Vanta Agrees to Buy Pillar Security, Plans Paid AI Governance in January 2027
Calcalist puts the price at about $150 million in cash and shares. Vanta says AI Governance becomes a paid offering in January 2027, with blocking of agent actions due that summer.
TL;DR
- Vanta agreed to buy AI-agent security startup Pillar on November 9, for about $150 million in cash and shares, Calcalist reported.
- Vanta is buying a paid add-on for its 20,000-plus customers, billed from January 2027, months before blocking ships.
- Vanta hasn't priced the tier or said whether Pillar keeps selling on its own, and Drata already sells agent blocking in limited availability.
Vanta is buying an AI-agent security startup and plans to charge separately for what it builds.
Vanta signed a definitive agreement on November 9 to acquire Pillar Security, a startup founded in 2023 that finds, tests and blocks the actions AI agents take. Vanta's announcement gives no price. Calcalist reported the deal at about $150 million in cash and shares.
The pricing line sits in Vanta's own post: "AI Governance by Vanta will be available as a paid offering in January 2027." Vanta hasn't published a price for it. Vanta looks to be buying a second product to sell to customers it already has.
The buyers are already Vanta customers
Vanta says it has more than 20,000 customers, up from 16,000 in the first quarter of 2026. It also says ARR passed $300 million in April, up 63% from a year earlier. By Vanta's count, early access to its AI governance product was six times oversubscribed.
Those customers have already put Vanta through security review and signed a contract, which likely makes them the cheapest place to sell a new paid tier. Vanta also sells through AWS Marketplace, where it said sales passed $100 million, as we covered.
Pillar brings the product and a small team. It has raised $9 million, and its 20-plus staff become Vanta's Israel R&D center, Calcalist reported. Calcalist says Pillar's customers include Fortune 500 firms.
Neither company has said whether Pillar keeps selling on its own. Vanta's previous acquisition, Riskey, was absorbed into its Vendor Risk Management product, Rajesh Beri wrote in The D[AI]LY Brief.
Billing comes before blocking
Vanta's post dates each step of the roadmap:
- AI inventory and runtime detection in January 2027
- Red teaming in spring 2027
- Runtime enforcement, which blocks unauthorized agent actions, in summer 2027
Beri wrote that "inline blocking comes about six months after you start paying."
Drata already sells blocking. It moved its AI Agent Governance product to limited availability on August 4, Beri reported. The product includes an MCP proxy that checks each agent tool call against policy before it runs. Full support covers only agents built on Anthropic, and OpenAI, Vertex AI and Bedrock support is still in development.
A buyer that wants blocking before summer 2027 can get it from Drata now, for Anthropic agents. For a Vanta customer, that means adding a second compliance vendor or moving the audit work, and either is likely to cost more than waiting for Vanta's summer release.
Vanta has dated the AI governance bill but not priced it
Drata is making the same sale in its own base, and it already has blocking in limited availability, with full support only for agents built on Anthropic. Vanta's customers get the bill in January and the blocking about six months later.
inline blocking comes about six months after you start paying.
Vanta's AI Governance becomes a paid offering in January 2027, with runtime enforcement due in summer 2027. Vanta hasn't published a price.
