Noma Security is an AI security platform that unifies discovery, posture management, red teaming, and runtime protection for enterprise AI and autonomous agents in a single product. Where tools like Garak or Promptfoo focus on specific testing stages, Noma covers the full AI security lifecycle from inventory through production defense.
The company was founded in 2023 by Niv Braun (CEO) and Alon Tron (CTO), who met during their service in the IDF’s Unit 8200 intelligence unit. Noma emerged from stealth in October 2024 and has since raised $132M in total funding, including a $100M Series B led by Evolution Equity Partners with continued backing from Ballistic Ventures and Glilot Capital.
Since its public launch, Noma has reported 1,300% annual recurring revenue growth and signed dozens of enterprise customers across financial services, life sciences, retail, and technology sectors, including UiPath, Best Buy, and Nielsen. The company has identified over 1 million AI and agent risks across its customer base.
What is Noma Security?
Noma’s platform addresses the security gaps created by the rapid adoption of generative AI, LLMs, RAG systems, and autonomous agents. It works through a three-step approach: discover the full AI landscape, secure it with policies and controls, and protect it with real-time enforcement.
The platform automatically discovers every AI model, agent, MCP server, and data source in an organization’s environment — and maps how they interconnect. From there, security teams can define policies, run automated red team assessments, and enforce guardrails in production.
Key Features
| Feature | Details |
|---|---|
| Agent Discovery | Automatic profiling of agents, toolsets, permissions, MCP connections |
| Agentic Risk Map (ARM) | Blast radius visualization and cascading risk analysis |
| AI-SPM | Security posture management with continuous risk assessment |
| Red Teaming | Automated offensive testing including prompt injection and jailbreak validation |
| Runtime Protection | Real-time guardrails blocking malicious prompts, rogue outputs, unauthorized actions |
| MCP Server Security | Discovery and monitoring of Model Context Protocol server connections |
| Policy Enforcement | Enterprise policies for agent permissions, data access, and actions |
| Integrations | 80+ platforms: Microsoft Copilot Studio, Salesforce AgentForce, ServiceNow, AWS, Databricks, LangChain, CrewAI, Cursor, Windsurf |
| API & SDKs | REST API, native Python and JavaScript SDKs |
| AWS Security Hub | Available through AWS Security Hub Extended plan |
| Scale | 1M+ AI and agent risks identified |
How the platform works
Noma operates in three stages:
Discover — The platform scans the entire AI ecosystem to build a complete inventory. It identifies every model, agent, MCP server, and data source, then maps their interconnections. This visibility layer catches shadow AI deployments and unmanaged agents that security teams may not know about.
Secure — Once the landscape is mapped, teams build security controls. This includes defining approved AI supply chains, configuring identity and access management policies, and running continuous red team validation to test defenses. The red teaming module probes for prompt injection, jailbreaks, and other AI-specific attack vectors.
Protect — In production, Noma monitors all AI communication in real time. The runtime protection layer enforces security, privacy, and compliance policies before autonomous actions execute. If an agent attempts an unauthorized action or a malicious prompt is detected, Noma blocks it before it reaches the model or downstream system.
Agentic Risk Map in detail
The Agentic Risk Map is Noma’s signature capability for autonomous agent security. It provides a visual representation of each agent’s blast radius — the set of systems, data sources, and other agents that could be affected if the agent is compromised or behaves unexpectedly.
ARM maps:
- Agent connections — Which tools, APIs, and services each agent can access
- Identity chains — Credentials and permissions accumulated across agent workflows
- Data exposure — Sensitive data accessible through agent pathways
- MCP server relationships — How agents interact with Model Context Protocol servers
This mapping helps security teams prioritize risks by understanding which agents have the largest potential impact if compromised.
Getting Started
When to use Noma Security
Ideal for enterprises with complex AI environments — multiple agent frameworks, numerous MCP servers, and diverse model deployments across cloud providers. The platform is strongest when organizations need full lifecycle coverage: discovery through runtime protection.
Regulated industries get the most from Noma, since compliance requirements demand continuous monitoring and audit trails for AI systems. The native integrations with Microsoft Copilot Studio, Salesforce AgentForce, ServiceNow, and AWS Security Hub mean it plugs into existing enterprise toolchains without custom integration work.
UiPath
Best Buy
Nielsen
Endor LabsFor more AI security tools and guidance, see the AI security tools category page. For dedicated LLM vulnerability scanning, look at Garak or Promptfoo. For runtime prompt filtering, consider Lakera Guard or LLM Guard. For AI agent access control, see Alter. For centralized AI governance, check Onyx Security.
