Vorlon

• SaaS-security, DLP, and identity platforms could add data-in-motion monitoring as a feature, and Palo Alto Networks, which acquired the founders' former employer Demisto, sells to the same buyers.
• Vorlon's named customer references are vendor-published with no independently reported deployment, so actual traction for the agentic-ecosystem framing could be thinner than the platform messaging implies.
• Vorlon has repositioned twice in two years, and a third pivot or a stalled raise after the April 2024 Series A would signal it has not found a durable foothold.
• Emerging agent-identity and gateway standards could let cloud and identity providers govern agent data flows natively, shrinking the standalone need Vorlon sells against.

Vorlon targets the data that moves between applications, integrations, and AI agents rather than the access event at the perimeter. The company frames the exposure around third-party data flow: CTech reports that app-to-app communication now represents over 80% of internet traffic, a figure Vorlon's own press release credits to Akamai, and Vorlon argues that the APIs and integrations carrying that traffic often grant over-permissive access to sensitive data with no monitoring of what actually moves.

The buyer is the CISO and the security team, and the pitch lands on a real gap. The company positions legacy DLP as blind to data in motion between SaaS apps, since endpoint and network tools watch the edges rather than the flows. As enterprises wire AI agents into SaaS and homegrown systems, that gap widens, because agents move data at machine speed across boundaries the older tools never instrumented.

The problem is well defined, and the headline statistic is Akamai's rather than Vorlon's own, though buyers meet it in the company's press release and CTech's funding coverage rather than in independent research. What the public record does not yet show is how many buyers are funding a dedicated line for it rather than expecting their existing SaaS-security or identity vendor to cover it. [s7, s17, s4, s1]

The Vorlon platform centers on watching and governing data as it moves. Its AI Agent Runtime Security combines blocking, data masking in transit, and read-only enforcement, and the company says any cloud, SaaS, or homegrown system with an API or MCP server becomes a governed endpoint in minutes. Detection rests on baselining data and identity activity and flagging anomalies with UEBA, and response includes revoking or rotating risky tokens, API keys, and service accounts.

Two pieces give the product specificity. DataMatrix, which Vorlon describes as a patented simulation engine that maps agents, integrations, and data in motion, is the underlying technology. The AI Agent Flight Recorder and Action Center, launched in 2026, pairs an immutable audit trail of agent actions with a coordinated response path, which extends the platform from detection into forensics and remediation.

The capability claims are concrete, but the supporting evidence is almost entirely the company's own pages. There is no public documentation portal, open-source code, or third-party technical evaluation to validate the mechanics independently, which keeps the depth at adequate rather than strong. [s2, s4, s5, s6]

Vorlon spans several established categories rather than occupying a clean one of its own. Its data-in-motion claim overlaps SaaS-security posture management, data-loss prevention, and non-human-identity tooling, each of which is already sold by vendors in the buyer's stack. Identity peers such as Token Security, Oasis Security, and Entro Security approach the adjacent problem from the credential and machine-identity angle, while Vorlon approaches it from the data-flow angle.

The differentiation is the data layer. Vorlon argues that anchoring detection to sensitive-data movement, rather than to access or identity events, catches exposures the others miss. That is a defensible foothold if buyers accept that the data flow is the right control point, and a weakness if they treat it as a feature their identity or SaaS-security platform should absorb.

The sharpest competitive pressure comes from the platforms. Palo Alto Networks, which acquired Demisto, the founders' former employer, is one of the large platform vendors already selling into the same security buyers, and a move by any of them to monitor data in motion natively would compress Vorlon's standalone space. [s4, s8, s9]

The go-to-market evidence is the thinnest part of Vorlon's public record. The company has raised $15.7 million in total, led by Accel across a 2023 seed and an April 2024 Series A, with Shield Capital and a roster of Demisto-founder investors joining. That backing is a genuine signal, since the investors worked with Vorlon's founders before the Palo Alto acquisition and chose to follow them again.

Named customers do exist, but the proof is vendor-controlled. The Vorlon site names CarGurus, ThoughtSpot, OPENLANE, and Dutchie as customers and carries testimonials attributed to Anthony Lee-Masis (CISO and VP of IT, ThoughtSpot), Ran Landau (CTO, Splitit), and Eric Richard (SVP Engineering, Dutchie), plus a Splitit customer story link. What the public record still lacks is independent validation of that proof. The press coverage that exists reports the 2024 funding round under a third-party API security framing rather than the agentic-ecosystem pitch, and no analyst report or independent press details a deployment outcome at any named account.

The result is a company with credible financial backing and on-site customer references but no externally reported traction for its current positioning, which is why the traction score stays low despite the named logos and the strong investor signal. [s11, s12, s10]

The team is Vorlon's strongest asset. Co-founders Amir Khayat and Amichay Spivak are veterans of Demisto, the security orchestration, automation, and response platform that Palo Alto Networks acquired in 2019. CTech reports that both worked at Demisto and then at Palo Alto Networks after the acquisition, which Pulse 2.0 puts at $560 million, and Demisto co-founders who worked closely with the pair there, including Slavik Markovich and Rishi Bhargava, invested in Vorlon.

Senior experience through a verifiable exit in the adjacent incident-response domain places Vorlon ahead of identity peers whose founders show no comparable history. The founders are working a problem one step removed from the response automation they helped ship, which lends credibility to the platform's forensics-and-response direction.

The caution is that pedigree predicts execution capacity, not market fit for the new thesis. The team's history explains why Accel funded the company twice, but it does not by itself confirm that the data-in-motion category will support a standalone business. [s3, s18, s9]

Vorlon positions trust and compliance as a core part of the value, not an afterthought. The platform advertises continuous compliance posture monitoring across global frameworks, and the Flight Recorder is pitched as an immutable, audit-defensible record of every agent action and data movement, which speaks directly to the regulatory review that enterprise buyers face.

The privacy-preserving design is a notable detail: Vorlon says it classifies sensitive data without content inspection, which lowers the trust barrier for security teams wary of a tool that reads the data it watches. That choice fits a buyer who needs visibility into data flows without handing a vendor the contents.

Vorlon does carry a real attestation. The homepage footer displays a SOC 2 Type II badge, an AICPA SOC seal in an image named Certification Content Container.png labeled “SOC 2 Type II Certified,” and the Vorlon Trust page states the company holds a SOC 2 Type II report and offers a copy through a request form routed to the account manager. The badge sits beside award and membership marks (AWS Partner, CRN Stellar Startups, Latio AI Security Innovator, FS-ISAC Affiliate) that are recognition rather than security attestations. For an early-stage security vendor the SOC 2 Type II is table stakes, the price of entry to enterprise procurement rather than a differentiator.

What a buyer still cannot do is inspect the proof on demand. There is no self-serve trust portal, the report is gated behind a request form rather than downloadable, and neither trust.vorlon.io nor security.vorlon.io resolves while /trust-center and /compliance return 404. No ISO 27001, ISO 42001, HIPAA, PCI, FedRAMP, or HITRUST attestation is displayed, and no independently validated customer reference exists.

A July 2026 fetch of the homepage shows the same surfaces, with the SOC 2 seal rendering beside the award and membership marks, and the sole ISO-lettered element on the page is the CISO Report resource tile rather than a certification badge. The patented technology and the audit-trail framing are encouraging, but the readiness story depends on the SOC 2 attestation plus the company's own description, with the audit artifact available only through sales. [s4, s6, s2, s14, s15, s16, s19]

Add analyzed competitors to compare them side by side with Vorlon.

Vorlon sells to the enterprise CISO and security team buying for AI-agent rollouts that move sensitive data across SaaS, cloud, and homegrown systems. The about page frames the gap as the moment after access: existing tools govern who gets in, while Vorlon enforces what an agent does with data once inside. That positions the buyer as a security org already deploying agents and worried about the blast radius rather than a team evaluating whether to adopt AI at all.

The named segment skews to mid-market and large commercial technology companies. Vorlon lists CarGurus, ThoughtSpot, OPENLANE, and Dutchie as customers and references Fortune 500 logos, with testimonial leaders at Splitit and ThoughtSpot, a roster of recognizable software and marketplace brands rather than a regulated-only base. The original entry point was third-party API security, and the company has since reframed the same data-flow monitoring as data-centric SaaS security and now agentic ecosystem security.

The open question is whether the buyer funds a dedicated line for agent data-flow security or expects an existing SaaS-security or identity vendor to cover it. The repositioning across three labels in roughly two years suggests Vorlon is still locating the budget line its buyer will name without coaching.

Vorlon's claimed advantage is enforcing on data movement rather than on the access event. The platform combines blocking, data masking in transit, and read-only enforcement, and the company says any cloud, SaaS, or homegrown system with an API or MCP server becomes a governed endpoint in minutes. Detection baselines data and identity activity and flags anomalies with UEBA, and response can revoke or rotate risky tokens, API keys, and service accounts.

Two pieces give the product specificity. DataMatrix, which Vorlon describes as its patented intelligent simulation engine, maps agents, integrations, and data in motion as the underlying technology, and Vorlon Guardian is the real-time enforcement gateway that acts at the protocol layer before a transaction completes. The Flight Recorder and Action Center, which Vorlon announced on March 25, 2026, pair an audit trail of agent actions with a coordinated response path, extending the product from detection into forensics and remediation.

The capability claims are concrete, and the patent is a real engineering signal, but the supporting evidence is almost entirely Vorlon's own pages. No public documentation portal, open-source code, or third-party technical evaluation validates the mechanics, and the reasoning underneath rests on detection logic a funded rival could rebuild rather than a named non-public corpus.

Vorlon runs a demo-led enterprise motion with the named proof concentrated on its own site. Site calls to action in July 2026 route to a booked demo, a contact form, or a Talk to Sales prompt, and the site navigation carries an Instant Preview item, a posture that still fits a security product sold into procurement-gated enterprises. The funding is a seed round less than two years before the April 2024 Series A, both led by Accel, totaling $15.7 million, with Shield Capital and a roster of Demisto-founder investors joining.

Named traction exists but the proof is vendor-controlled. Vorlon names CarGurus, ThoughtSpot, OPENLANE, and Dutchie as customers and runs testimonials attributed to Anthony Lee-Masis at ThoughtSpot and Ran Landau at Splitit, plus a Splitit reference. What the public record lacks is independent validation: the outside coverage that exists reports the 2024 Series A under the older third-party API framing, and no analyst report or press details a deployment outcome at any named account.

The investor signal is the strongest indirect evidence. Accel led twice and the Demisto co-founders who worked with the team before the Palo Alto acquisition invested again, backing that lifts the traction read above the named logos alone. That confidence still outruns any externally reported revenue or customer-count figure in fetched sources.

Vorlon publishes no pricing in fetched sources, so the charged unit and list price stay private. The site directs buyers to a demo rather than a price page, the posture of a vendor pursuing large negotiated enterprise deals, which fits the CISO buyer and the procurement-gated motion. The absence withholds the budget-anchoring signal that some peers publish.

The charged unit is not stated, but the product's framing points at what Vorlon believes buyers pay for. The pitch centers on governed endpoints, agents, integrations, and the data flows between them, so the value meter is plausibly the breadth of the agentic ecosystem under coverage rather than seats or query volume. Confirming whether the meter is connected systems, data volume, or a flat platform fee would require a sales conversation.

The hidden-price posture holds on the current pages. The reviewed record shows no published price under the current agentic-ecosystem framing, which signals the intended path to purchase is the sales motion rather than a published list.

Public collateral presents Vorlon as connected software the customer operates, with no managed-service offering surfaced in fetched pages. The company says any system with an API or MCP server becomes a governed endpoint in minutes and that one connection to platforms like Claude Cowork governs every agent immediately, which describes a fast-integrating overlay the security team runs itself. There is no analyst-staffed service tier or accountability layer in the public offer.

The operational surface spans detection and enforcement on one path. Vorlon Guardian acts inline at the protocol layer to block, mask, and read-only-enforce before a transaction completes, while the Flight Recorder logs agent actions for forensics and the Action Center routes response. Vorlon describes classifying sensitive data without content inspection, a stated design choice that could lower the operational risk of granting a tool visibility into data flows.

Operational collateral remains thin beyond a customer support portal linked in the site navigation, with no published uptime, support SLA, or status page surfacing in fetched pages. The inline enforcement position raises the stakes of reliability, since a gateway that blocks transactions sits in the path of production agent traffic, yet the public record does not document how Vorlon manages that latency and availability risk.

Vorlon carries one real attestation gated behind sales. The homepage footer displays a SOC 2 Type II badge, and the Vorlon Trust page states the company holds a SOC 2 Type II report available through a request form routed to the account manager. For an early-stage security vendor handling privileged data flows, SOC 2 Type II eases enterprise procurement without differentiating the company.

The privacy-preserving design is the more distinctive trust signal. Vorlon classifies sensitive data, PII, PHI, PCI, credentials, and IP, and ties each flow to the identities and integrations involved without inspecting content, which lowers the barrier for a security team wary of a tool that reads the data it watches. The Flight Recorder's audit trail of agent actions speaks to the regulatory review enterprise buyers face.

What a buyer cannot do is inspect the proof on demand. There is no self-serve trust portal, the SOC 2 report is gated behind a request form rather than downloadable, and no ISO 27001, HIPAA, PCI, FedRAMP, or HITRUST attestation appears. A July 2026 probe found no trust-center host either, with neither trust.vorlon.io nor security.vorlon.io resolving, and a homepage fetch the same day shows the SOC 2 seal beside award and membership marks with no other certification badge. The audit artifact resolves only through sales, so the readiness story depends on the single attestation plus the company's own description.

Vorlon positions itself as the enforcement and visibility layer across the agentic ecosystem rather than a point tool. It connects to any cloud, SaaS, or homegrown system with an API or MCP server, governs platforms like Claude Cowork through a single connection, and maps agents, integrations, and data in motion through DataMatrix. The platform claim rests on covering the full integration layer that agents act across.

That breadth is an overlay over systems Vorlon does not own. Guardian enforces at the protocol layer over the data flows of the SaaS apps, clouds, and agent platforms it integrates with, so the platform depends on those source systems and the connectors into them. The value compounds with the breadth of an individual customer's ecosystem under coverage rather than across customers.

The exposure is that the platforms it overlays sit closer to the data. SaaS-security, identity, and DLP vendors already in the buyer's stack could extend to the same data-flow control point, and Palo Alto Networks is an adjacent platform vendor that acquired Demisto, where the founders previously worked.

Vorlon's credibility comes from a security team seasoned through a large exit. Co-founders Amir Khayat and Amichay Spivak are veterans of Demisto, the security orchestration, automation, and response platform that Palo Alto Networks acquired in 2019. CTech reports that both worked at Demisto and then at Palo Alto Networks after the acquisition, which Pulse 2.0 puts at $560 million, verifiable senior experience in the adjacent incident-response domain.

The investor bench reinforces the founder signal. Accel led both the seed and the Series A, and the Demisto co-founders Slavik Markovich, Rishi Bhargava, Dan Sarel, and Guy Rinat, who worked with the pair before the Palo Alto acquisition, invested again. That repeat backing across two rounds is itself evidence the people who knew the team's prior work chose to follow them.

The caution is that pedigree predicts execution capacity, not market fit for the new thesis. The founders are working a problem one step from the response automation they helped ship at Demisto, which lends credibility to the forensics-and-response direction, but the pedigree does not by itself confirm the data-in-motion category supports a standalone business.