The deal. Vanta (San Francisco), which automates security and compliance programs like SOC 2 audits, announced on Nov 9 that it signed a definitive agreement to acquire Pillar Security (Tel Aviv, founded 2023 by Ziv Karliner and Dor Sarig). Vanta did not publish a price. Calcalist reports the deal at about $150 million, a mix of cash and shares. Pillar had raised about $9 million, including an April 2025 seed led by Shield Capital. Its 20-plus employees become Vanta's Israel R&D center, and both founders stay on. Closing timing is Undisclosed. It is Vanta's third acquisition, after Trustpage (2023) and Riskey (2025).
What Pillar does, in plain words. It finds the AI apps, agents, models and MCP servers (the connectors that let agents use tools) running inside a company, attacks them the way a hacker would to see what breaks, and then watches them live and blocks an agent that tries something it shouldn't, like reading restricted data. Vanta plans to ship it in stages: AI inventory and runtime monitoring in January 2027, red teaming in spring 2027 and runtime blocking in summer 2027.
Why it matters. This is a compliance vendor buying enforcement. Vanta's pitch is that auditors now want proof an agent stays inside its policy, not a policy PDF, so it is wiring Pillar's tests and blocks into its Trust Graph to produce that evidence automatically. Vanta says it has more than 20,000 customers (up from 16,000 in Q1 2026) and passed $300M ARR in April, growing 63%. It lands the same week CrowdStrike agreed to buy Fiddler AI and Dreadnode (reported ~$495M combined) and reports that Palo Alto Networks is circling Clutch Security: AI-agent security is being bought, not built. At a reported ~$150M on $9M raised, Pillar's backers get a strong early exit.