Category and positioning
Where AI-SPM sits relative to AI TRiSM, CNAPP, DSPM, ASPM and LLM guardrails. What we test versus what a runtime guardrail proxy enforces, and why the two are complementary.
Industry analyst relations.
Penaxtra briefs industry analysts on the AI Security Posture Management market. This page is for analysts at Gartner, Forrester, IDC, GigaOm and independent research firms. Briefings are open, on the record, and grounded in the shipped product - not a roadmap deck.
What we brief on.
Every topic below maps to a shipped subsystem you can see in a live demo, with control-mapped output at the end.
Product and architecture
The scan engine, the self-hosted runtime gateway with Ed25519-signed policy distribution, AI asset inventory, cloud AI posture, and the compliance-evidence pipeline. Data residency is a first-class design constraint.
Methodology and evidence
The multi-judge consensus method, framework control-ID mapping across six frameworks, and how a finding becomes audit evidence. We are direct about what is measured versus what is still being calibrated.
EU and Turkey market
Why we build for regulated mid-market teams facing EU AI Act and ISO/IEC 42001 obligations, and the Turkish-market depth (BDDK, KVKK, native Turkish coverage) that sets our regional focus.
Request a briefing.
Briefings run 30 to 45 minutes: a live product walkthrough, the architecture, and open Q&A. We can follow up with the fact sheet, a scoped demo workspace, and written answers to a research questionnaire.
Schedule an analyst briefing
Reach the team through the contact form and note that you are an industry analyst. We reply from a named technical contact, not a shared alias.
Contact us →Read the fact sheet
Company and product facts on one page: the entity, the market category, the frameworks covered, the deployment model, and the open-source footprint.
Open fact sheet →Newsroom and milestones
Product availability, the open-source releases, and the public footprint an analyst can verify independently.
Open newsroom →Primary sources for your research.
We would rather you verify than take a slide at face value. Everything below is public.
Product overview
Every capability, anchored to the subsystem that ships it.
Open →Architecture
Trust boundary, signed rule distribution, control-plane split.
Open →Security
Encryption, tenant isolation, audit log, coordinated disclosure.
Open →Trust portal
Data residency, subprocessors, certification status.
Open →Compliance mapping
Six frameworks at control-ID level with cross-framework overlaps.
Open →Open source
Apache-2.0 tooling published under our own name.
Open →Briefing requests welcome.
Analysts covering AI security, AI-SPM, AI TRiSM, LLM security or EU AI Act readiness: reach out for a live walkthrough and a research questionnaire response. No client relationship required.