AI Governance & Security Vendor Wiki

10 min read

Op log

Append-only, chronological. Each entry: ## [YYYY-MM-DD] <op> | <subject> where <op> ∈ setup | taxonomy | stub | research | compare | lint | decision. grep "^## \[" log.md | tail → recent activity.

[2026-06-28] setup | scaffold & seeds

  • git init; created directory layout per CLAUDE.md §2 (raw/seeds, raw/sources, wiki/{categories,vendors,comparisons}).
  • Moved the two immutable seeds into raw/seeds/: 2026-06-19-AI-stack.md (layer-cake spine) and Governance & Security Stack — seed.csv (survey categories). Not to be edited from here.

[2026-06-28] taxonomy | reconciled layer-cake doc + CSV into 42 canonical categories

  • Built taxonomy.md: doc = spine (7 layers), CSV mapped in. 42 canonical categories.
  • Built taxonomy-gaps.md with decisions D1–D9 and open questions Q1–Q4.

[2026-06-28] decision | taxonomy reconciliation choices

  • D2: keep DSPM and DLP split against the CSV’s merged question.
  • D3: merge “AI Access Governance (CASB for AI)” + “Shadow-AI / Insider risk” → ai-access-governance.
  • D4: merge doc “AI SecOps / Security Automation” → ai-soc-analysts.
  • D5: split CSV “MCP / Agent Gateway & Tool Access” into authorization-engine + mcp-gateway + tool-identity-integration.
  • D6: promote CSV-only ai-red-teaming, identity-governance, non-human-identity to canonical.
  • D7: keep comms-surveillance separate from ai-governance-platform.
  • D8: split bundled vendor cells (1Password/Doppler/Infisical, OPA/Styra, Immuta/Collibra, Obot/MintMCP); Other (Please Specify) excluded as vendors.
  • Flagged Q1 (agent-security granularity), Q2 (process pages), Q3 (retrieval depth), Q4 (survey blueprint) for the human.

[2026-06-28] decision | human sign-off on taxonomy + Q1–Q4 resolved

  • Human approved the 42-category spine. Answers: Q1 = keep all 5 agent categories, note multi-category coverage. Q2 = 5 thin process pages. Q3 = stubs for content-sources/vector-retrieval pointing at entitlement-aware-rag. Q4 = build comparisons/survey-blueprint.md in Phase 4.
  • Proceeding to Phase 1 (category pages) → 2 (vendor stubs) → 3 (research) → 4 (comparisons) → 5 (taxonomy pass + lint).

[2026-06-28] setup | skeleton index.md + overview.md stub

  • Created index.md content catalog (sections only; populated in Phase 1+).
  • Created wiki/overview.md thesis stub from the layer-cake doc.
  • PAUSED for human sign-off on taxonomy before building pages (Phase 0 step 5).

[2026-06-28] stub | Phase 1 complete — 42 category pages (8 parallel agents)

  • All 42 category pages drafted by 8 parallel subagents (by layer), each with frontmatter, body sections, exact-slug wikilinks, and ## Survey scaffolding (skipped for pure-process pages). content-sources/vector-retrieval are stubs pointing at entitlement-aware-rag.
  • Regenerated index.md from frontmatter (42 categories + 222 vendors, grouped by layer / primary category).

[2026-06-28] research | Phase 3 Wave 1 launched — M&A verification (6 parallel agents)

  • Priority wave: ~30 M&A-flagged + anchor vendors grouped by acquirer (Palo Alto, Cisco, CrowdStrike/SentinelOne, F5/Cato/CheckPoint/Tenable, big-infra, OpenAI/misc). Each verifies seed acquisition claims against primary sources, caches to raw/sources/, fills the vendor page.

[2026-06-28] research | Wave 1 results — M&A verifications (partial: R2/R3/R6 in)

  • Confirmed: Splunk→Cisco (2024-03-18, $28B); Robust Intelligence→Cisco (2024-09, → Cisco AI Defense); Pangea→CrowdStrike (2025-09-16, ~$260M); Adaptive Shield→CrowdStrike (2024-11, ~$300M); Prompt Security→SentinelOne (2025-08-05, ~$250M); Promptfoo→OpenAI (2026-03-09).
  • Corrected seed: Astrix→Cisco is announced INTENT (2026-05-04), NOT closed as of 2026-06-28 — soft contradiction noted on page. Galileo→Cisco intent (2026-04-09), close date medium-confidence.
  • NEW (not in seed): TrojAI→A10 Networks (NYSE:ATEN), announced 2026-06-15.
  • Confirmed independent: HiddenLayer ($50M A, 2023), WitnessAI ($86.5M total, Series B 2026-01).
  • Fixes: crowdstrike/sentinelone/cisco were mis-stubbed acquired (generator regex matched “acquirer”) → corrected to public/subsidiary. robust-intelligence → thin alias of cisco-ai-defense.
  • Generator-bug note for lint: any acquirer mis-stubbed acquired; remaining acquirers (palo-alto-networks, f5, cato-networks) being fixed by their Wave-1 agents.

[2026-06-28] research | portal26

  • Researched Portal26 (ai-access-governance). Established former name = Titaniam, Inc. (rebranded 2023-10-10), NOT TripleBlind — build-note hint debunked against vendor rebrand release + website + aggregators. TripleBlind is an unrelated KC privacy startup.
  • Ownership: independent, venture-backed (confidence high). Founded 2019 by Arti Arora Raman. Funding $15M total ($6M seed 2022 + $9M Series A 2025-11-04, led by Shasta Ventures, w/ Fusion Fund + Fortune 500 fin-services venture arm). HQ Los Gatos, CA.
  • Platform: GenAI visibility / AI TRiSM / Shadow-AI discovery / policy enforcement / FIPS-140-2-marketed forensic vault / agentic-AI governance. SaaS. hedge_fund_fit medium (audit/recordkeeping appeal). 4 sources cached. status stub → researched.

[2026-06-28] research | ibm-contextforge

Researched IBM ContextForge MCP Gateway (github.com/IBM/mcp-context-forge). Established: Apache-2.0 OSS MCP/A2A/REST-gRPC gateway+registry+proxy, Python/FastAPI, self-host via PyPI/Docker/K8s (Redis federation), transports stdio/SSE/streamable-HTTP/WebSocket/JSON-RPC, REST-to-MCP wrapping, virtual servers, auth (Basic/JWT/OAuth), OTel observability, 40+ plugins. Used in IBM watsonx Orchestrate tutorials (on Code Engine). Ownership=public (IBM, NYSE:IBM, Armonk), confidence high; commercial support model unconfirmed — appears community/corporate-backed OSS, flagged to verify. Latest release v1.0.4 (2026-06-23). hedge_fund_fit=medium. Kept category mcp-gateway. Cached 2 source files. No contradictions.

[2026-06-28] research | github-advanced-security

Researched GHAS. Product (not company) of GitHub, a Microsoft subsidiary (acq. announced 2018-06, closed 2018-10-26, ~$7.5B) — ownership: subsidiary, high confidence. Components: CodeQL SAST/code scanning, secret scanning + push protection, Dependabot/dependency review, Copilot Autofix. Verified 2025 repackaging into two separately purchasable products: GitHub Secret Protection ($19/committer/mo) and GitHub Code Security ($30/committer/mo), announced 2025-03-04, GA to Team plans 2025-04-01 via metered billing. Deployment SaaS + Enterprise Server. hedge_fund_fit: high (Day-1 if shipping AI-generated code on GitHub; tier upgrade, not new vendor). 2 sources cached. status stub → researched.

[2026-06-28] research | gitlab

Researched GitLab (Ultimate). Public company, NASDAQ: GTLB, IPO 2021-10-14 (~$10B), founded 2014 (Zaporozhets & Sijbrandij), all-remote SF HQ — ownership: public, high confidence. Ultimate tier bundles SAST/DAST/dependency scanning/secret detection/container scanning/license compliance. Deployment SaaS + self-managed/on-prem. M&A: verified Datadog acquisition is RUMORED/UNCONFIRMED (Reuters 2024-07; renewed Oct 2025 ~$60/share buzz; Wolfe Research skeptical) — no definitive agreement or 8-K found as of 2026-06-28; kept ownership public with dated note. No hard contradiction. hedge_fund_fit: high. 2 sources cached. status stub → researched.

[2026-06-28] research | jfrog

Researched JFrog (NASDAQ: FROG). Public — IPO Sept 2020 (~$509M at ~$3.9B); founded 2008 Netanya (Ben Haim/Landman/Simon); dual HQ Sunnyvale+Netanya. Artifactory (universal binary repo) + Xray (SCA/scanning) = software-supply-chain spine; JFrog ML / model-management via Qwak acquisition (announced 2024-06-25, ~$230M press-reported, undisclosed by JFrog). ownership=public, confidence high. hedge_fund_fit medium (Day-1 if shipping AI-gen code at scale). 2 sources cached. status stub → researched.

[2026-06-28] research | sonatype

Researched Sonatype. CORRECTION to seed brief: Vista Equity Partners majority interest was announced 2019-11-18 (NOT ~2024/2025); majority stake, existing investors retained some — PE-controlled. Founded 2008 Fulton MD by Maven creators Brian Fox & Jason van Zyl; stewards Maven Central. Products: Nexus Repository + Lifecycle/IQ SCA + Repository Firewall (blocks malicious OSS). ownership=acquired (Vista), confidence high on 2019 event. hedge_fund_fit medium. 2 sources cached. status stub → researched.

[2026-06-28] research | aikido-security

Researched Aikido Security. Independent VC-backed; founded 2022 Ghent, Belgium (Delbare/Delrue/Garriau). Funding ~$84M total: pre-seed €2M (Jan 2023), seed €5M (Nov 2023), Series A $17M (May 2024, Singular), Series B $60M (Jan 2026, $1B unicorn, led by DST Global w/ PSG Equity/Notion/Singular) — fastest EU cyber unicorn. Consolidated dev-first all-in-one AppSec (SCA/SAST/secrets/IaC/container/DAST/cloud); SaaS, no binary repo. ownership=independent, confidence high. hedge_fund_fit medium (Day-1 candidate for small fund shipping AI-gen code). 2 sources cached. status stub → researched.

[2026-06-28] research | Phase 3 complete — all 222 vendors researched (Waves 1–4)

  • Wave 1 (M&A core), Wave 2 (Day-1 AI-native), Wave 3 (Day-2 agent/AI + governance), Wave 4 (foundation/infra). ~378 sources cached to raw/sources/.
  • ~30 seed M&A flags verified against primary sources; ~20 NEW deals discovered (not in seed) — see ai-security-m-and-a-map.

[2026-06-28] compare | Phase 4 — overview thesis + 6 comparison pages

  • Built: ai-security-m-and-a-map, ai-gateways-head-to-head, runtime-ai-firewalls, entitlement-aware-rag-options, day-1-for-a-50-person-fund, survey-blueprint. Fleshed overview.md into full thesis.

[2026-06-28] decision | Phase 5 taxonomy pass — 42-category spine held; vendor moves R1–R9

  • jazz-security→dlp; immuta→data-access-governance primary; collibra→ai-governance-platform primary; aurascape +ai-runtime-security; symmetry-systems ownership corrected (Zscaler). See taxonomy-gaps.md “Phase 5”.

[2026-06-28] lint | clean pass

  • 0 broken wikilinks, 0 orphans, 0 stubs (222/222 researched), 0 “Status: Unresolved”, 0 unverified-M&A (acquired+low). Both commit gates pass. 6 zero-vendor categories are intentional (process + third-party-ai-apps). Regenerated index.md.

[2026-06-28] decision | converted wikilinks → relative markdown links (Option A)

  • Converted 5,415 [[slug]] / [[slug|alias]] links across 275 md files to relative [text](path.md) links so they render as clickable in GitHub’s repo view (GHFM does not resolve [[ ]]). 0 unresolved, 0 broken targets, 0 wikilinks remaining. Excluded Claude.md (convention examples) and conversation.txt (transcript). Updated Claude.md §3 note.

[2026-06-28] decision | Quartz published site on GitHub Pages

  • Added .github/workflows/deploy-quartz.yml (clones Quartz v4 at build time, assembles repo md as content preserving layout so relative links resolve, builds, deploys to Pages). quartz.config.ts + quartz.layout.ts at root. Site: https://druce.ai/governance/ . Excludes raw/, conversation.txt, prompts, Claude.md from the published site. CustomOgImages disabled for build speed.

[2026-06-30] research | artemis-security

  • Added vendor (user request). Category: ai-soc-analysts (AI-native SecOps / agentic SOC / SIEM-replacement). Flagged soft scope note: “AI for security,” not “security for AI” — defends enterprise infra with AI agents, does not govern LLM usage/egress; trifecta = none. Established: emerged from stealth 2026-04-15 with $70M ($15M seed + $55M Series A, Felicis lead); NYC HQ, Israeli-founded; founders Shachar Hirshberg (ex-Demisto/AWS GuardDuty, CEO) & Dan Shiebler (ex-Abnormal AI, CTO); federated-query architecture. ownership_confidence high; customer logos + metrics unverified. Cached 1 source. Updated ai-soc-analysts (vendor + survey, count 9→10) + index.

[2026-06-30] research | audition-ai

  • Added vendor (user request). Primary category: enterprise-ai-assistant (finance-vertical, in-tenant secure AI assistant + agent platform); secondary tags ai-governance-platform (usage GRC) + dlp. Cross-listed on all three category pages. Established: product of Saberin Data Platform, Inc. (Saberin Group, founded 2007), Hauppauge NY; private/bootstrapped — no external/VC funding found (recorded as none, not a guess); no M&A; ownership_confidence high, funding confidence med (absence of evidence). Deploys into customer’s Azure tenant via Azure AI Foundry (multi-model), Entra zero-trust, permission-aware retrieval, dual-layer DLP + “Generative Rules”, immutable audit. Trifecta: strong sensitive-data, partial egress, weak untrusted-input (Sidekick shell/browser/file agents flagged as open risk). hedge_fund_fit high (purpose-built) with small-vendor caveat. Cached 1 source. Updated enterprise-ai-assistant (vendor + survey + design note, count 8→9), ai-governance-platform, dlp + index.

[2026-07-05] decision | schema v2: SCHEMA.md + taxonomy.yaml + skills + scripts

  • Promoted the user’s draft spec (draft.md, now deleted) to SCHEMA.md: richer vendor/category page questions, controlled vocabularies, mechanical (§5.1) + editorial (§5.2) lint rules, research question bank. taxonomy.yaml is now the machine source of truth (42 categories, vocab enums); taxonomy.md is GENERATED via scripts/gen_taxonomy_md.py. survey-v2.csv committed as the canonical survey list (lint rule 1 bijection target). Added scripts/ (wiki_lint.py, migrate_frontmatter.py, gen_taxonomy_md.py) and project skills .claude/skills/{wiki-create,wiki-research,wiki-lint}. index.md is now generated by wiki_lint.py —write-index. Claude.md slimmed to conventions + pointers. Vocab extensions vs draft: adoption_tier practice, multi-valued form_factor, alias_of for redirect stubs.

[2026-07-05] decision | lethal trifecta scoped to agent-security contexts

  • Policy (SCHEMA.md §0): the trifecta is the core agent-security threat model, discussed only where agent_security_context: true (ai-runtime-security, agent-runtime-security, mcp-gateway, authorization-engine, tool-identity-integration, enterprise-browser, browser-security-extension, trust-zone-segmentation) + overview.md. Removed trifecta_relevance/trifecta_role frontmatter everywhere; rewrote 177 vendor + 34 category pages in plain risk language (”## Lethal-trifecta role” → ”## Security role”); reframed the 8 agent-security category pages (”## Agent-security role: the lethal trifecta”) and overview.md §3. Editorial lint rule 18 enforces the scoping. Note: a handful of History log lines contained trifecta jargon and were minimally reworded in place (terminology only, dates/facts preserved) to satisfy the zero-grep sweep.

[2026-07-05] taxonomy | frontmatter migrated v1 → v2 (266 pages)

  • scripts/migrate_frontmatter.py: vendors — categories→primary_category/also_listed_in, ownership→ownership_state (incl. pe-owned detection), acquirer extracted to owner, acquisition dates split announced/closed, deployment split into deployment_model+form_factor, last_updated→last_verified; dropped layer/hedge_fund_fit/priority/trifecta_relevance/status/confidence/sources_count/ownership_confidence (confidence now lives per-source). Categories — tier/trigger/adjacency/maturity pulled from taxonomy.yaml. migration-report.md flags 24 pages (unmapped values, unconfirmed close dates) → research queue. Hand-fixes: astrix-security (pending, not closed — “(not closed)” phrasing defeated the pending heuristic), layerx owner, robust-intelligence alias_of.

[2026-07-05] lint | first schema-v2 pass: 0 errors

  • reports/lint-2026-07-05.md: 0 errors, 41 warns, 6 research-needed across 273 pages. Warns: 18 infra pages not in survey CSV (expected — content-sources/vector-retrieval etc.), 14 acquired vendors whose CSV option lacks “X (Acquirer)” rendering (survey-design queue), 9 CSV Flag/Note phrases with no trace on the page. Research queue: unconfirmed close dates (galileo, normalyze, github-codespaces, hashicorp-sentinel, ibm-watsonx-governance) + astrix/natoma pending re-verify. Both commit gates pass. index.md regenerated.

Graph View