What happened
Vanta has signed a definitive agreement to acquire Pillar Security, a startup founded in 2023 that provides a single platform for discovering, testing, securing, and governing AI agents. The acquisition will allow Vanta to integrate Pillar’s runtime protection and adversarial testing capabilities into its Trust Graph governance platform, with integration slated for early 2027. Vanta says the combined solution will connect policy definitions with real‑time , giving companies evidence that AI agents behave as intended.
Vanta announced a definitive agreement to acquire Pillar Security, an AI security platform founded in 2023 by Ziv Karliner and Dor Sarig. Pillar’s platform claims to let companies discover, test, secure, and govern AI agents throughout their lifecycle.
According to Vanta, Pillar’s runtime protection and adversarial testing will link policy definitions with that enforce agent behavior, providing evidence that AI systems act within defined bounds. The acquisition is positioned as a way to help companies govern AI as quickly as they adopt it.
Vanta’s own research, cited in the announcement, shows that 65% of IT and business leaders believe their use of agentic AI is outpacing their understanding, and only 48% have a framework for granting or limiting AI autonomy. The company argues that existing AI security point solutions lack business context, while traditional GRC tools are disconnected from actual agent behavior.
The integration plan calls for embedding Pillar’s capabilities into Vanta’s Trust Graph platform in early 2027. Vanta’s CEO Christina Cacioppo emphasized that the combined solution will turn testing and runtime interventions into auditable evidence for regulators and auditors.
Industry commentary from IDC’s Phil Harris highlighted the shift from paper‑based to runtime controls, noting that agents move at machine speed and traditional risk documentation can’t keep up.
Source details: securityjournalamericas.com
Why it matters
The deal reflects a growing market need for real‑time AI security as enterprises deploy agentic AI that can act autonomously, access sensitive data, and take unexpected paths. Vanta’s research cited in the announcement indicates that 65% of IT and business leaders feel their use of agentic AI outpaces their understanding, and fewer than half have a framework for controlling AI autonomy. By merging Pillar’s runtime testing with Vanta’s governance tools, the combined offering promises to move AI oversight from static policy documents to active, runtime enforcement, addressing a critical gap in current security stacks. This could set a new standard for AI risk management, influencing how regulators, auditors, and enterprises demand proof of AI behavior compliance.
Real‑time AI security is becoming a priority as enterprises deploy autonomous agents that can access sensitive data and make decisions without human oversight. Current security tools often detect threats after they occur, while governance frameworks typically document policies without enforcing them at runtime.
By integrating Pillar’s testing and guardrail technology with Vanta’s governance platform, the combined solution aims to provide continuous, evidence‑based oversight, potentially reducing the risk of AI‑driven breaches or compliance failures.
The acquisition signals market validation for AI‑specific security products, suggesting that investors and enterprise buyers see a need for dedicated tools that go beyond traditional cybersecurity measures.
If successful, Vanta’s integrated offering could influence regulatory expectations, pushing auditors to require runtime evidence of AI behavior, and could drive other vendors to develop similar capabilities.
The announcement also underscores the competitive pressure on vendors to move beyond static policy management toward dynamic, actionable controls.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
crm_get_transaction(id='4092').An agent must create a draft calendar event for Tuesday at 2 p.m. Which evidence would establish the requested result?
What to watch next
Watch for Vanta’s rollout timeline in early 2027, pricing and licensing details for the integrated solution, and customer adoption rates, especially among enterprises with large deployments. Monitor how regulators and auditors respond to the new runtime evidence capabilities, and whether competitors introduce comparable runtime governance products.
The exact timeline for integrating Pillar’s technology into Vanta’s platform, including any beta or early‑access programs.
Pricing, licensing models, and whether the solution will be offered as a standalone product or only within Vanta’s broader governance suite.
Adoption metrics, particularly among large enterprises that already use Vanta’s GRC tools and are beginning to deploy agentic AI.
Regulatory and audit community responses to the runtime evidence capabilities, which could shape future compliance standards.
Competitive responses from other AI security and governance vendors, potentially leading to a wave of similar acquisitions or product launches.