9 application security startups combating AI risks

Governance is being reframed as infrastructure that must be automated for AI-driven development to scale. This approach increases complexity by requiring organizations to think in terms of systems, provenance, and policy frameworks rather than individual tools. FireTail provides end-to-end AI security by answering who is using AI and how. It addresses the lack of an inventory of AI tools, shared data, and introduced risks as AI adoption spreads beyond development teams. The platform monitors employee interactions with tools and application-level usage such as cloud AI agents. It aggregates activity into unified log streams to detect data leakage, policy violations, and anomalous behavior. It enables baseline visibility and governance, with policies that can be enforced at endpoint or browser level.

"Governance, long treated as friction, is being reframed as infrastructure, something that must be automated if AI-driven development is to scale. The trade-off is complexity. Chainloop's model requires organizations to think in terms of systems, provenance, and policy frameworks, not just tools. But for teams already grappling with software supply chain risk, that abstraction may be exactly what's needed."

"Described as an end-to-end AI security platform, FireTail takes a step back to answer a broader question: who is using AI, and how. This may seem basic, but it is not a solved problem. As AI tools proliferate, usage often spreads beyond development teams to include product managers, analysts, and other business functions. In many cases, organizations lack a clear inventory of which tools are in use, what data is being shared, and where risks may be introduced."

"The platform monitors both employee usage, such as interactions with tools like ChatGPT, and application-level usage, such as agents built on cloud AI services. It aggregates this activity into unified log streams, where it can detect potential issues like data leakage, policy violations, or anomalous behavior. "The first use case for every customer is knowing who's using what AI service," FireTail founder Jeremy Snyder said."

"From there, organizations can define policies and, in some cases, enforce them, particularly at the endpoint or browser level. This is a different kind of control point. It is less about enforcing behavior within the pipeline and more about establishing baseline visibility and governance across the organization. That distinction makes FireTail both broadly useful and somewhat peripheral to the core development life cycle. Visibility is a prerequisite for control, but enforcement requires add"

Read at InfoWorld