
Adaptive Security is OpenAI’s investment for AI cyber threats. The company was founded in 2024 by serial entrepreneurs Brian Long and Andrew Jones. Adaptive has raised $50M+ from investors like OpenAI, a16z and executives at Google Cloud, Fidelity, Plaid, Shopify, and other leading companies.
Adaptive protects customers from AI-powered cyber threats like deepfakes, vishing, smishing, and email spear phishing with its next-generation security awareness training and AI phishing simulation platform.
With Adaptive, security teams can prepare employees for advanced threats with incredible, highly customized training content that is personalized for employee role and access levels, features open-source intelligence about their company, and includes amazing deepfakes of their own executives.
Customers can measure the success of their training program over time with AI-powered phishing simulations. Hyper-realistic deepfake, voice, SMS, and email phishing tests assess risk levels across all threat vectors. Adaptive simulations are powered by an AI open-source intelligence engine that gives clients visibility into how their company's digital footprint can be leveraged by cybercriminals.
Today, Adaptive’s customers include leading global organizations like Figma, The Dallas Mavericks, BMC Software, and Stone Point Capital. The company has a world class NPS score of 94, among the highest in cybersecurity.
Learn more

c/side: The Client-Side Platform for Cybersecurity, Compliance, and Privacy
Monitoring third-party scripts effectively eliminates uncertainty, ensuring that you are always aware of what is being delivered to your users' browsers, while also enhancing script performance by up to 30%. The unchecked presence of these scripts in users' browsers can lead to significant issues when things go awry, resulting in adverse publicity, potential legal actions, and claims for damages stemming from security breaches. Compliance with PCI DSS 4.0.1, particularly sections 6.4.3 and 11.6.1, requires that organizations handling cardholder data implement tamper-detection measures by March 31, 2025, to help prevent attacks by notifying stakeholders of unauthorized modifications to HTTP headers and payment information. c/side stands out as the sole fully autonomous detection solution dedicated to evaluating third-party scripts, moving beyond reliance on merely threat feed intelligence or easily bypassed detections. By leveraging historical data and artificial intelligence, c/side meticulously analyzes the payloads and behaviors of scripts, ensuring a proactive stance against emerging threats. Our continuous monitoring of numerous sites allows us to stay ahead of new attack vectors, as we process all scripts to refine and enhance our detection capabilities. This comprehensive approach not only safeguards your digital environment but also instills greater confidence in the security of third-party integrations.
Learn more
Mindgard
Mindgard is an automated AI red teaming and offensive security platform purpose-built for AI systems and agents. It continuously red teams models, agents, and applications to find the vulnerabilities most likely to cause a breach, validates whether guardrails and controls hold, and shows security and engineering teams how to close each gap.
Tests emulate real attacker behavior across prompt injection, jailbreaks, data extraction, poisoning, and agentic tool abuse, with findings mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and the EU AI Act. Mindgard cuts AI risk assessment from weeks to hours and supports continuous compliance as AI systems change. Modules: AI Discovery & Recon, AI Red Teaming, AI Assessment, AI Runtime Protection, Model Scanning, AI Governance & Compliance.
Learn more
Protecto
As enterprise data explodes and is scattered across multiple systems, the oversight of privacy, data security and governance has become a very difficult task. Businesses are exposed to significant risks, including data breaches, privacy suits, and penalties. It takes months to find data privacy risks within an organization. A team of data engineers is involved in the effort. Data breaches and privacy legislation are forcing companies to better understand who has access to data and how it is used. Enterprise data is complex. Even if a team works for months to isolate data privacy risks, they may not be able to quickly find ways to reduce them.
Learn more