AI. [s10, s8, s11]
The Protect AI platform ran three products across the AI lifecycle rather than a single point feature. Guardian scanned models for deserialization flaws, architectural backdoors, and runtime threats across major model formats, with a Hugging Face integration for open-source models. Recon red teamed AI applications in hours using an attack library of more than 450 known attacks on AI systems. Layer blocked threats at runtime with visibility and control over AI in production.
A research engine fed the products. Protect AI ran huntr, which it billed as an early bug bounty platform built specifically for AI and machine learning, and published the open-source ModelScan, which supports multiple model formats including H5, Pickle, and SavedModel. Protect AI says Guardian draws on threat research from over 17,000 security researchers.
The public technical record was open to inspection. The open-source ModelScan, the huntr program, and a run of monthly vulnerability reports gave a buyer assessable evidence of capability beyond marketing pages, which is the validation point that lifts a vendor toward the top of this cluster, short of an independent third-party benchmark. [s2, s3, s5, s14]
Protect AI competed in AI-model security against specialists and the platforms that ended up buying the category. Independent specialists such as HiddenLayer covered overlapping model scanning and AI threat detection, while runtime AI defense was a crowded field of standalone vendors. The pattern around Protect AI was consolidation, and Palo Alto Networks paid a reported five hundred million dollars or more when it bought the company.
The company's differentiator was breadth backed by research. Protect AI paired model scanning, red teaming, and runtime defense on one platform with the huntr community and the open-source ModelScan, a combination the vendor cited as covering the AI lifecycle end to end.
The structural question the exit raises is whether buyers keep paying a specialist or take the capability bundled. Palo Alto Networks acquired Protect AI in 2025 and folded the products into Prisma AIRS, where its completion release calls the technology and team a cornerstone. Read against this exit, that suggests the capability can arrive inside a larger suite even when the specialist is strong in its group, though one deal is a reading rather than a settled rule. [s9, s8, s11]
Protect AI's strongest proof point is its exit. Palo Alto Networks acquired the company for a reported five hundred million dollars or more, a figure SiliconANGLE attributes to sources speaking to GeekWire, and made it a cornerstone of the Prisma AIRS platform. A strategic purchase at that scale by a major platform vendor is concrete third-party confirmation of traction.
Funding and customers reinforce the signal. SiliconANGLE reports Protect AI raised 108.5 million dollars from Salesforce Ventures, Samsung Electronics, and other backers before the deal, and GeekWire reports Fortune 500 customers across finance, healthcare, and government. The 60 million dollar Series B in 2024 came at a reported 400 million dollar valuation.
The limits of the public record are worth naming. Palo Alto Networks and CNBC both note the acquisition terms were undisclosed, so the price rests on press sourcing, and the Fortune 500 customer claim is reported rather than spoken by named buyers on the record, so the depth of paid deployment is not independently verifiable. [s9, s11, s12, s10]
Protect AI was founded by engineering leaders with large-company pedigree. GeekWire reports the founders were former engineering leaders at Amazon and Oracle, who built and led the company through its funding rounds and the acquisition. That background gave the team standing with enterprise buyers and the investors who backed it.
The research record is the team's clearest in-domain signal. Protect AI ran the huntr bug bounty for AI and machine learning, published the open-source ModelScan, and put out a run of monthly vulnerability reports on threats in the AI and ML space. Sustained research in the exact domain the products defend is the kind of record that lifts a team within this cluster.
What the public record does not show is the multi-year independent publication standing that separates the strongest teams. The huntr program and the vulnerability reports run through the company's own channels and product, so they evidence applied research depth rather than the independent academic or conference recognition that a top score would require. [s10, s6, s7]
Protect AI presented itself to enterprise buyers as a security vendor handling sensitive AI assets. The platform scanned an organization's models and inspected AI traffic at runtime, so a security review would ask for audit and data-handling evidence, and the footer Trust Page links a live SafeBase trust center at trust.protectai.com that publishes a SOC 2 Type 2 with a 2025 bridge letter, both gated behind a request-access step rather than open download. No ISO 27001 certification appears.
The acquisition reframes the trust question. Now that Protect AI sits inside Palo Alto Networks as part of Prisma AIRS, its assurance posture may benefit from a large public company's broader compliance program, which could raise the floor for a buyer who was wary of a standalone startup holding model and runtime data.
The open question is continuity of the independent assets. The huntr community and the open-source ModelScan were trust signals tied to Protect AI's standing as a specialist, and whether they keep their pull under a platform vendor's brand is the readiness item most likely to surface for the researchers and customers who relied on them. [s15, s1, s6, s9]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| HiddenLayer | competes with | Same-asset AI-model security specialist covering model scanning and AI threat detection that stayed independent through the 2025 consolidation Protect AI exited into. | |
| Lakera | competes with | Runtime AI security and red-teaming specialist acquired during the 2025 consolidation, overlapping Protect AI's Recon and Layer products. | |
| Prompt Security | competes with | Runtime LLM and agent guardrails vendor acquired during the 2025 consolidation, overlapping Protect AI's runtime protection. | |
| TrojAI | competes with | AI red teaming and runtime AI firewall vendor selling into the same enterprise AI buyer Protect AI served. | |
| Palo Alto Networks | adjacent | Acquired Protect AI in 2025 and folded its products into the Prisma AIRS platform, the destination the capability now lives in. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Protect AI.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
Protect AI's durable ground is narrow. The adversarial-AI engineering behind scanning dozens of model formats and inspecting AI traffic at runtime took years to build, and its regulated Fortune 500 buyers are won one deal at a time. Everything else a lasting moat needs is missing. Customers buy software they configure and run rather than a managed service that accepts accountability, its SOC 2 Type 2 is table-stakes any rival can earn, and the reviewed record identifies no regulation mandating the class and no non-public dataset behind the attack library Recon builds from community, first-party, and academic research. That depth is a head start rather than a durable lead, and the acquisition into Prisma AIRS validates strategic value without establishing a moat.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers buy a software suite for model scanning, red teaming, and runtime protection and configure and run it inside their own pipelines, a software product rather than a managed judgment or accountability outcome. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Wiring Guardian into AI pipelines and CI and instrumenting Layer into production AI applications, with tuned policies, creates meaningful friction to replace, while no data residency or network effect on the buyer earns the 3. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Protect AI publishes a SOC 2 Type 2 on its trust center, table-stakes assurance that eases procurement without blocking a substitute, and the reviewed record identifies no regulation that specifically mandates this product class. A determined rival could clear the same bars. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Scanning 35-plus model formats for deserialization and backdoors, automated adversarial red teaming, and runtime inspection of AI traffic is machine-learning and adversarial-AI engineering that takes years of specialized expertise. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | GeekWire reports Fortune 500 customers across finance, healthcare, and government, the regulated enterprise segment whose procurement and legal review sits between the vendor and replacement. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Guardian and Recon are pipeline and pre-deployment tools the customer runs and Layer is a runtime control instrumented through eBPF or an SDK, a platform with application features that an application keeps functioning without, short of inline infrastructure. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The huntr community feeds a vulnerability pipeline and a researcher network, a go-to-market and flywheel signal rather than a named non-public dataset, and Recon describes its attack library as built on community, first-party, and academic research, so the reviewed record names no dataset a rival could not assemble with effort. |
Protect AI treated the AI models and applications an enterprise builds and runs as the asset under attack and sold a suite to secure them from model selection through runtime. The buyer was the security team accountable for AI the business deploys, and GeekWire reports the company served Fortune 500 customers across finance, healthcare, and government before the acquisition.
The segment skewed to the regulated upper enterprise rather than a self-serve base. There was no published price list or free commercial tier on the reviewed pages, so the motion was a negotiated enterprise sale, with the open-source ModelScan and the huntr community widening reach among developers and researchers, though the reviewed record does not show that reach converting into paid deals.
The acquisition confirmed where the budget lived. GovCon Wire reports the combination is intended to address the evolving demands of AI's rapid growth across government, finance, healthcare, and manufacturing, a broader sweep of target industries than the finance, healthcare, and government base GeekWire attributes to Protect AI itself before the deal.
The Protect AI platform ran three products across the AI lifecycle rather than a single control point. Guardian scans more than 35 model formats, including PyTorch, TensorFlow, ONNX, Keras, Pickle, and Safetensors, detecting deserialization attacks, architectural backdoors, and runtime threats. Recon red teams AI applications in a few hours against an attack library of more than 450 known attacks on AI systems. Layer stops AI threats at runtime with visibility and control over AI in production.
A research engine fed the products and is the part hardest to copy by writing software. Guardian stays current by drawing on huntr, the AI and machine learning bug bounty community, and by continuously scanning the entirety of Hugging Face, and Recon adds weekly updates to its attack library from a community of more than 17,000 security researchers plus first-party and academic research. That live stream of fresh attacks keeps the scanners and the red-team library matched to what works now.
The open-source layer widened the funnel and the evidence base. Protect AI published ModelScan, an open-source scanner the company says was an early tool to support multiple model formats including H5, Pickle, and SavedModel, giving a buyer assessable proof of capability beyond marketing pages.
Protect AI's clearest go-to-market proof is a press-reported customer footprint rather than its exit. Palo Alto Networks, which its completion release calls the global cybersecurity leader, acquired the company in 2025 and made it a cornerstone of Prisma AIRS, and SiliconANGLE repeated GeekWire's report that sources put the deal above five hundred million dollars. That release attributes the purchase to Protect AI's technology and its team of experts, so the reported price is strategic validation of the capability rather than direct evidence of sales execution.
Funding and customers reinforce the signal without fully closing it. SiliconANGLE reports Protect AI raised 108.5 million dollars from Salesforce Ventures, Samsung Electronics, and other backers, and GeekWire reports Fortune 500 customers across finance, healthcare, and government. The huntr community and the open-source ModelScan widened Protect AI's reach among researchers and developers, though the reviewed record carries no referral or conversion evidence, so treating that reach as commercial demand generation is a plausible strategy rather than an evidenced outcome.
The verification limit is worth naming. The Fortune 500 customer claim is press-reported rather than spoken by named buyers on the record, and the acquisition terms were never officially disclosed, so the depth of paid deployment before the deal is not independently confirmable.
Protect AI did not publish a public rate card, and the pricing path on the site resolved to a demo request rather than a price page. That points to a negotiated enterprise motion, and the reviewed pages do not disclose the pricing metric, so whether the company priced by seat, by model, or by AI estate is not established.
The open-source entry point sat below the enterprise threshold. Protect AI described ModelScan as open source and free to use, and the huntr platform lists its bug bounty challenges publicly, so a team could adopt the scanner and take part in the research community without a sales conversation before stepping up to Guardian, Recon, or Layer.
The unpublished commercial pricing fits the regulated enterprise buyer but offers no forecastable benchmark to an outside reader. A buyer evaluating the suite against a bundled alternative from a platform vendor cannot compare a standalone Protect AI quote against the marginal cost of the same capability inside a larger security agreement.
Protect AI delivered as software the customer integrates into its own pipelines and operates, not as a managed outcome. Guardian integrates into existing AI pipelines, DevOps workflows, and repositories with distributed, on-premises, and local scanning, so the operational burden of running scans sits with the customer's build process.
Operations spanned build time and runtime in one platform. Guardian and Recon run before a model or application reaches production, scanning and stress-testing it, while Layer instruments running AI applications through eBPF or an SDK to inspect that traffic, so a security team runs both a pre-deployment check and a runtime control under one suite.
The runtime side raised the heavier operational question the reviewed pages left open. Protect AI described Layer as offering flexible deployment through eBPF or an SDK with high throughput and low latency rather than naming an inline enforcement mode, so a careful buyer would examine its latency, failure modes, and where inspection occurs, evidence the product pages described at a capability level rather than with a published operational benchmark.
Protect AI presented itself to enterprise buyers as a security vendor handling sensitive AI assets, since its products scan an organization's models and inspect AI traffic at runtime. The footer Trust Page links a live SafeBase trust center at trust.protectai.com that publishes a SOC 2 Type 2 with a 2025 bridge letter, both gated behind a request-access step rather than open download, alongside listed controls and subprocessors. No ISO 27001 certification appears.
The research record was the company's strongest public trust signal. The huntr bug bounty community, the open-source ModelScan, and a run of dated vulnerability reports, including an October 2024 report, gave a buyer independent evidence of in-domain rigor rather than vendor assertion alone.
The acquisition reframed the trust question rather than resolving it. As part of Palo Alto Networks, Protect AI now sits inside Prisma AIRS, so a buyer may evaluate it within the acquirer's broader vendor-risk process, though the cited sources do not detail what compliance coverage carried over, while the open question is whether the huntr researcher community keeps its pull under a large platform vendor's brand.
Protect AI was built to be the security layer across an enterprise's AI lifecycle rather than a point tool. The homepage frames Guardian, Recon, and Layer as one unified platform covering AI from model selection and testing through runtime, so the products share a common spine rather than standing alone.
Outward, the ecosystem reach ran through open source and a researcher community. The open-source ModelScan and the huntr bug bounty platform pulled outside contributors and researchers toward Protect AI, and the continuous scanning of Hugging Face tied the platform to where open-source models are actually shared.
Inward, that platform is now a component of a larger one. Palo Alto Networks folded the suite into Prisma AIRS as model scanning, AI red teaming, runtime protection, and agent security, which widens distribution but ties the roadmap to a platform vendor's priorities rather than to Protect AI's independent direction.
Protect AI was founded by engineering leaders with large-company pedigree. GeekWire reports the founders were former engineering leaders at Amazon and Oracle, a background that gave the team standing with enterprise buyers and the investors who backed it.
The research record is the team's clearest in-domain signal. The company ran the huntr bug bounty for AI and machine learning, published the open-source ModelScan, and put out dated vulnerability reports on threats in the AI and ML space, a sustained applied-research output in the exact domain the products defend.
The team carried into the acquirer rather than dispersing. GovCon Wire reported that the founders and employees were set to join Palo Alto Networks and that chief executive Ian Swanson would assume the vice president of product role for Prisma AIRS, and the completion release names Swanson in that role and Protect AI's team of experts as part of the integration, so the domain expertise the deal valued moved with the technology, though the team has no independent track record under the new platform name yet.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Protect AI: The Platform for AI Security | official | 2026-07-09 |
| f2 | Palo Alto Networks Announces Intent to Acquire Protect AI | official | 2026-06-14 |
| f3 | BankInfoSecurity on Palo Alto Networks Protect AI bid | press | 2026-06-14 |
| f4 | Business Wire: Protect AI Raises $60M in Series B Financing | press | 2026-06-14 |
| f5 | AI Defense Matrix Catalog entry | other | 2026-06-07 |
| f6 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Protect AI homepage (The Platform for AI Security) “Our suite of products (Guardian, Recon, and Layer) operate on a single, unified platform and secure AI applications from model selection and testing to runtime and beyond.” | official | 2026-06-14 |
| s2 | Protect AI Guardian (AI model scanning) “Guardian offers the widest and deepest set of model scanners on the market, identifying deserialization, architectural backdoors, and runtime threats across all major model formats.” | official | 2026-06-14 |
| s3 | Protect AI Recon (automated AI red teaming) “Recon systematically tests and retests AI apps in a few hours, across multiple threat vectors with an attack library of 450+ known attacks on AI systems” | official | 2026-06-14 |
| s4 | Protect AI Layer (runtime AI security) “Stop AI threats instantly at runtime with deep visibility and control.” | official | 2026-06-14 |
| s5 | Protect AI ModelScan (open-source model scanner) “It is the first model scanning tool to support multiple model formats, including H5, Pickle, and SavedModel formats.” | official | 2026-06-14 |
| s6 | huntr bug bounty platform for AI/ML (Protect AI) “huntr - The world's first bug bounty platform for AI/ML” | official | 2026-06-14 |
| s7 | Protect AI Threat Research (vulnerability reports) “Read our reports and findings on the most up to date threats in the AI/ML space.” | official | 2026-06-14 |
| s8 | Palo Alto Networks announces intent to acquire Protect AI (April 28, 2025) “Palo Alto Networks today announced that it has entered into a definitive agreement to acquire Protect AI, an innovative leader in securing the use of Artificial Intelligence (AI) and Machine Learning (ML) applications and models.” | official | 2026-06-14 |
| s9 | Palo Alto Networks completes acquisition of Protect AI (July 22, 2025) “The integration of Protect AI's forward-thinking technology and its team of experts will be a cornerstone of Palo Alto Networks' Prisma AIRS” | official | 2026-06-18 |
| s10 | GeekWire on the Protect AI acquisition (funding, customers, founders) “Founded by former engineering leaders at Amazon and Oracle, Protect AI serves Fortune 500 companies across finance, healthcare, and government sectors.” | press | 2026-06-18 |
| s11 | SiliconANGLE on the reported acquisition price and funding “sources told GeekWire that the deal is worth more than $500 million.” | press | 2026-06-18 |
| s12 | SiliconANGLE on Protect AI total funding and backers “Protect AI raised $108.5 million from Salesforce Ventures, Samsung Electronics Co. and other backers prior to the acquisition.” | press | 2026-06-18 |
| s13 | CNBC on the Protect AI acquisition (undisclosed sum) “Palo Alto Networks said it's acquiring Protect AI for an undisclosed sum.” | press | 2026-06-14 |
| s14 | Protect AI Guardian (threat research community) “Powered by threat research from over 17,000 security researchers, Guardian evolves faster than emerging AI threats.” | official | 2026-06-14 |
| s15 | Protect AI Trust Center (SOC 2 Type 2, linked from the footer Trust Page) “Compliance SOC 2 Type 2 Resources View all SOC 2 Protect AI SOC 2 Type 2” | official | 2026-06-16 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Protect AI homepage (The Platform for AI Security) “Our suite of products (Guardian, Recon, and Layer) operate on a single, unified platform and secure AI applications from model selection and testing to runtime and beyond.” | official | 2026-06-15 |
| s2 | Protect AI Guardian (model scanning across 35-plus formats) “Guardian scans 35+ different model formats ... detecting deserialization attacks, architectural backdoors, and runtime threats. Guardian stays ahead of new vulnerabilities by leveraging huntr, our security research community, and by continuously scanning the entirety of Hugging Face.” | official | 2026-06-15 |
| s3 | Protect AI Recon (automated AI red teaming, 450-plus attack library) “Recon leverages a community of over 17,000 security researchers, as well as first-party and academic research, to identify and prepare for new threat vectors. With weekly updates to our attack library, threat research is always driving the product” | official | 2026-06-15 |
| s4 | Protect AI Recon (attack library scope and speed) “Recon systematically tests and retests AI apps in a few hours, across multiple threat vectors with an attack library of 450+ known attacks on AI systems, an AI Agent scan, and the ability to bring your own custom library.” | official | 2026-06-15 |
| s5 | Protect AI Layer (runtime AI security) “Stop AI threats instantly at runtime with deep visibility and control.” | official | 2026-06-15 |
| s6 | Protect AI ModelScan (open-source model scanner) “It is the first model scanning tool to support multiple model formats, including H5, Pickle, and SavedModel formats.” | official | 2026-06-15 |
| s7 | huntr AI/ML bug bounty platform (now trusted by Palo Alto Networks) “huntr - The world's first bug bounty platform for AI/ML” | official | 2026-06-15 |
| s8 | Protect AI Threat Research (dated vulnerability reports) “Protect AI's October 2024 Vulnerability Report ... At Protect AI we are taking a proactive approach to identifying and addressing security risks in AI systems, to provide the world with critical intelligence on vulnerabilities and how to fix them.” | official | 2026-06-15 |
| s9 | Palo Alto Networks completes acquisition of Protect AI (Jul 22, 2025) “Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, today announced it has completed its acquisition of Protect AI ... will be a cornerstone of Palo Alto Networks' Prisma AIRS, the industry's most comprehensive AI security platform.” | official | 2026-06-18 |
| s10 | GeekWire on the Protect AI acquisition (founders, customers, funding) “Founded by former engineering leaders at Amazon and Oracle, Protect AI serves Fortune 500 companies across finance, healthcare, and government sectors.” | press | 2026-06-18 |
| s11 | SiliconANGLE on the reported acquisition price “Palo Alto Networks didn't disclose the acquisition terms. However, sources told GeekWire that the deal is worth more than $500 million.” | press | 2026-06-18 |
| s12 | GovCon Wire on Protect AI capabilities folded into Prisma AIRS and Ian Swanson role “Prisma AIRS will be capable of providing comprehensive protection, including model scanning, posture management, AI red teaming, runtime protection and AI agent security. Swanson will assume the role of vice president of product for Prisma AIRS.” | press | 2026-06-15 |
| s13 | SiliconANGLE on Protect AI total funding and backers “Protect AI raised $108.5 million from Salesforce Ventures, Samsung Electronics Co. and other backers prior to the acquisition.” | press | 2026-06-18 |
| s14 | Protect AI Trust Center (SOC 2 Type 2, linked from the footer Trust Page) “Compliance SOC 2 Type 2 Resources View all SOC 2 Protect AI SOC 2 Type 2” | official | 2026-06-16 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.