Briefing · 3 min read

AI governance vendor consolidation in 2026: who now belongs to whom

In brief

Several AI security vendors now sit inside larger companies, according to their own pages: SPLX in Zscaler, Lakera in Check Point, Promptfoo in OpenAI, CalypsoAI in F5 and Prompt Security in SentinelOne. Alice and Lasso announced new funding in August and September 2026. This briefing records what the pages say and does not predict what happens next.

By The Charter Desk, Agentic Governance Compare · Published 2026-09-15 · Vendor pages read 15 September 2026 · Editorial assessment

This briefing covers ownership as shown on vendor pages read on 15 September 2026, and two funding announcements dated 25 August and 3 September 2026. It does not speculate about product roadmaps, prices or integration plans after an acquisition.

Which vendors are now part of larger companies?

  • SPLX: its home page says 'SPLX is now part of Zscaler' and links Zscaler's press release. SPLX is one of the six platforms on this site.
  • Lakera: its About page redirects to Check Point Software's About page; Lakera is part of Check Point.
  • Promptfoo: its press page says Promptfoo is now part of OpenAI and continues as an open-source AI security project.
  • CalypsoAI: calypsoai.com redirects to F5's AI Guardrails product page; CalypsoAI's products now appear as F5 AI Guardrails and F5 AI Red Team.
  • Prompt Security: brands itself 'Prompt Security | From SentinelOne'; SentinelOne announced the acquisition on 5 August 2025.

Of these, only SPLX is in this site's lineup, because the others' public pages are focused on testing or runtime security rather than governance reporting.

What funding was announced?

Alice announced a $140M round on 25 August 2026, led by Apax Digital Funds with participation from Samsung, SentinelOne, Maj Invest, MoreTech and Phoenix Financial, and states total funding of $280M. In the same announcement Alice says it works with 8 of the 10 top AI labs, is nearing $100 million in annual recurring revenue and has more than 150 researchers. These are Alice's statements.

Lasso announced $30 million in funding on 3 September 2026, alongside LEAP, a CPU-based guardrail it says runs at under five milliseconds per decision, and a second engine called RAPID.

What should buyers do with this?

Ownership changes matter for procurement, not for scores. When a vendor is part of a larger company, ask practical questions during evaluation: which contract entity you sign with, whether the product is sold alone or only in a bundle, where data is processed and which support channel applies. Ask the vendor; do not assume.

Funding announcements tell you a vendor has capital. They do not tell you whether its product fits your program. Treat the numbers in them as the vendor's own claims.

Did any score change because of ownership?

No. Scores on this site come from what each platform's pages describe about inventory, enforcement, evidence, frameworks, expertise, third-party AI, coverage and pricing. SPLX's scores are based on its own product and pricing pages.

Where do the six platforms on this site stand on ownership?

Of the six platforms on this site, SPLX is the only one whose pages show it as part of a larger company. Alice, Credo AI, Holistic AI, Pillar Security and Lasso present themselves as standalone vendors on the pages we read. Alice's funding announcement lists SentinelOne among the participants in its round, and SentinelOne also owns Prompt Security. We record both facts as the companies state them and draw no conclusion from them.

What should a buyer add to an RFP?

  • Which legal entity signs the contract and provides support?
  • Is the product sold on its own, or only as part of a larger platform?
  • Where is customer data processed and stored?
  • Which documentation and trust pages apply: the product's own or the parent company's?
  • How will you be told about changes to the product's name, terms or data processing?