Data Protection

AI application security

Prompt injection, data leaks through AI tools and unapproved AI use get caught.

Addresses 302 stories in our coverage in the last 90 days 3 products that provide it

What it is

Controls for how staff use AI tools and how your own AI applications behave: discovery of AI use, filtering of prompts and responses, protection against prompt injection, and testing of models and agents.

How to value it

AI tools have become a new channel for data leaks and a new attack surface: agents that can be tricked into sending data out, and integrations with broad access. Visibility and guardrails let the business use AI without each new deployment becoming a new risk.

Questions to ask a vendor

  1. 1Can it discover which AI tools staff already use?
  2. 2Does it inspect prompts and responses for sensitive data and injection attempts?
  3. 3Does it cover AI agents that can use tools, not only chat?
  4. 4How does it help with EU AI Act obligations?

For your risk register

Risk
Sensitive data leaks through AI tools, or AI applications are manipulated.
Control
AI use policy with discovery, prompt filtering and testing of AI applications.
Owner
CISO together with the data protection lead.
Measure
Share of AI tools in use that are approved.

A starting point: set the owner and measure to fit your organisation.

Products that provide it

Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.

Recent stories it addresses

591 stories in total

How we list vendors

  • A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
  • Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
  • Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
  • Logos, product names and quoted text belong to the vendors and are shown to identify them.
  • Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.