Category: Industry Analysis | Reading time: 3 min
Vanta announced on November 9 that it has signed a definitive agreement to acquire Pillar Security, a startup founded in 2023 by Ziv Karliner and Dor Sarig that discovers, tests and governs AI agents and blocks unauthorized agent actions while they run. Calcalist reported the price at about $150 million in cash and shares. Vanta did not confirm a figure.
What Vanta is buying
Pillar has a little over 20 employees, who will become Vanta's research and development center in Israel. According to Calcalist, the company raised $9 million, including an April 2025 seed round led by Shield Capital, and counts Fortune 500, technology and financial firms among its customers. Pillar's product will connect to Vanta's Trust Graph, which draws on more than 400 integrations.
This is Vanta's third acquisition, after Trustpage in January 2023 and Riskey in July 2025. In the Business Wire release, Vanta says it has more than 20,000 customers and passed $300 million in annual recurring revenue in April 2026.
The roadmap, in order
Vanta laid out when each piece arrives:
- January 2027: an AI inventory that maps apps, models, agents, skills and MCP servers to their owners, use cases, data access, vendors, risks and controls, plus runtime monitoring and detection. - Spring 2027: red-teaming. - Summer 2027: runtime enforcement, meaning agent actions that break policy are blocked as they happen.
Vanta's example: an agent tries to reach restricted data or share sensitive financial information in an unapproved channel. The action is blocked, the Vanta Agent alerts the owners, and an audit trail of the enforcement is generated.
Why it matters for agent deployers
The largest compliance platform is treating per-action control and evidence for AI agents as a core compliance need, not a side feature. Vanta's own research, cited in the announcement, found that 65% of IT and business leaders say agentic AI use is outpacing their understanding of it, and fewer than half have a framework for granting or limiting AI autonomy.
For teams already running agents that touch customer data or money, the timeline is the practical point. Enforcement and its audit trail are scheduled for summer 2027. Until then, the questions auditors and regulators ask about what an agent did, who authorized it and what was blocked still need answers from the controls and records teams have in place today.
Source: Vanta: Vanta acquires Pillar Security | Business Wire: Vanta to Acquire Pillar Security | Pillar Security founders' post | Calcalist/Ctech