Vanta’s Strategic Acquisition of Pillar Security: A New Era for AI Governance and Real-Time Enforcement
In a significant move aimed at enhancing the intersection of artificial intelligence (AI) governance and security, Vanta, a San Francisco-based trust platform, has announced its intent to acquire Pillar Security, a startup founded by a former Aqua Security product manager. This acquisition is set to integrate Pillar’s innovative technologies for agent monitoring and security enforcement with Vanta’s extensive governance capabilities. Khush Kashyap, Vanta’s GRC Senior Director, articulated that the merger would enable organizations to seamlessly discover AI assets, implement policy-driven guardrails, block unsafe actions, and generate audit-ready evidence.
Vanta, recognized for its role in helping businesses demonstrate the trustworthiness of their AI systems, positions itself to enhance its offerings by incorporating Pillar’s strength in real-time monitoring and enforcement of AI agents. Kashyap emphasized the necessity of not only proving AI trustworthiness to stakeholders but also having control over the operations of AI systems. She stated, "Vanta helps thousands of companies prove their AI is trustworthy to the people buying from them. But companies running AI need the other half too, which is seeing what’s actually running and controlling it. That’s what Pillar builds."
Founded in 2023, Pillar Security has grown rapidly, employing 33 professionals and successfully closing a $9 million seed funding round led by Shield Capital in April 2025. Although a spokesperson for Vanta disputed reports claiming the acquisition price was $150 million, the specific details of the deal remain undisclosed.
Expanding AI Security Collaboration
Pillar’s inception was driven by a desire to protect organizations during their AI transformation. Ziv Karliner, Pillar’s founder, noted that the collaboration with Vanta would facilitate faster adoption and extension of services, thereby expanding the coverage for both companies. He commented on the competitive landscape of the AI security market, emphasizing the importance of establishing a strong reputation and research base as they venture into this challenging domain. "The AI security market is a very busy space. There are a lot of different angles to it, and as a young company, we have to build our reputation on the research side," said Karliner.
By merging Vanta’s governance capabilities with Pillar’s strengths, the partnership aims to serve a broader customer base. Kashyap highlighted the growing necessity for organizations to not only create policies but also to actively enforce them, particularly in an environment where AI operates at an unprecedented speed that makes traditional quarterly or annual governance processes inadequate. "AI agents operate at a pace that makes quarterly or annual governance cycles insufficient. Controls need to apply at runtime," she stated.
Vanta already plays a paramount role in translating governance controls into actionable evidence, which is acknowledged by more than 20,000 companies. The integration with Pillar is expected to convert governance requirements into enforceable standards actively blocking unauthorized actions as they occur.
Addressing the Governance Enforcement Gap
One of the central challenges facing organizations is the disconnect between the established policies governing AI operations and the actual behavior of AI agents. According to Kashyap, this gap is evident when enforcement measures lack the governance context, leading to mere alerts devoid of actionable insight, while governance efforts without enforcement often result in nothing more than a paper trail. "Enforcement without governance context is like alerts. But governance without enforcement is just paper trail," she summarized, referencing the concept of "compliance theater."
Kashyap further elaborated on how current approaches to AI governance predominantly involve control design, policy formulation, documentation, risk assessments, and frameworks—processes that, while useful for understanding obligations, fall short of facilitating proactive, real-time enforcement. Vanta’s acquisition of Pillar marks a pivotal step toward bridging this gap, transforming governance from a static process into a dynamic, real-time enforcement mechanism.
"The goal is to govern the apps in seconds. If we don’t, we are just causing more documentation and a lot of paper trails," she asserted. Leveraging Pillar’s suite of capabilities—ranging from discovery and monitoring to blocking unauthorized actions—coupled with Vanta’s visibility into assets and data, organizations can automate controls aligned with their AI policies.
The Future of AI Trust and Governance
The acquisition reflects a growing recognition of the urgent need for robust AI governance frameworks, especially as corporations increasingly turn to AI to drive innovation. Karliner remarked, "GRC turning into enforcement is a call of the hour in order to accelerate everything." This statement underscores the necessity of evolving security programs to meet the fast-paced demands of modern technology landscapes.
Ultimately, this merger illustrates a critical shift in how organizations will manage the complexities of AI governance. As Vanta and Pillar unite their strengths, they aim to not only advance their collective vision but also to support the larger customer base navigating the complexities of AI trust, security, and compliance. By enabling organizations to implement effective control measures while minimizing risks, this partnership is poised to redefine the future landscape of AI governance, ensuring that security and trust keep pace with technological advancement.