What are the most valued startups in the AI safety market?
Download our beautiful pitch about the AI safety market

In our AI safety market deck, you will find everything you need to understand the market
The AI safety market includes startups focused on model evaluation, observability, security, governance, privacy and responsible AI deployment.
This ranking compares the latest reported or estimated valuations of 103 AI safety startups.
We update this list every month as new funding rounds, acquisitions and operating data become available.
And if you want to better understand this new industry, you can download our pitch covering the AI safety market.
A quick summary table
| Metric | Value |
|---|---|
| Most valuable AI safety startup | Arize AI, $550M–$850M |
| Second most valuable AI safety startup | Protect AI, $650M–$700M |
| Median AI safety startup valuation | Approximately $53M |
| Share of AI safety valuation captured by the top 10 | Approximately 46.6% |
| Top AI safety startup valuation vs. median | Approximately 13.3 times |
| Median AI safety valuation-to-capital-raised ratio | Approximately 5.3 times |
| AI safety startups valued at $1B+ | 0 |

This market map, featured in our AI safety market deck, highlights top companies and startups in the AI safety market
Top startups in the AI safety market ranked by valuation
Here is an updated table that ranks the top startups in the AI safety market based on their latest reported or estimated valuations.
If you want more detaild about their fundraising activity, you can check our list of the startups who have raised the most funding in the AI safety market.
| # | Startup Name | What They Do | Current Valuation ($) | Valuation Confidence Level | Valuation Type | Evidence Status | Total Funding ($) | Funding Confidence Level |
|---|---|---|---|---|---|---|---|---|
| 1 | Arize AI | AI observability and evaluation | $550M–$850M | Strong Confidence | Implied Valuation from Raise | Implied | $131M | Strong Confidence |
| 2 | Protect AI | Secures AI and ML systems | $650M–$700M | Strong Confidence | Acquisition Value | Estimated | $109M | Strong Confidence |
| 3 | Patronus AI | AI evaluation and simulation | $400M–$650M | Strong Confidence | Implied Valuation from Raise | Implied | $70M | Full Confidence |
| 4 | WitnessAI | Enterprise AI security platform | $390M–$650M | Partial Confidence | Implied Valuation from Raise | Implied | $86M | Strong Confidence |
| 5 | Galileo | GenAI evaluation and observability | $350M–$600M | Strong Confidence | Implied Valuation from Raise | Implied | $68M | Full Confidence |
| 6 | Noma Security | AI agent security platform | $400M | Strong Confidence | Announced Private Round Valuation | Observed | $132M | Strong Confidence |
| 7 | Robust Intelligence | Tests and protects AI models | $350M–$450M | Partial Confidence | Acquisition Value | Estimated | $44M | Strong Confidence |
| 8 | Gretel | Privacy-safe synthetic data platform | $320M–$400M | Strong Confidence | Acquisition Value | Estimated | $68M | Strong Confidence |
| 9 | ProRata AI | Publisher AI search and attribution | $270M–$450M | Strong Confidence | Implied Valuation from Raise | Implied | $75M | Strong Confidence |
| 10 | HiddenLayer | Protects AI models from attacks | $280M–$420M | Partial Confidence | Implied Valuation from Raise | Implied | $56M | Full Confidence |
| 11 | Bria | Licensed visual generative AI | $270M–$420M | Strong Confidence | Implied Valuation from Raise | Implied | $65M | Strong Confidence |
| 12 | Lakera | Secures generative AI applications | $280M–$320M | Strong Confidence | Acquisition Value | Estimated | $30M | Full Confidence |
| 13 | Fiddler AI | AI observability and governance | $220M–$350M | Strong Confidence | Implied Valuation from Raise | Implied | $94M | Strong Confidence |
| 14 | Aim Security | GenAI security platform | $180M–$280M | Low Confidence | Comparables-Based Estimate | Estimated | $28M | Full Confidence |
| 15 | Arthur AI | AI monitoring and guardrails | $160M–$300M | Partial Confidence | Comparables-Based Estimate | Estimated | $60M | Strong Confidence |
| 16 | Prompt Security | Enterprise GenAI runtime security | $180M–$250M | Partial Confidence | Acquisition Value | Estimated | $23M | Full Confidence |
| 17 | Grey Swan AI | Automated AI red teaming | $200M | Full Confidence | Announced Private Round Valuation | Observed | $46M | Partial Confidence |
| 18 | Virtue AI | Unified enterprise AI security | $150M–$250M | Partial Confidence | Implied Valuation from Raise | Implied | $30M | Partial Confidence |
| 19 | Cranium | Enterprise AI security governance | $150M–$240M | Partial Confidence | Comparables-Based Estimate | Estimated | $32M | Strong Confidence |
| 20 | CalypsoAI | Enterprise runtime AI guardrails | $180M | Full Confidence | Acquisition Value | Observed | $43M | Partial Confidence |
| 21 | Tonic AI | Synthetic data for software testing | $120M–$220M | Partial Confidence | Comparables-Based Estimate | Estimated | $45M | Strong Confidence |
| 22 | Geordie AI | AI agent security governance | $155M–$180M | Strong Confidence | Announced Private Round Valuation | Observed | $37M | Full Confidence |
| 23 | Credo AI | Enterprise AI governance software | $120M–$180M | Partial Confidence | Implied Valuation from Raise | Implied | $41M | Partial Confidence |
| 24 | Synthesized | AI-generated software testing data | $110M–$170M | Strong Confidence | Implied Valuation from Raise | Implied | $23M | Partial Confidence |
| 25 | Mostly AI | Enterprise synthetic data generation | $90M–$140M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $31M | Strong Confidence |
| 26 | Rhino Health | Federated AI for healthcare | $85M–$130M | Strong Confidence | Implied Valuation from Raise | Implied | $27M | Strong Confidence |
| 27 | Openlayer | AI evaluation governance platform | $80M–$120M | Strong Confidence | Implied Valuation from Raise | Implied | $19M | Strong Confidence |
| 28 | Anonos | Privacy-preserving enterprise data platform | $70M–$120M | Low Confidence | Comparables-Based Estimate | Estimated | $12M | Partial Confidence |
| 29 | Howso | Explainable AI reasoning platform | $70M–$120M | Low Confidence | Comparables-Based Estimate | Estimated | $31M | Strong Confidence |
| 30 | ModelOp | Enterprise AI governance software | $65M–$100M | Partial Confidence | Implied Valuation from Raise | Implied | $16M | Strong Confidence |
| 31 | Trust Lab | Online safety threat detection | $60M–$100M | Low Confidence | Implied Valuation from Raise | Implied | $15M | Strong Confidence |
| 32 | Cape Privacy | Privacy-preserving AI workflows | $55M–$100M | Low Confidence | Comparables-Based Estimate | Estimated | $25M | Full Confidence |
| 33 | TripleBlind | Privacy-preserving data collaboration | $55M–$90M | Low Confidence | Revenue or ARR Multiple Estimate | Estimated | $32M | Full Confidence |
| 34 | Datawizz AI | Builds specialized models from enterprise data | $52M–$87M | Partial Confidence | Implied Valuation from Raise | Implied | $13M | Partial Confidence |
| 35 | Duality Technologies | Privacy-enhanced data collaboration | $45M–$80M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $49M | Full Confidence |
| 36 | Private AI | PII detection and redaction | $45M–$80M | Partial Confidence | Comparables-Based Estimate | Estimated | $11M | Strong Confidence |
| 37 | Modulos | AI compliance automation platform | $45M–$75M | Strong Confidence | Implied Valuation from Raise | Implied | $11M | Strong Confidence |
| 38 | Acuvity | AI security and governance | $35M–$70M | Low Confidence | Acquisition Value | Estimated | $9M | Full Confidence |
| 39 | Bitfount | Federated clinical research AI | $40M–$65M | Strong Confidence | Implied Valuation from Raise | Implied | $13M | Full Confidence |
| 40 | Mindgard | AI security testing platform | $40M–$65M | Partial Confidence | Implied Valuation from Raise | Implied | $12M | Full Confidence |
| 41 | Aporia | AI observability and guardrails | $50M | Strong Confidence | Acquisition Value | Observed | $30M | Full Confidence |
| 42 | Pillar Security | Secures enterprise AI applications | $36M–$60M | Partial Confidence | Implied Valuation from Raise | Implied | $9M | Full Confidence |
| 43 | Guardrails AI | LLM validation guardrails platform | $35M–$60M | Partial Confidence | Implied Valuation from Raise | Implied | $8M | Full Confidence |
| 44 | ValidMind | Financial AI governance platform | $38M–$55M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $11M | Partial Confidence |
| 45 | Monitaur | Regulated AI governance software | $35M–$55M | Partial Confidence | Implied Valuation from Raise | Implied | $13M | Full Confidence |
| 46 | Stratyfy | Explainable lending decision software | $35M–$55M | Low Confidence | Comparables-Based Estimate | Estimated | $12M | Partial Confidence |
| 47 | 2021.AI | Enterprise responsible AI governance | $35M–$50M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $13M | Partial Confidence |
| 48 | Conjecture | Advanced AI alignment research | $30M–$50M | Partial Confidence | Comparables-Based Estimate | Estimated | $10M | Partial Confidence |
| 49 | Holistic AI | Enterprise AI governance platform | $25M–$50M | Low Confidence | Comparables-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 50 | TrojAI | AI model security testing | $25M–$50M | Low Confidence | Acquisition Value | Estimated | $9M | Partial Confidence |
| 51 | Fairgen | Synthetic consumer research responses | $28M–$45M | Partial Confidence | Implied Valuation from Raise | Implied | $11M | Strong Confidence |
| 52 | Deeploy | Explainable AI oversight platform | $26M–$42M | Partial Confidence | Implied Valuation from Raise | Implied | $9M | Partial Confidence |
| 53 | Lasso Security | LLM cybersecurity platform | $24M–$42M | Low Confidence | Comparables-Based Estimate | Estimated | $6M | Full Confidence |
| 54 | Invariant Labs | Secures autonomous AI agents | $20M–$45M | Low Confidence | Acquisition Value | Estimated | Undisclosed | Low Confidence |
| 55 | HoneyHive | AI evals and observability | $24M–$40M | Partial Confidence | Implied Valuation from Raise | Implied | $7M | Partial Confidence |
| 56 | Hazy | Enterprise synthetic data software | $20M–$40M | Low Confidence | Acquisition Value | Estimated | $11M | Partial Confidence |
| 57 | SurePath AI | Governs enterprise generative AI usage | $22M–$38M | Partial Confidence | Implied Valuation from Raise | Implied | $6M | Partial Confidence |
| 58 | Trustible | Regulated AI governance platform | $22M–$35M | Strong Confidence | Implied Valuation from Raise | Implied | $6M | Partial Confidence |
| 59 | Atla AI | AI agent evaluation engine | $20M–$35M | Partial Confidence | Implied Valuation from Raise | Implied | $6M | Strong Confidence |
| 60 | Armilla AI | AI insurance and warranties | $18M–$35M | Partial Confidence | Implied Valuation from Raise | Implied | $7M | Partial Confidence |
| 61 | Protecto | AI data privacy guardrails | $18M–$32M | Partial Confidence | Implied Valuation from Raise | Implied | $5M | Strong Confidence |
| 62 | Virtuous AI | Enterprise AI governance platform | $18M–$32M | Partial Confidence | Implied Valuation from Raise | Implied | $9M | Partial Confidence |
| 63 | FairNow | Enterprise AI governance software | $18M–$30M | Partial Confidence | Implied Valuation from Raise | Implied | $4M | Full Confidence |
| 64 | Jozu | Secure enterprise AI orchestration | $18M–$30M | Partial Confidence | Implied Valuation from Raise | Implied | $4M | Full Confidence |
| 65 | Unbound Security | Enterprise generative AI security | $16M–$27M | Strong Confidence | Implied Valuation from Raise | Implied | $4M | Full Confidence |
| 66 | Athina AI | AI app evaluation platform | $15M–$25M | Partial Confidence | Implied Valuation from Raise | Implied | $4M | Partial Confidence |
| 67 | Abzu AI | Explainable AI for scientific discovery | $14M–$22M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $8M | Partial Confidence |
| 68 | Datatron | MLOps governance and deployment | $10M–$22M | Low Confidence | Comparables-Based Estimate | Estimated | $9M | Partial Confidence |
| 69 | Deepchecks | ML and LLM validation | $10M–$20M | Strong Confidence | Acquisition Value | Estimated | $14M | Full Confidence |
| 70 | Statice | Privacy-safe synthetic data generation | $10M–$20M | Low Confidence | Acquisition Value | Estimated | Undisclosed | Low Confidence |
| 71 | Enkrypt AI | AI security and compliance | $10M–$18M | Low Confidence | Proxy-Based Estimate | Estimated | $2M | Full Confidence |
| 72 | Fairly AI | AI governance risk platform | $10M–$18M | Low Confidence | Comparables-Based Estimate | Estimated | $3M | Partial Confidence |
| 73 | Preamble | AI security and compliance | $8M–$18M | Low Confidence | Proxy-Based Estimate | Estimated | $4M | Partial Confidence |
| 74 | AIMon Labs | LLM hallucination monitoring tools | $8M–$15M | Partial Confidence | Implied Valuation from Raise | Implied | $2M | Full Confidence |
| 75 | Kanarys | Workplace equity analytics platform | $8M–$15M | Low Confidence | Acquisition Value | Estimated | $11M | Partial Confidence |
| 76 | Saidot | Responsible AI governance platform | $8M–$15M | Partial Confidence | Implied Valuation from Raise | Implied | $2M | Full Confidence |
| 77 | Zendata | AI governance and data privacy | $8M–$15M | Partial Confidence | Implied Valuation from Raise | Implied | $2M | Full Confidence |
| 78 | Betterdata | Programmable synthetic data platform | $8M–$14M | Low Confidence | Comparables-Based Estimate | Estimated | $2M | Partial Confidence |
| 79 | TrustWorks | Privacy and AI governance platform | $8M–$14M | Partial Confidence | Implied Valuation from Raise | Implied | $2M | Partial Confidence |
| 80 | Clearbox AI | Privacy-safe synthetic data generation | $7M–$14M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 81 | QuantPi | AI testing and validation | $7M–$14M | Low Confidence | Implied Valuation from Raise | Implied | $2M | Full Confidence |
| 82 | Certifai | Tests model fairness and robustness | $5M–$15M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 83 | Guardrail Technologies | AI behavioral security governance | $5M–$15M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 84 | trail | AI governance workflow copilot | $7M–$12M | Partial Confidence | Implied Valuation from Raise | Implied | $2M | Strong Confidence |
| 85 | Giskard AI | AI security testing platform | $6M–$12M | Low Confidence | Comparables-Based Estimate | Estimated | $2M | Strong Confidence |
| 86 | Mithril Security | Confidential computing for AI | $5M–$10M | Low Confidence | Acquisition Value | Estimated | $1M | Full Confidence |
| 87 | Axone | Decentralized AI resource orchestration | $4M–$10M | Low Confidence | Proxy-Based Estimate | Estimated | $0M | Low Confidence |
| 88 | VEIL.AI | Anonymizes sensitive healthcare data | $5M–$8M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | $1M | Partial Confidence |
| 89 | Inspeq AI | AI evaluation and observability | $4M–$7M | Partial Confidence | Implied Valuation from Raise | Implied | $1M | Partial Confidence |
| 90 | LangWatch | LLM evaluation and optimization | $4M–$7M | Partial Confidence | Implied Valuation from Raise | Implied | $1M | Full Confidence |
| 91 | Optimal | AI job-ad performance optimization | $4M–$7M | Low Confidence | Revenue or ARR Multiple Estimate | Estimated | $1M | Low Confidence |
| 92 | Bast AI | Explainable AI infrastructure platform | $3M–$7M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 93 | Cerevox | Enterprise AI development services | $3M–$7M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 94 | Headai | AI-powered decision intelligence tools | $3M–$7M | Low Confidence | Proxy-Based Estimate | Estimated | $0M | Low Confidence |
| 95 | KomplyAI | AI governance risk and compliance | $2M–$6M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 96 | TomtA AI | Produces privacy-safe enterprise data | $3M–$5M | Partial Confidence | Revenue or ARR Multiple Estimate | Estimated | Undisclosed | Low Confidence |
| 97 | CertKOR AI | AI regulatory compliance auditing | $2M–$5M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |
| 98 | Reliabl AI | Inclusive AI data annotation | $2M–$4M | Low Confidence | Proxy-Based Estimate | Estimated | $0M | Low Confidence |
| 99 | Suzan AI | Automates enterprise AI governance | $2M–$4M | Low Confidence | Revenue or ARR Multiple Estimate | Estimated | Undisclosed | Low Confidence |
| 100 | RevAIsor | Trustworthy AI compliance platform | $1M–$3M | Low Confidence | Proxy-Based Estimate | Estimated | Undisclosed | Low Confidence |

This chart, featured in our AI safety market deck, compares the 2026 size of the AI safety market with other markets of similar size
Key valuation trends in the AI safety market
Insights
- The ten most valuable AI safety startups capture approximately 46.6% of the ranking’s combined midpoint valuation, showing that value is concentrated among a relatively small group of established platforms.
- Arize AI, Protect AI, Patronus AI, WitnessAI and Galileo represent approximately $2.95B in combined midpoint valuation, with observability, evaluation and enterprise security dominating the top of the AI safety market.
- AI evaluation leaders Arize AI, Patronus AI, Galileo, Fiddler AI and Openlayer have a combined midpoint valuation of approximately $2.09B after raising about $382M.
- Lakera has one of the strongest capital-efficiency signals among major AI safety acquisitions, with an estimated $300M transaction value compared with only $30M in cumulative funding.
- Patronus AI has an estimated midpoint valuation of $525M on $70M raised, producing a valuation-to-funding ratio of approximately 7.5 times.
- Galileo follows a similar pattern, with an estimated midpoint valuation of $475M against $68M raised, equal to approximately seven times cumulative funding.
- Funding volume does not fully explain AI safety valuations. Noma Security raised $132M, the largest amount in the ranking, but its $400M valuation remains below several less-funded evaluation companies.
- The valuation curve falls quickly after the market leaders. The median AI safety startup is valued at approximately $53M, while Arize AI’s midpoint valuation is about 13.3 times higher.
- No company in this ranking has reached a confirmed or estimated valuation of $1B, suggesting that the AI safety market remains fragmented despite rapid investment and strategic acquisition activity.
- Privacy and synthetic-data companies Gretel, Bria, Rhino Health and Bitfount hold approximately $865M in combined midpoint value after raising about $173M, highlighting strong demand for controlled enterprise data access.

This chart, featured in our AI safety market deck, shows how HiddenLayer is positioned in AI safety
A few word about our methodology
As you can see, we built a database that ranks startups in the AI safety market based on their current valuation.
Estimating AI safety startup valuations is not always straightforward. Many companies do not publicly disclose their valuation, and the available information can vary widely depending on the company and its stage.
To build this ranking, we applied a structured valuation methodology and cross-checked information across multiple reliable sources.
Whenever possible, we relied on direct disclosures. These include announced valuations from completed funding rounds, public filings for listed companies, or official acquisition prices.
When an AI safety company is publicly listed, we use its current market capitalization as the reference valuation.
If an AI safety startup was acquired and no independent valuation can reasonably be estimated today, we use the acquisition price as the main reference point.
When a startup recently raised capital but the valuation was not disclosed, we estimate the implied valuation using typical dilution levels for that stage of fundraising.
In some cases, we also estimate valuations using operating metrics such as revenue, ARR, customer traction or enterprise adoption, combined with valuation multiples from comparable AI safety companies.
When direct financial data is not available, we may rely on carefully selected comparable startups and other signals such as hiring growth, investor quality, product traction, technical adoption or strategic partnerships.
All estimates follow a strict evidence hierarchy. Recent funding rounds with announced valuations carry the most weight, followed by strong operating metrics and comparable company analysis.
We also carefully evaluate the age of every data point. Recent information carries more weight, while older data is treated cautiously and adjusted conservatively when necessary.
Whenever information is uncertain or incomplete, we clearly distinguish between confirmed facts and reasonable inferences.
Because valuation data is not always fully public, each AI safety startup in the ranking is assigned a confidence level based on the reliability, recency and consistency of the available evidence.
Full confidence means the valuation is supported by strong and recent evidence. Strong confidence means the estimate is well supported but includes minor inference. Partial confidence means the estimate relies more heavily on indirect signals. Low confidence means available information is limited or inconsistent.
When confidence is lower, we take a more conservative approach by widening the valuation range. This helps reflect the uncertainty and increases the probability that the true valuation falls within the estimated range.
This reflects how we conduct all our research, including the work behind our report covering the AI safety market.
In a world where LLMs hallucinate and unreliable information is everywhere, our goal is simple: provide data you can trust.
If you want the full detail on a specific valuation estimate, feel free to contact us and we will gladly explain.
Finally, know that we update the dataset once per month, so come back here if you need fresh information.

This chart, featured in our AI safety market deck, shows annual funding in AI safety startups
Related blog posts
- The latest news in the AI safety market
- The latest funding news in the AI safety market
- The latest update in the AI safety market
- The evolution of funding activity in the AI safety market
- The main fundraising trends in the AI safety market
- How big is the AI safety market really?
- A complete list of business models in the AI safety market
Who is the author of this content?
NEW MARKET PITCH TEAM
We track new markets so founders and investors can move fasterWe build living “market pitch” documents for emerging markets: from AI to synthetic biology and new proteins. Instead of digging through outdated PDFs, random blog posts, and hallucinated LLM answers, our clients get a clean, visual, always-updated view of what’s really happening. We map the key players, deals, regulations, metrics and signals that matter so you can decide faster whether a market is worth your time. Want to know more? Check out our about page. You can also follow us on Instagram or on Facebook.
How we created this content 🔎📝
At New Market Pitch, we kept seeing the same problem: when you look at a new market, the data is either missing, paywalled, or buried in 300-page reports that feel like they were written in the 80s. On the other side, LLMs and random blog posts give you confident answers with no sources, and sometimes they just make things up. That’s not good enough when you’re about to invest real money or launch a company.
So we decided to fix the experience. For each market we cover, we build a structured database and update it on a regular basis. We track funding rounds, fund memos, M&A moves, partnerships, new products, policy changes, and the real activity of startups and incumbents. Then we turn all of that into a clear “market pitch” that shows where the opportunities are and how people actually win in that space.
Every key data point is checked, sourced, and put back into context by our team. That’s how we can give you both speed and reliability: fast coverage of new markets, without the usual guesswork.