Pangea
Pangea is an AI security company that helps organizations secure AI from cloud to code. Its platform provides visibility, governance, detection and response, and application guardrails to protect employee AI use and homegrown AI applications from prompt injection, sensitive-data leakage, malicious files, and other AI risks.
At a Glance
- Enterprise security teams and CISOs
- Cloud and mobile application developers
- SaaS platform providers
- Security operations centers
- +2 more
AI Tools by Pangea
(1)
Pangea
AI Security Platform and Guardrails
Discussions
No discussions yet
Be the first to start a discussion about Pangea
Latest News
CrowdStrike to acquire Pangea to secure every layer of enterprise AI
Pangea launches Pangea Labs research division, AI Red Teaming services, and AI Prompt Injection Attack Taxonomy
Pangea publishes study of nearly 330,000 prompt-injection attempts from its $10,000 challenge
Pangea publishes a deep dive into LLM attack surfaces and model vulnerabilities
Products & Services
Unified platform for AI visibility, governance, detection and response, and application protection across workforce usage and homegrown AI applications.
Collectors and a central console that provide visibility into enterprise AI activity, policy violations, alerts, audit trails, investigation, and responsive actions, with SIEM export.
AI guardrail service that detects and blocks sensitive-data leakage, malicious files/content, inappropriate content, and other threats across AI interactions.
Prompt-injection defense for LLM applications, including detection of obfuscated and advanced malicious prompts.
Market Position
Pangea positioned itself first as a Security Platform-as-a-Service: a unified, API-first alternative to assembling fragmented open-source and commercial security tools. Its later positioning is an AI-security platform spanning workforce AI use, AI application guardrails, and runtime detection and response, competing for AI-security budgets with vendors such as Lakera, Protect AI, Robust Intelligence, HiddenLayer, CalypsoAI, Palo Alto Networks, Netskope, and Zscaler. Its differentiators are a single developer-oriented framework, gateway/API/MCP deployment, integrated threat intelligence, and combined guardrails plus enterprise AI visibility.
Leadership
Founders
Oliver Friedrichs
Founder and CEO of Pangea; serial cybersecurity entrepreneur who previously co-founded Phantom Cyber, the security orchestration, automation and response company acquired by Splunk in 2018, and has founded four cybersecurity companies.
Sourabh Satish
Co-founder and CTO of Pangea; previously co-founded Phantom Cyber with Oliver Friedrichs and helped build its security-orchestration platform before the Splunk acquisition.
Executive Team
Oliver Friedrichs
Founder and CEO
Serial cybersecurity founder and former Phantom Cyber co-founder/CEO; Phantom Cyber was acquired by Splunk in 2018.
Sourabh Satish
Co-founder and CTO
Former Phantom Cyber co-founder and technology leader; responsible for Pangea's security-platform and API architecture.
Board of Directors
Founding Story
After the Phantom Cyber team integrated hundreds of enterprise security-product APIs for customers, Friedrichs and Satish heard a similar need from software-development teams: there was no common interface or lingua franca for embedding security functions into applications. Pangea was started in October 2021 to make security easy to build into any application through a unified Security Platform-as-a-Service, inspired by the developer simplicity of AWS, Twilio, and Stripe.
Business Model
Revenue Model
API and cloud-service consumption for embedded security capabilities, together with enterprise subscriptions/licensing for hosted AI-security platform deployments, Edge and Private Cloud deployments, and professional AI Red Teaming services. Pangea also offered a free-to-start developer experience.
Pricing Tiers
Pangea's Series B announcement said developers could create an account and explore available services for free; enterprise pricing is sales-led.
Target Markets
- Enterprise security teams and CISOs
- Cloud and mobile application developers
- SaaS platform providers
- Security operations centers
- Companies deploying employee AI tools
- Healthcare, education, financial-services, and other regulated industries building AI applications
- Secure employee use of ChatGPT, Copilot, and other AI tools
- Protect customer-facing and internal homegrown AI applications
- Secure RAG applications and AI agents connected to enterprise data and tools
- Prevent sensitive-data leakage and compliance violations
- AI runtime visibility, governance, and detection-and-response for security teams
- AI red teaming, prompt-injection testing, and AI product security assessments
- Grand Canyon Education
- Reach Security
- Codex Health
- RadiusXR