Noma Security

Noma Security is an enterprise AI security posture management platform that protects LLMs, RAG pipelines, and AI agents.

Data verified Sep 7, 2026

Pundit
Score

Alternatives

About Noma Security

Noma Security is an enterprise AI security posture management platform that protects LLMs, RAG pipelines, and AI agents. It provides continuous AI discovery and inventory, AI supply-chain security, AI red-teaming, and real-time runtime guardrails that block malicious prompts, rogue agent actions, and data leakage. Positioned as an AI Trust, Risk and Security Management (TRiSM) solution, it targets enterprise security teams.

Screenshots

Commonly Cited Strengths & Limitations

Strengths

Systematically detects issues and makes them actionable
Dramatically increased visibility into AI/ML infra, models, and risks
Single platform approach across all AI attack surfaces
Puts agentic AI risk in the context of business priorities to avoid alert overload

Limitations

Kong Gateway plugin routes traffic and telemetry outbound to an external Noma SaaS endpoint, placing enforcement decisions and audit logs outside the customer's perimeter by default, raising data sovereignty concerns
Default external-telemetry architecture creates compliance friction for regulated/defense-adjacent organizations handling CUI (CMMC) or ITAR-controlled data
Outbound HTTPS traffic to the Noma API can generate egress costs that scale with call volume and may not appear in initial proposals
Enabling enforcement typically requires DevOps configuration work and security review of outbound network rules
Very few public user reviews available (no verified reviews on G2/PeerSpot), making real-world experience hard to assess

Common Use Cases

Discovering shadow AI assets and agents
Governing and enforcing agent access policies
Continuously testing AI apps and agents for vulnerabilities
Detecting and stopping AI threats in real time
AI compliance reporting and audit trails

Details

Pricing Model: Contact Sales
Team Size: 40 employees (Israel and US)
Headquarters: Tel Aviv, Israel
Category: Cybersecurity

Who is Noma Security for?

CISOs & Security Teams

Gain visibility into AI and ML infrastructure, models, and agents while managing security and compliance risks across the enterprise.

Product & Engineering Teams

Build and adopt agentic AI with built-in security and proactive governance in collaboration with security teams.

Frequently Asked Questions

Does Noma Security have an API?

Yes, Noma Security provides an API for developers.

What does Noma Security integrate with?

Noma Security integrates with Amazon Kiro, MCP gateways, AI gateways, Agent SDKs, Agent hooks.

Is Noma Security cloud-based or self-hosted?

Noma Security is offered as a cloud-based (SaaS) deployment.

What are the downsides of Noma Security?

Kong Gateway plugin routes traffic and telemetry outbound to an external Noma SaaS endpoint, placing enforcement decisions and audit logs outside the customer's perimeter by default, raising data sovereignty concerns Also, Default external-telemetry architecture creates compliance friction for regulated/defense-adjacent organizations handling CUI (CMMC) or ITAR-controlled data

Who is Noma Security best for?

Noma Security is best suited for CISOs & Security Teams, Product & Engineering Teams.

What can I use Noma Security for?

Common uses for Noma Security include discovering shadow ai assets and agents, governing and enforcing agent access policies, continuously testing ai apps and agents for vulnerabilities, detecting and stopping ai threats in real time.

How does Noma Security compare to Vanta?

Noma Security and Vanta are both used for cybersecurity -- specifically security-posture-tools. See the full side-by-side comparison for pricing and feature differences.