Vanta Acquires AI Security Startup Pillar Security
The deal adds AI discovery, testing, and runtime protection tools to Vanta's compliance and governance platform.
Updated on Nov. 10, 2026 in Artificial Intelligence
Vanta signed a definitive agreement on November 9, 2026, to acquire Pillar Security, an AI security startup founded in 2023 by Ziv Karliner and Dor Sarig. Pillar develops tools for discovering, testing, and protecting AI applications and agents.
Why it matters
Surveys cited by Vanta show many organizations are adopting agentic AI faster than they understand it, with 65% of 3,500 surveyed IT and business leaders reporting this gap. Adding security capabilities to a governance platform reflects demand for controls over AI systems.
Vanta's early-access AI governance program has a waiting list six times its available capacity, and Vanta reports more than 20,000 customers, up from 16,000 in the first quarter of 2026. The integration's technical deployment requirements and automation levels have not been disclosed.
The players
Vanta
Vanta is a compliance and security automation company whose platform helps organizations manage security controls and audit evidence.
Pillar Security
Pillar Security is an AI security startup that builds tools for discovering, testing, and protecting AI applications and agents.
The details
Vanta plans to connect Pillar's capabilities to its Trust Graph, which links business policies, security controls, risk ownership, and compliance evidence. Pillar's platform identifies vulnerabilities, tests agents against potential attacks, and prevents unauthorized activity during operation.
Timeline
July 2025: Sapio Research surveyed 3,500 IT and business leaders for Vanta.
July 2026: Vanta introduced its AI governance offering.
November 9, 2026: Vanta announced its agreement to acquire Pillar Security.
January 2027: AI Governance becomes a paid Vanta offering.
Throughout 2027: Vanta plans to introduce Pillar's capabilities in stages.
The Tech Race
The acquisition extends Vanta's Trust Graph, which links policies, controls, risk ownership, and compliance evidence, into AI runtime security. It positions Vanta to compete with security vendors that are adding agent-protection tools to existing platforms.
Companies using Vanta may gain tools to inventory AI systems, test safeguards, and monitor agent activity under one platform. Pricing and deployment requirements will determine whether smaller organizations and managed service providers can adopt these capabilities affordably.
The takeaway
Organizations adopting AI agents face a widening gap between deployment speed and governance understanding. Reviewing which systems use AI and who controls their autonomy is a practical first step.
What happens next
Vanta plans to introduce Pillar's capabilities in stages throughout 2027, and AI Governance becomes a paid offering in January 2027.
Further reading
For broader context on AI tools and policy, explore the Artificial Intelligence section.
