Skip to content
← Tools / Skills
ToolPillar Security/10 trustVerified

Pillar Security

End-to-end AI security platform: asset discovery, RedGraph red-teaming, and adaptive runtime guardrails.

Visit official site →

About

Pillar Security is an Israeli AI security startup selling one platform that spans the AI application lifecycle. It starts with discovery: automatically mapping an organization's AI assets into a live AI-BOM, covering models, datasets, prompts, notebooks, frameworks, MCP servers, tools, and agents, including shadow AI and unapproved coding agents. On top of that inventory it runs RedGraph, an autonomous red-teaming engine that graphs the AI attack surface and runs multi-step attack scenarios the way a real attacker would, chaining tool calls and mapping exploitable surfaces with environmental context.

The third leg is runtime defense: adaptive guardrails calibrated per application or agent that block prompt injection, jailbreaks, and PII or secret leakage in real time, with behavioral-deviation detection that flags when an agent strays from its defined purpose. Pillar claims red-teaming findings and production telemetry continuously recalibrate the guardrails; treat the efficacy claims as vendor marketing, though the research output is independently visible. The company's research team disclosed a critical RCE in n8n (patched in v2.4.0, January 2026), a Week of Sandbox Escapes across Cursor, Codex, Gemini CLI, and Antigravity, and the BadEngram backdoor research on open-weight models (October 2026). Recognition includes Gartner Cool Vendor in AI Software Security 2026, Latio's 2026 AI Security Technical Innovator, and CRN's 10 Hottest AI Security Startups of 2026.

What it can do

  • Automated AI asset discovery with live AI-BOM and risk scoring
  • RedGraph autonomous red-teaming with multi-step attack scenarios
  • Adaptive runtime guardrails against prompt injection, jailbreaks, and data leakage
  • Behavioral-deviation detection for agent actions
  • Taint analysis tracing PII and secrets from source to destination
  • Audit-ready evidence from red-team findings and runtime telemetry

Setup

  1. Contact the Pillar Security team via pillar.security for platform access (enterprise SaaS).
  2. Connect the discovery module to your cloud, code repos, and agent frameworks to build the AI asset inventory.
  3. Run RedGraph red-teaming against the discovered surfaces and review the replayable findings.
  4. Deploy adaptive runtime guardrails in front of production agents and tune policies from the telemetry feedback loop.

Prerequisites

Enterprise engagement with Pillar Security; inventory of AI apps, agents, and MCP tooling to onboard.

Use cases

ai-securityai-guardrailsred-teamingai-spmai-agentsprompt-injection-defense

Works with

Trust score — 7/10

/10 trustVerified

Scored 7/10 (verified tier, metrics-v1). Evidence: ~$9M seed raised Apr 2025 (governance vendor wiki); named Gartner Cool Vendor in AI Software Security 2026 and Latio 2026 AI Security Technical Innovator (vendor blog, Latio report); research disclosures on n8n RCE (Business Wire, Jan 2026) and BadEngram (GlobeNewswire via IndiaEveningPost, Oct 2026); pillar.security verified live. Strengths: real platform spanning discovery, red-teaming, and runtime guardrails; credible public research track record. Docked for: (1) proprietary SaaS with no public pricing or adoption metrics; (2) guardrail efficacy claims are vendor marketing, not independently benchmarked. License: proprietary.

How the trust score is built

Full methodology →
Adoption · stars/downloads, log-scaled vs peers
7.0/10
Maintenance · recency, releases, issue load
9.0/10
Openness · license + docs
4.0/10
Manual review · sanity read + red-flag check
7.0/10
  • · ~$9M seed raised Apr 2025 (third-party governance vendor wiki)
  • · Gartner Cool Vendor in AI Software Security 2026 + Latio 2026 AI Security Technical Innovator
  • · Research disclosures: n8n critical RCE (Business Wire, Jan 2026), BadEngram open-weight backdoor research (GlobeNewswire, Oct 2026)
  • · pillar.security verified live (HTTP 200)
  • · No public pricing or adoption metrics; guardrail efficacy claims vendor-reported

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.