# Cyber Company Profiles: SPLX

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-15
Canonical: https://cybercompanyprofiles.com/companies/splx
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of SPLX, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [splx.ai](https://splx.ai/)
- Profile: https://cybercompanyprofiles.com/companies/splx
- Type: Security for AI, Application Security, Governance Risk Compliance
- Status: acquired
- Also known as: SplxAI, SPLXAI Inc.
- Market readiness: Established (28/40)
- Defensibility: Contested (13/21)
- Founded: 2023
- Funding: $9M total
- Last updated: 2026-07-15

## Executive Summary

SPLX, founded in Croatia in 2023, built software that tests, protects, and governs enterprise AI systems: it discovers AI models, workflows, and MCP connections into a single inventory called an AI bill of materials, runs automated attacks to surface weaknesses, and adds guardrails that block attacks in production. On about nine million dollars raised it reached named customers including KPMG, Infobip, and Glean, then Zscaler acquired it in November 2025 to add its AI asset discovery, red teaming, and governance to the Zero Trust Exchange, while SPLX still ships as a standalone platform. The fast acquisition is the strongest outcome signal in the reviewed record, though the undisclosed terms prevent assessing the financial outcome.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | SPLX is a security platform for AI systems that runs automated red teaming to find vulnerabilities, discovers AI models and MCP servers into an AI-BOM, and protects deployments from build to runtime. | [\[f1\]](#company-detail-sources) |
| Acquisition | Zscaler, announced 2025-11-03 | [\[f2\]](#company-detail-sources) |
| Founded | 2023 | [\[f3\]](#company-detail-sources) |
| HQ | Croatia | [\[f4\]](#company-detail-sources) |
| Funding | $9M total | [\[f5\]](#company-detail-sources) |
| Latest funding | $7M seed (March 2025), led by LAUNCHub Ventures | [\[f6\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| SPLX Platform | Tests, protects, and governs AI systems: discovers models, workflows, and MCP servers into an AI-BOM, runs automated red teaming, and applies runtime guardrails and remediation. |

## Matrix Coverage

Mapped to the [AI Defense Matrix](https://aidefensematrix.com) [\[f7\]](#company-detail-sources):

| Asset | Govern | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|---|
| AI Model |  | ✓ | ✓ | ✓ |  |  |
| AI Orchestration Tools |  | ✓ |  |  |  |  |

SPLX discovers AI models, workflows, and MCP servers into an AI-BOM, continuously red-teams AI systems for vulnerabilities, and applies runtime security and governance across the AI lifecycle. These capabilities are mapped to the AI Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (28/40)**

Analyzed 2026-07-09. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | SPLX names the enterprise security, engineering, and risk buyer and concrete failure modes, prompt injection, jailbreaks, and data leakage across text, images, and voice, and independent press corroborates the problem, but the pain stays category-generic and vendor-and-analyst-framed rather than independently quantified across buyer data points. \[[s2](#profile-analysis-sources), [s5](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Capability Depth | 4/5 | The platform pages detail AI-BOM discovery of models, workflows, and MCP servers, automated red teaming with more than five thousand attack simulations, runtime threat inspection, and remediation through hardened system prompts. An external validation point exists in an open-source tool SPLX released that maps dependencies in agentic AI workflows, reported by independent press, so the depth is multiply evidenced short of a third-party benchmark. \[[s3](#profile-analysis-sources), [s2](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Market Timing | 4/5 | Enterprise adoption of large language models and AI agents since 2023 is a dated enabler, and buyer-side demand shows in independently reported quarterly revenue growth of 127%, named enterprise customers, and a wave of security vendors buying AI-security startups that culminated in Zscaler's own purchase. Multiple demand signals clear the corroborated bar. \[[s4](#profile-analysis-sources), [s7](#profile-analysis-sources), [s2](#profile-analysis-sources)\] |
| Team Credibility | 4/5 | Co-founders Kristian Kamber and Ante Gojsalic built the company and sold it to a NASDAQ-listed security leader within about two and a half years, a completed in-domain exit, and SPLX published red-team research on frontier models. That verifiable build-and-exit record clears the score, below the category-defining industry-leadership tier. \[[s5](#profile-analysis-sources), [s6](#profile-analysis-sources), [s1](#profile-analysis-sources)\] |
| GTM Proof | 4/5 | Independent press names three enterprise reference customers, KPMG, Infobip, and Glean, alongside reported 127% quarterly revenue growth, and Zscaler's acquisition is consistent with real traction, though it does not independently verify customer depth or revenue. This rests on the line's own named customers, not the acquirer's reach, and sits above the thinner-traction same-asset peers. \[[s4](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | About nine million dollars raised across two rounds funded a shipping platform, named enterprise customers, and a completed acquisition, a raise broadly proportional to an early-stage motion, but with no disclosed revenue or margin and an undisclosed deal price, output per dollar stays unconfirmed. \[[s7](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Category Clarity | 3/5 | SPLX fits the emerging AI-security and AI red-teaming category, which is increasingly recognized but still nascent and split across overlapping labels, AI bill of materials, red teaming, runtime AI security, and AI governance, so a buyer still needs vendor explanation to place it in a budget line. \[[s3](#profile-analysis-sources), [s2](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | A continuously updated attack corpus and lifecycle workflow create some friction, and a platform vendor paid to acquire rather than build, but the capability proved absorbable in practice, Zscaler is integrating it into the Zero Trust Exchange while SPLX still ships standalone, so it sits at the middle rather than a structural moat. \[[s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |

### Business Risks

- Zscaler could retire the standalone SPLX product and brand as it integrates the technology into the Zero Trust Exchange, ending independent availability for existing SPLX customers.
- Zscaler's acquisition announcement flagged retention of SPLX employees as a risk, so departures of the founders or red-team researchers could slow the roadmap after integration.
- Model providers such as OpenAI and Anthropic, and platform vendors, could ship native AI red teaming and guardrails for the agents built on their platforms, compressing the standalone market SPLX served.
- The named customers KPMG, Infobip, and Glean and the 127% quarterly-growth figure trace to a single 2025 funding announcement, so a buyer checking paying-customer depth could find less independent confirmation than the traction implies.
- SPLX's attack-simulation library is a maintained catalog rather than a demonstrated cross-customer data flywheel, so a funded rival could rebuild comparable red-teaming coverage.

### Problem & Market

SPLX treats the AI systems an enterprise builds and adopts as the asset under attack. Its platform and the acquiring vendor's own account frame the problem as a fast-expanding attack surface of models, agents, workflows, code repositories, and Model Context Protocol servers that traditional security tools do not inspect, with named failure modes including prompt injection, jailbreaks, and data leakage across text, images, and voice.

The buyer is the enterprise security, engineering, and risk team standing up AI in production. SPLX positions the pain as spanning the whole lifecycle, which is the shift-left framing the acquirer repeated when it described securing AI investments from development through deployment.

Independent reporting places the problem beyond vendor marketing. Trade coverage of the seed round and the acquisition describes the company as addressing the untested attack surface of enterprise AI applications and agents, which corroborates that the problem is real even though the quantified scale of the pain stays framed by the vendor and analysts rather than measured across buyers. \[[s2](#profile-analysis-sources), [s5](#profile-analysis-sources), [s7](#profile-analysis-sources)\]

### Product Capabilities

SPLX sells one platform across the AI security lifecycle rather than a single control. It discovers models, AI workflows, MCP servers, and guardrails into a complete AI bill of materials, runs automated red teaming that stress-tests those systems, inspects runtime traffic, and generates hardened system prompts to remediate the risks its testing finds.

The red-teaming engine is the center of gravity. The acquirer's account credits more than five thousand purpose-built and domain-specific attack simulations spanning development to production, and SPLX's own research arm published evaluations of frontier models including GPT-5, Claude Opus 4.1, and Grok 4, which both exercises and extends the attack library.

Open-source output gives the capability claims an outside check. SPLX released a tool that maps dependencies in agentic AI workflows using static code analysis, which independent press highlighted as part of its toolkit. That public tooling, plus the detailed platform pages, is the evidence a technical buyer can inspect without a sales conversation. \[[s3](#profile-analysis-sources), [s2](#profile-analysis-sources), [s1](#profile-analysis-sources), [s4](#profile-analysis-sources)\]

### Competitive Positioning

SPLX competes as an end-to-end AI-security platform against rivals who each concentrate on one of its lines. Automated red-teaming specialists contest its testing engine, runtime-guardrail vendors contest its inline protection, and broader AI-security platforms pitch the same discovery-to-defense loop across models and agents.

Its visible differentiator was the connected path from discovery through red teaming to runtime remediation, sold as one platform a buyer would otherwise assemble from several vendors. The recurring public research on frontier models gave SPLX a red-team profile larger than its headcount, which functioned as both credibility and demand generation.

The risk is who owns the buyer. Model providers can test and guard the agents built on their own platforms, and platform vendors can bundle red teaming and guardrails into deals an enterprise already signs. The Zscaler acquisition is that exposure realized in the company's favor, a platform vendor bought the capability and made it part of its own suite. \[[s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s6](#profile-analysis-sources)\]

### Go-to-Market & Traction

SPLX's clearest traction is a set of named enterprise customers reported by independent press. Coverage of the seed round names KPMG, the telecommunications provider Infobip, and the generative AI search company Glean as users, and reports quarterly revenue growth of 127% since the platform launched in August 2024. Those names sit in independent reporting rather than only on the vendor's own pages.

The exit is consistent with the early traction. Zscaler acquired SPLX within about two and a half years of founding, which fits the customer names being real, though the deal price was not disclosed and does not verify paying-customer depth.

Depth behind the customer names stays undisclosed. The growth figure and the customer list trace to a single 2025 funding announcement, and the sources do not confirm paying-customer depth, contract size, or reference willingness, so the named traction is genuine but thinly corroborated beyond that announcement. \[[s4](#profile-analysis-sources), [s7](#profile-analysis-sources), [s6](#profile-analysis-sources)\]

### Team & Credibility

SPLX's founders paired offensive-security craft with a fast, completed exit. Co-founders Kristian Kamber, the chief executive, and Ante Gojsalic founded the company in Croatia in 2023 and sold it to Zscaler within about two and a half years, a completed in-domain acquisition that is the strongest public signal about the team.

The published research is the team's other durable signal. SPLX's researchers published red-team evaluations of frontier models, a body of public technical work rather than a single disclosure, which demonstrates the adversarial-AI expertise the commercial platform automates.

What the record does not show is a prior category-defining exit or sustained industry leadership before SPLX, which is the difference from the founders who earn the top mark. The build-and-sell outcome and the research record place the team above the plausible-background tier and level with the verifiable-build peers. \[[s5](#profile-analysis-sources), [s6](#profile-analysis-sources), [s1](#profile-analysis-sources)\]

### Trust Readiness

SPLX asks a buyer to let its software probe and inspect proprietary AI systems, so trust is load-bearing, and its strongest proof points are hands-on rather than documentary. The recurring public red-team research on named frontier models and the open-source workflow-analysis tool let a technical buyer judge the team's craft directly before committing.

Named enterprise adoption doubles as a trust signal. Independent reporting names KPMG, Infobip, and Glean as customers the company was onboarding, which signals to a prospect that security-conscious organizations engaged the product and lowers the perceived risk for the next buyer.

As an acquired company, SPLX's compliance and assurance posture now sits under Zscaler's program rather than standing alone. The reviewed sources document the product's capabilities and its enterprise users but not a standalone trust portal, so a procurement team would establish attestation and support terms through the acquirer rather than the former startup's own site. \[[s1](#profile-analysis-sources), [s4](#profile-analysis-sources), [s6](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Mindgard | competes with | Automated AI red-teaming specialist contesting the testing engine at the center of SPLX's platform. |
| Repello AI | competes with | Near-identical discover, test, and protect motion for enterprise AI, the closest same-asset competitor to SPLX. |
| Gray Swan AI | competes with | Adversarial red-teaming vendor whose crowdsourced attack arena competes on the same attack-corpus advantage SPLX built. |
| Virtue AI | competes with | AI red teaming plus runtime guardrails covering the same test-and-protect loop SPLX sells. |
| Lakera | adjacent | Runtime AI guardrail vendor, now part of Check Point, overlapping SPLX's inline protection while another platform absorbs it. |
| OpenAI | adjacent | Model provider that could ship native red teaming and guardrails for agents built on its platform, removing the third-party budget line. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (13/21)**

Band guidance: reinforce or reposition. Analyzed 2026-07-15. Scope: whole company.

SPLX's hardest part for a rival to reproduce was the product: an automated red-teamer that attacks AI systems across text, images, and voice, backed by a continuously updated library of over five thousand attack simulations and a separate public frontier-model research record. That corpus, feeding red teaming, prompt hardening, and remediation, is years of specialized work. The rest a funded rival could match: customers run the software themselves with no vendor accountability, the compliance features are product functions rather than a certification a rival cannot earn, and the guardrails are a swappable layer. The acquisition moved the durability question inside a bigger platform: Zscaler bought the capability and folded it in as one layer that a broad suite now surrounds.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | SPLX shipped software a customer's security team runs itself across discovery, red teaming, runtime protection, and remediation, with no managed service or analyst accountability for the safety outcome in the reviewed sources. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources)\] |
| Switching Cost | 2/3 | The AI bill of materials becomes an inventory of record and the runtime guardrails sit in the live traffic path, so leaving means re-integrating and re-tuning, meaningful lock-in short of data residency or network effects. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | SPLX shipped governance and compliance-mapping features and displayed ISO 27001 and SOC 2 Type II attestations, procurement-enabling assurance a rival can also earn, and the cited record shows no authorization regime specific to AI red teaming that SPLX held, so compliance eased procurement at best. \[[s2](#deep-dive-sources), [s1](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Building an automated red-teamer that profiles and attacks models and agents across text, images, and voice under adversarial pressure, then turning those findings into hardened system prompts and targeted remediation, is specialized adversarial engineering a rival could not assemble quickly. \[[s2](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | The named buyers are large enterprises, KPMG, Infobip, and Glean, reported in a single funding announcement rather than a broad public roster, a real but thin named-reference footing short of the named regulated roster a 3 needs. \[[s4](#deep-dive-sources), [s7](#deep-dive-sources)\] |
| Layer | 2/3 | The runtime guardrails are an inline control on live AI traffic, while the red teaming and AI-BOM sit out of the production path, a control layer beside the workload that a buyer can swap rather than infrastructure other software cannot replace. \[[s2](#deep-dive-sources), [s1](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 2/3 | SPLX maintained a continuously updated corpus of more than five thousand attack simulations that its red teaming consumed, with its public frontier-model research a separate demonstration of the same craft, a non-public adversarial corpus below a level-3 audited or network-effect corpus since it is a maintained catalog rather than a demonstrated cross-customer flywheel. \[[s2](#deep-dive-sources), [s3](#deep-dive-sources), [s5](#deep-dive-sources)\] |

### Strategic Market Segmentation

SPLX sold to the enterprise security, engineering, and risk team standing up AI in production, the owner accountable when a model, agent, or workflow is compromised. Its platform framed the target as the organization securing the whole AI lifecycle from development through deployment, a security-owner buyer rather than a developer or a line-of-business team.

The segment was broad by design, which was both the pitch and the exposure. SPLX spanned discovery, offensive testing, runtime protection, and governance in one platform, so it could enter through whichever pain a buyer felt first, at the price of defending an unusually broad claim for its stage at every edge of that span.

Named demand reached recognizable enterprises. Independent reporting places KPMG, the telecommunications provider Infobip, and the AI search company Glean as users, spanning professional services, telecommunications, and technology, which shows the platform addressed a serious enterprise buyer rather than a single vertical. \[[s4](#deep-dive-sources), [s3](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

The product line was unusually complete for the company's stage. SPLX discovered models, AI workflows, MCP servers, and guardrails into a complete AI bill of materials, ran automated red teaming across text, images, and voice, monitored and blocked live inputs and outputs of AI systems in production, and generated hardened system prompts to remediate what its testing found.

The durable advantage sat in the attack corpus. The acquirer credited more than five thousand purpose-built, domain-specific attack simulations, SPLX's research arm published evaluations of frontier models such as GPT-5, Claude Opus 4.1, and Grok 4, and its product materials say hardened system prompts and targeted remediation steps are generated from red-teaming insights. Runtime traffic inspection ships as a separate platform function, and the reviewed sources do not state that the runtime guardrails consume the attack corpus.

The verifiable footprint backs the claim that the team can build. SPLX released an open-source tool that maps dependencies in agentic AI workflows through static code analysis, and its model-security research is public and inspectable. The unverified piece is the corpus size itself, a vendor-stated count with no third-party audit or accuracy benchmark in the reviewed sources. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources), [s3](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

SPLX ran a demo-led enterprise motion with a research-and-open-source top of funnel. The platform routed to a book-a-demo call to action rather than self-serve signup, which fits a security-team buyer and a negotiated deal, and the recurring public red-team research plus the open-source tool gave a prospect proof of craft before any sales conversation.

The traction it disclosed was concrete but narrow. Independent reporting names KPMG, Infobip, and Glean as customers and reports 127% quarterly revenue growth since the August 2024 launch, and the company reached those milestones on about nine million dollars raised across two rounds.

The exit is consistent with that traction. Zscaler acquired SPLX within about two and a half years, though the deal price was undisclosed and the depth of the customer relationships was not detailed beyond the funding announcement. \[[s4](#deep-dive-sources), [s7](#deep-dive-sources), [s6](#deep-dive-sources)\]

### Pricing Model

SPLX published no pricing in the reviewed sources. The platform converted to a demo request, the standard posture of a vendor selling negotiated enterprise contracts to security teams, which withholds the budget-anchoring signal some peers publish.

The charged unit is not stated. A platform spanning discovery, red teaming, runtime protection, and governance could meter on AI assets discovered, attack runs, protected traffic, or a flat platform subscription, and none of these is disclosed. The open-source tool and the public research were free top-of-funnel rather than a priced tier.

The inferable belief is that buyers paid for coverage of an expanding AI attack surface across the lifecycle rather than for a feature count, given the test-protect-govern framing. Confirming the unit and whether testing and runtime were bundled would have required the sales conversation the demo-only posture signaled. \[[s1](#deep-dive-sources), [s3](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Product Delivery & Operations

The reviewed sources present SPLX as software the customer operates rather than a managed service. The AI-BOM, automated red teaming, runtime inspection, and remediation are functions a security team runs against its own AI systems, and nothing in the sources describes SPLX analysts running the testing or accepting accountability for the safety outcome on the customer's behalf.

The architecture was built to lower the operational lift. SPLX generated hardened system prompts and targeted remediation from its red-teaming insights without manual overhead, and the integrated loop was pitched as one platform spanning discovery, testing, remediation, and guardrails, so the customer did not stitch point products together.

Operational assurance now points toward the acquirer. The runtime guardrails sit in the live traffic path, where uptime and support terms matter, and given the acquisition and Zscaler's plan to integrate the guardrails into the Zero Trust Exchange, a buyer would increasingly evaluate those terms through the Zscaler relationship rather than the standalone startup, which a buyer would establish in a security review. \[[s2](#deep-dive-sources), [s1](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Earning Customers' Trust

SPLX asked a buyer to let its software probe and inspect proprietary AI systems, so trust was load-bearing, and its strongest proof points were hands-on. The recurring public red-team research on named frontier models and the open-source workflow-analysis tool let a technical buyer judge the team's craft directly.

Named enterprise adoption reinforced that signal. Independent reporting names KPMG, Infobip, and Glean as customers the company was onboarding, which signals to a prospect that security-conscious organizations engaged the product and lowers the risk for the next buyer better than a self-asserted claim would.

SPLX displays ISO 27001 and SOC 2 Type II badges on its homepage and platform pages and maintains a trust center naming both attestations with the underlying materials behind a request-access gate, all re-verified live on 2026-07-15. The reviewed sources do not confirm the attestations' post-acquisition scope, so a procurement team would validate coverage through the Zscaler relationship as well as the request flow. \[[s3](#deep-dive-sources), [s1](#deep-dive-sources), [s9](#deep-dive-sources), [s4](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

SPLX positioned itself as the platform that closes the loop across the AI security lifecycle rather than a point tool. It discovered AI assets into a bill of materials, tested them, protected them at runtime, and governed them, so the platform claim rested on owning the connection between offense and defense a buyer would otherwise integrate across several vendors.

The integration was the real differentiator. A customer assembling a red-teaming tool, a guardrail product, and an asset-discovery scanner from three vendors carries the integration burden, while SPLX argued its red-team findings fed remediation and prompt hardening within the same platform loop. The open-source workflow tool extended the ecosystem into agentic AI workflows.

The platform layer beneath SPLX is where the exposure lived, and the acquisition recast it. Rather than a model or cloud provider absorbing the capability natively, a zero-trust platform vendor bought SPLX and made it a dedicated AI-protection layer of its own exchange, so the independent platform became part of a larger one. \[[s1](#deep-dive-sources), [s7](#deep-dive-sources), [s3](#deep-dive-sources)\]

### Team & Execution Capability

SPLX's credibility rested on offensive-security craft and a fast, completed exit. Co-founders Kristian Kamber, the chief executive, and Ante Gojsalic founded the company in Croatia in 2023, and it was acquired by a NASDAQ-listed security leader within about two and a half years, a completed in-domain outcome.

The published research is the team's strongest ongoing signal. SPLX publishes red-team evaluations of frontier models including GPT-5, Claude Opus 4.1, and Grok 4, a body of public technical work that demonstrates the adversarial-AI expertise the commercial platform automates.

What the record does not show is a prior category-defining exit before SPLX or sustained standards-body leadership. The build-and-sell result and the research record demonstrate execution and adversarial-AI expertise that a buyer can inspect directly. \[[s5](#deep-dive-sources), [s6](#deep-dive-sources), [s3](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [SPLX: SPLX Platform](https://splx.ai/platform) | official | 2026-07-09 |
| f2 | [Zscaler: Zscaler Secures The Enterprise AI Lifecycle With Acquisition of Innovative AI Security Pioneer SPLX](https://www.zscaler.com/press/zscaler-secures-enterprise-ai-lifecycle-acquisition-innovative-ai-security-pioneer-splx) | official | 2026-07-06 |
| f3 | [CyberScoop: Zscaler adds more AI to its offerings with Splx acquisition](https://cyberscoop.com/zscaler-splx-acquistion/) | press | 2026-07-06 |
| f4 | [Vestbee: Croatian startup SplxAI closes $7M seed round led by LAUNCHub Ventures](https://www.vestbee.com/blog/articles/croatian-splx-ai-closes-7-m-seed-round) | press | 2026-07-06 |
| f5 | [SiliconANGLE: Zscaler acquires Splx to enhance AI app inspection and protection](https://siliconangle.com/2025/11/03/zscaler-acquires-splx-enhance-ai-app-inspection-protection/) | press | 2026-07-06 |
| f6 | [SiliconANGLE: SplxAI gets $7M to block prompt injection attacks on AI agents](https://siliconangle.com/2025/03/26/splxai-gets-7m-try-block-prompt-injection-attacks-ai-agents-automated-red-teaming/) | press | 2026-07-06 |
| f7 | [AI Defense Matrix Catalog mapping (aligned to catalog)](https://catalog.aidefensematrix.com/products/splx/) | other | 2026-07-06 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [SPLX homepage: unified platform to test, protect and govern AI, plus published model research](https://splx.ai/) “A unified platform to test, protect & govern AI at scale. Built by world-class AI red teamers for enterprise scalability. Research: GPT-5 Under Fire, Claude Opus 4.1 AI Security Evaluation, Grok 4 Security & Safety Assessment.” | official | 2026-07-06 |
| s2 | [Zscaler press: SPLX capabilities added to the Zero Trust Exchange as a dedicated AI-protection layer](https://www.zscaler.com/press/zscaler-secures-enterprise-ai-lifecycle-acquisition-innovative-ai-security-pioneer-splx) “Automated AI Red Teaming and Remediation: From development to production, with 5,000+ purpose-built and domain specific attack simulations to find risks and vulnerabilities, and offer remediation in real time.” | official | 2026-07-06 |
| s3 | [SPLX platform page: AI-BOM discovery of models, workflows, and MCP servers](https://splx.ai/platform) “Unify discovery of models, AI workflows, MCP servers, and guardrails into a complete AI-BOM to effectively manage your organization's AI security posture.” | official | 2026-07-06 |
| s4 | [SiliconANGLE: SplxAI seed round, revenue growth and named customers](https://siliconangle.com/2025/03/26/splxai-gets-7m-try-block-prompt-injection-attacks-ai-agents-automated-red-teaming/) “averaging revenue growth of 127% each quarter while onboarding customers including the professional services firm KPMG LLP, the Croatian telecommunications provider Infobip Ltd. and the generative AI search startup Glean Technologies Inc.” | press | 2026-07-06 |
| s5 | [Vestbee: SplxAI founded 2023 by Kristian Kamber and Ante Gojsalic](https://www.vestbee.com/blog/articles/croatian-splx-ai-closes-7-m-seed-round) “Founded in 2023 by Kristian Kamber and Ante Gojsalic, SplxAI develops an AI security platform designed to tackle the risks of AI and LLM technologies. It simulates complex attack scenarios across text, images, and voice to identify and mitigate potential threats.” | press | 2026-07-06 |
| s6 | [CyberScoop: Zscaler acquires SplxAI, terms undisclosed](https://cyberscoop.com/zscaler-splx-acquistion/) “Cloud security company Zscaler announced Monday it has acquired SplxAI, an artificial intelligence security platform, in a move to strengthen its ability to protect enterprise AI assets. Terms were not disclosed.” | press | 2026-07-06 |
| s7 | [SiliconANGLE: Zscaler acquires Splx, funding history across two rounds](https://siliconangle.com/2025/11/03/zscaler-acquires-splx-enhance-ai-app-inspection-protection/) “Splx is a venture capital-funded startup with around $9 million in funding across two rounds, including a round of $7 million in March.” | press | 2026-07-06 |
| s8 | [AI Defense Matrix Catalog: SPLX full-stack AI security tooling](https://catalog.aidefensematrix.com/products/splx/) “From red teaming and runtime security to governance and remediation, SPLX delivers full-stack security tooling needed to safely build, deploy, and scale AI systems.” | other | 2026-07-06 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [SPLX platform page: AI-BOM, automated red teaming, remediation, runtime inspection](https://splx.ai/platform) “Unify discovery of models, AI workflows, MCP servers, and guardrails into a complete AI-BOM to effectively manage your organization's AI security posture. Generate hardened system prompts and apply targeted remediation steps based on red teaming insights.” | official | 2026-07-15 |
| s2 | [Zscaler press: SPLX capabilities, attack simulations, and runtime guardrails](https://www.zscaler.com/press/zscaler-secures-enterprise-ai-lifecycle-acquisition-innovative-ai-security-pioneer-splx) “Automated AI Red Teaming and Remediation: From development to production, with 5,000+ purpose-built and domain specific attack simulations to find risks and vulnerabilities, and offer remediation in real time.” | official | 2026-07-06 |
| s3 | [SPLX homepage: unified platform built by AI red teamers, published model research](https://splx.ai/) “A unified platform to test, protect & govern AI at scale. Built by world-class AI red teamers for enterprise scalability. Research: GPT-5 Under Fire, Claude Opus 4.1 AI Security Evaluation, Grok 4 Security & Safety Assessment.” | official | 2026-07-15 |
| s4 | [SiliconANGLE: SplxAI seed round, revenue growth, named customers, open-source tool](https://siliconangle.com/2025/03/26/splxai-gets-7m-try-block-prompt-injection-attacks-ai-agents-automated-red-teaming/) “averaging revenue growth of 127% each quarter while onboarding customers including the professional services firm KPMG LLP, the Croatian telecommunications provider Infobip Ltd. and the generative AI search startup Glean Technologies Inc.” | press | 2026-07-06 |
| s5 | [Vestbee: SplxAI founded 2023 by Kristian Kamber and Ante Gojsalic, multimodal testing](https://www.vestbee.com/blog/articles/croatian-splx-ai-closes-7-m-seed-round) “It simulates complex attack scenarios across text, images, and voice to identify and mitigate potential threats like prompt injections and hallucinations. Powered by a continuously updated attack database.” | press | 2026-07-06 |
| s6 | [CyberScoop: Zscaler acquires SplxAI, terms undisclosed, $9M raised](https://cyberscoop.com/zscaler-splx-acquistion/) “Cloud security company Zscaler announced Monday it has acquired SplxAI, an artificial intelligence security platform, in a move to strengthen its ability to protect enterprise AI assets. Terms were not disclosed.” | press | 2026-07-06 |
| s7 | [SiliconANGLE: Zscaler acquires Splx, folded into Zero Trust Exchange](https://siliconangle.com/2025/11/03/zscaler-acquires-splx-enhance-ai-app-inspection-protection/) “Splx is a venture capital-funded startup with around $9 million in funding across two rounds, including a round of $7 million in March. Zscaler said it intends to expand the company's zero-trust capabilities by adding Splx's AI asset discovery, automated red teaming and governance.” | press | 2026-07-06 |
| s8 | [AI Defense Matrix Catalog: SPLX full-stack AI security tooling](https://catalog.aidefensematrix.com/products/splx/) “From red teaming and runtime security to governance and remediation, SPLX delivers full-stack security tooling needed to safely build, deploy, and scale AI systems.” | other | 2026-07-06 |
| s9 | [SPLX Trust Center probe: ISO 27001 and SOC 2 listed, underlying materials behind a Request Access gate](https://splx.ai/trust-center) | official | 2026-07-15 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.