AI security platform for enterprise risk discovery, supply chain protection, and runtime defense
Noma Security builds a security-first platform for managing AI risk across the enterprise stack—discovery, supply chain validation, red teaming, and runtime protection. The stack reveals a modern, cloud-native architecture (AWS, GCP, Azure, Kubernetes, Temporal) paired with ML-native tooling (PyTorch, Hugging Face, SageMaker, Vertex AI), indicating the platform itself learns from and operates on AI systems rather than bolting security onto them. All 10 open roles are senior-level, and hiring spans the U.S. and Israel, signaling execution velocity on a product still navigating market fit within a nascent category.
Noma Security provides cybersecurity and governance tools for enterprises building and deploying AI agents at scale. The platform surfaces three core capabilities: continuous discovery and inventory of AI deployments, supply chain security validation, and runtime protection with red teaming. The company targets Fortune 500 organizations and serves both security and engineering teams. Founded in 2023 and based in New York, Noma is backed by Ballistic Ventures, Glilot Capital, Cyber Club London, Databricks Ventures, and SVCI. Active projects span AI vulnerability research, governance workflows, customer implementations, and support infrastructure—indicating early focus on moving customers from proof-of-concept to operational security.
Frontend: React, GraphQL. Cloud: AWS, GCP, Azure with Kubernetes orchestration (EKS, AKS, Helm). Backend: Go, Python, JavaScript. Data: Snowflake, PostgreSQL. ML: PyTorch, Hugging Face, SageMaker, Vertex AI.
Noma provides AI security and governance for enterprises. Core functions: continuous AI discovery and inventory, AI supply chain security, red teaming, and runtime protection to mitigate AI risk and ensure compliance.
Other companies in the same industry, closest in size
Noma Security's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.