Return to Threats

Ten New AI Security Vendors

Richard Stiennon (Substack) 2025-05-13 SaaS AI risk High

What Happened

This article profiles ten early-stage AI security vendors building products around AI-native exposure management, identity security for human and AI identities, AI interaction verification, and AI-powered security operations.[3] Several of the vendors focus on governing AI workloads, monitoring and verifying agentic AI interactions, and enforcing fine-grained authorization across applications, data, and AI, which is directly relevant to SaaS and startup environments adopting LLMs and AI agents.[3]

Why It Matters

The article profiles ten early-stage AI security vendors focused on AI-native exposure management, identity security for human and AI identities, verification of human–AI and agent–AI interactions, and fine-grained authorization for AI workloads across infrastructure, apps, data, and agents.[1] It highlights capabilities such as governing AI workloads, monitoring and controlling agentic AI behavior, eliminating shadow AI, and enforcing real-time policies on AI-agent-to-data and agent-to-agent interactions, which are directly relevant to SaaS and startup environments adopting LLMs and AI agents.[1] From a CyberSE.AI perspective, this underscores that SaaS teams deploying LLMs and agentic workflows face material risks around unauthorized data access, over-permissioned agents, and opaque AI interactions, and therefore benefit from structured readiness assessments, secure agent design, and explicit AI usage and access policies aligned to these new control layers. Practically, organizations should map their current and planned AI agents, define least-privilege and verification controls for agent actions and data access, and integrate continuous monitoring and governance for AI interacti

Healthcare Fintech SaaS SMB AI startups

CyberSE Analysis

This signal maps to SaaS AI risk. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.

Recommended Actions

  • Restrict AI agent tool permissions and production write paths.
  • Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
  • Add human approval workflows for high-impact or state-changing actions.
  • Run prompt injection and indirect prompt injection tests against affected workflows.
  • Document the owner, control gap, and remediation deadline for this risk class.

Source

https://stiennon.substack.com/p/ten-new-ai-security-vendors

Talk to AI CISO