PAGES
← all tools
◆ AI Runtime Defense & Guardrails

Lasso Security

commercial

Lasso Security protects employee GenAI use, LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. applications and AI agents with runtime guardrails, data-leak prevention and CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware.-only guardrail models.

Summary

Lasso Security is a commercial ai-security platform that enforces runtime guardrails, data-leak prevention, and CPU-only guardrail models for employee GenAI use, LLM applications, and AI agents. It runs as a service, making it suitable for organizations managing AI risk profiles, and its documentation positions it alongside other controls for data loss prevention. The project launched in 2023.

Lasso Security protects employee GenAI use, LLM applications and AI agents with runtime guardrails, data-leak prevention and CPU-only guardrail models.

How Lasso Security helps

Which employees are pasting sensitive data into GenAI tools?

monitors employee GenAI use at runtime and flags prompts containing sensitive data before they leave the organization

Which prompts sent to an LLM application are attempts at prompt injection?

applies runtime guardrails to inbound prompts and blocks or flags the ones matching prompt-injection patterns

Is a response from an AI agent about to leak data it shouldn't?

inspects outbound responses for sensitive data and stops the leak before it reaches the user

Can guardrails run against AI traffic without adding GPU infrastructure?

runs its guardrail models on CPU, so the checks sit inline with LLM traffic without provisioning specialized hardware

Where does AI risk sit alongside the rest of our data-loss-prevention controls?

positions its runtime guardrails and data-leak prevention as a layer that works alongside existing DLP controls rather than replacing them

all 7 features, with the evidence for each →

Languages

Not documented

Features

7 capabilities

Built from Lasso Security's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Lasso Security offers you

  • Administrative audit log1
  • Import from a competing product1
  • SIEM forwarding1
All capabilities 7 capabilities
AI bill of materials (AI-BOM) shipped Discovers and inventories AI building blocks — models, MCP servers and tools, vector databases, frameworks, and AI services — from code, cloud, and runtime sources, with first-seen and last-seen timestamps, a per-component count of dependent agents, and flags for newly discovered components awaiting AppSec review. 3 releases · first seen Oct 2026

release

  • Adds an AI-BOM that inventories AI building blocks — models, MCP servers and tools, vector databases, frameworks, and AI services — discovered from code, cloud, and runtime sources, with first-seen and last-seen timestamps per component.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Oct 2026 · source · release history
  • Surfaces a Used by count per component showing how many agents depend on it, and links each vulnerable component through to the AI-SPM graph with the full exposure path highlighted. announced · Oct 2026 · source · release history
  • Flags newly discovered components so AppSec can review them before they spread to additional agents. announced · Oct 2026 · source · release history
AI component vulnerability analysis shipped Categorizes vulnerabilities in discovered AI components against the OWASP Top 10 for Agentic Applications, names the responsible code or configuration per finding, and links each vulnerable component through to the AI-SPM graph with the full exposure path highlighted. 2 releases · first seen Oct 2026

release

  • Surfaces a Used by count per component showing how many agents depend on it, and links each vulnerable component through to the AI-SPM graph with the full exposure path highlighted. announced · Oct 2026 · source · release history
  • Categorizes component vulnerabilities against the OWASP Top 10 for Agentic Applications (e.g. ASI05 Unexpected Code Execution, ASI04 Agentic Supply Chain Vulnerabilities), with each finding naming the responsible code or configuration. announced · Oct 2026 · source · release history
Claude Enterprise activity ingestion shipped Connects a Claude Compliance API key to Lasso to pull user activity and conversation-level message content from Claude Enterprise and Claude Platform into Lasso's inventory. 2 releases · first seen Sep 2026

Also counts toward: Import from a competing product

release

  • For Claude Enterprise organizations, ingests message content for each chat when a Compliance Access Key minted by the primary owner is added to Lasso, enabling conversation-level inspection for sensitive data, secrets, and policy violations. announced · Sep 2026 · source · release history
  • Adds support for connecting a Claude Compliance API key to Lasso, pulling from the Compliance API's activities endpoint to ingest Claude Enterprise and Claude Platform user activity into Lasso's inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Sep 2026 · source · release history
AI-BOM integration into AI Security Platform pipeline shipped Feeds the AI-BOM component inventory and agent mapping into the downstream stages of Lasso's AI Security Platform, including AI risk management, Automated AI Red Teaming, and runtime protection. 1 release · first seen Oct 2026

release

  • Integrates the AI-BOM into the Discovery stage of Lasso's AI Security Platform, feeding component inventory and agent mapping into AI risk management, Automated AI Red Teaming, and runtime protection stages. announced · Oct 2026 · source · release history
AI discovery inventory for Claude users shipped Surfaces Claude users in Lasso's AI discovery inventory with a per-user timeline of MCP servers connected and skills invoked, alongside other agents and AI applications. 1 release · first seen Sep 2026

release

  • Surfaces each Claude user in Lasso's AI discovery inventory alongside existing agents and AI applications, with a per-user timeline of MCP servers connected and skills invoked. announced · Sep 2026 · source · release history
Audit trail and compliance evidence for Claude activity shipped Stores a durable audit trail of org-level Claude events and user activity alongside the broader AI environment to support SOC 2, ISO, and GDPR evidence collection. 1 release · first seen Sep 2026

Also counts toward: Administrative audit log

release

  • Builds a durable audit trail of org-level Claude events and user activity, stored alongside the rest of the AI environment for SOC 2, ISO, and GDPR evidence. announced · Sep 2026 · source · release history
SIEM and SOAR alert routing for Claude policy violations shipped Forwards Claude policy violations detected by Lasso to a connected SIEM or SOAR platform for triage alongside alerts from other AI platforms. 1 release · first seen Sep 2026

Also counts toward: SIEM forwarding

release

  • Routes Claude policy violations to a connected SIEM or SOAR platform for triage alongside alerts from other AI platforms. announced · Sep 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Lasso Security, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Lasso Security puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

2 entries

  1. October 20261
  2. September 20261

    2 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →