- Home
- AI Security Posture Management (AI-SPM) Tools Software
- Lasso AI Security Platform
Lasso AI Security Platform
Tel Aviv, Israel and New York, United States
What it is
Lasso AI Security Platform brings AI discovery, risk review, red teaming, and runtime protection into a single lifecycle for enterprise environments. It inventories AI applications, agents, tools, MCP servers, and connected resources, then maps links among agents, databases, and APIs to identify misconfigurations and policy gaps. Automated red teaming covers static, dynamic, and high-agency attack modes. At the gateway, Lasso inspects prompts, responses, tool calls, MCP communications, and sub-agent traffic; it can block, mask, or alert on policy violations in under 50 milliseconds. Its Shadow AI capability monitors more than 8,000 tools, and agent support includes Vertex AI, Microsoft Copilot, AWS Bedrock, Salesforce Agentforce, and custom platforms. Lasso maps activity and audit trails to frameworks including NIST AI RMF, OWASP, EU AI Act, ISO 42001, SOC 2 Type 2, GDPR, and HIPAA. The hybrid platform is available through API, extension, and web. Pricing is on request.
For and against
For
- Inventories applications, agents, tools, and MCP servers.
- Automated red teaming covers three attack modes.
- Gateway enforcement can block, mask, or alert.
- Monitors more than 8,000 AI tools.
- Maps activity to named security and compliance frameworks.
Against
- Pricing is available on request.
- Designed for enterprise customers.
The verdict
Lasso combines AI inventory, risk management, testing, and gateway enforcement in a hybrid platform. Its enterprise focus and pricing-on-request model are worth considering before evaluating fit.
Who it suits
Lasso is designed for enterprises managing AI applications, agents, and connected resources. It may suit organizations seeking AI risk controls, runtime protection, and compliance mapping.
On the record
- Agent support
- Lasso supports agents built with Vertex AI, Microsoft Copilot, AWS Bedrock, Salesforce Agentforce, and custom platforms.lasso.security · read 1 Oct 2026
- AI discovery
- Lasso discovers AI assets through agentless, read-only integrations with CI pipelines, cloud providers, and third-party agent builders.lasso.security · read 1 Oct 2026
- AI risk management
- Lasso assesses AI misconfigurations and policy gaps with visual graph mapping of connected agents, databases, and APIs.lasso.security · read 30 Sep 2026
- AI tool coverage
- Its Shadow AI capability monitors over 8,000 AI tools, including ChatGPT, Claude, Gemini, Perplexity, GitHub Copilot, Cursor, and Windsurf.lasso.security · read 30 Sep 2026
- Certification and customers
- Lasso was founded in 2023, is SOC 2 Type II certified, and serves global enterprises and the U.S. federal government.lasso.security · read 1 Oct 2026
- Compliance
- Lasso maps controls and audit trails to NIST AI RMF, OWASP, EU AI Act, ISO 42001, SOC 2 Type 2, GDPR, HIPAA, and other frameworks.lasso.security · read 1 Oct 2026
- Deployment
- AI usage controls can be deployed through a browser extension, proxy integrations, and data integrations.lasso.security · read 30 Sep 2026
- Enforcement latency
- Gateway policy enforcement can block, mask, or alert on violations with under 50ms latency.lasso.security · read 30 Sep 2026
- Gateway enforcement
- At the gateway layer, Lasso can block, mask, or alert on policy violations, with enforcement running in under 50 milliseconds.lasso.security · read 1 Oct 2026
- Gateway integrations
- Lasso integrates with Kong, Envoy AI Gateway, TrueFoundry, Portkey, LiteLLM, and other AI gateways without source-code changes.lasso.security · read 1 Oct 2026
- Intent Deputy
- Intent Deputy provides behavioral intent analysis with sub-50ms processing and reported 99.83% detection accuracy.lasso.security · read 30 Sep 2026
- Intent security
- Its Intent Deputy analyzes agent interactions in real time in under 50 milliseconds and reports 99.83% threat-detection accuracy.lasso.security · read 1 Oct 2026
- Lifecycle coverage
- The platform connects AI discovery, risk management, automated red teaming, and runtime protection in one continuous lifecycle.lasso.security · read 1 Oct 2026
- MCP security
- Lasso secures MCP connections for Claude Desktop and Claude Code by scanning tool descriptions, filtering requests and responses, and analyzing tool-call behavior.lasso.security · read 1 Oct 2026
- Open-source component
- Lasso's MCP Gateway is available as an open-source security gateway for Model Context Protocol workflows.lasso.security · read 30 Sep 2026
- Purpose
- Lasso is an AI security platform providing observability, governance, and real-time defense across AI models, agents, and applications.lasso.security · read 1 Oct 2026
- Red teaming
- Automated AI Red Teaming includes static, multi-turn, and high-agency attacks, with more than 300,000 attack payloads and 500 new variants weekly.lasso.security · read 1 Oct 2026
- Runtime protection
- Lasso inspects prompts, responses, tool calls, MCP communications, and sub-agent traffic at the gateway layer.lasso.security · read 30 Sep 2026
