Cranium

Cranium is an AI security and governance platform founded in 2022 within KPMG's startup incubator and spun out as an independent company in April 2023.

Updated 26 Jun 2026 Reviewed by 7wData

Visit Website

Profile

AI security and governance platform that helps enterprises discover, test, and monitor AI systems for vulnerabilities and compliance across their models and supply chains.

Cranium is an AI security and governance platform founded in 2022 within KPMG's startup incubator and spun out as an independent company in April 2023. Co-founded by Jonathan Dambrot (CEO), Felix Knoll, Paul Spicer, and Daniel Christman—all veterans of KPMG's cybersecurity and AI practices—the company addresses a critical gap in enterprise AI risk management: the disconnect between data science teams deploying AI at scale and security teams tasked with governing it. The platform helps organizations gain visibility into their AI systems through model discovery and inventory, conduct security testing including red-teaming and prompt injection detection, enforce compliance across frameworks like NIST RMF and the EU AI Act, and monitor third-party AI risks across vendor ecosystems.

Cranium raised $25 million in Series A funding in October 2023 led by Telstra Ventures, bringing total capital to $32 million. As of mid-2026, the company operates with 62 employees and reported $7.3 million in annual recurring revenue as of September 2025. In May 2026, Cranium acquired Aiceberg, an agentic AI security startup, bringing its CTO Alex Schlager into the technical leadership and deepening the platform's agent-monitoring capabilities.

The company has forged strategic partnerships with Weights & Biases to embed AI security into model development workflows and with ISTARI for cyber-resilience advisory integration. Recent product launches include Arena (a red-teaming platform for the full AI supply chain), AgentSensor, CloudSensor, ComplianceAgent, and Arena Shield for vulnerability simulation and remediation. Cranium has won recognition from Gartner, Fortune (Top 50 cybersecurity companies of 2025), and TAG Infosphere (Top Five AI Security Vendor). The company serves financial services, life sciences, retail, and government sectors, though it has not publicly named individual customer accounts.

Products by Cranium

C ComplianceAgent ComplianceAgent™ is an enterprise AI governance tool designed for organizations managing complex AI-driven operations, particularly those in regulated No reviews yet Be the first to review →

Who buys this

Enterprise financial services firms managing third-party AI and vendor risk
Life sciences and healthcare organizations subject to AI regulatory requirements
Federal, state, and municipal government agencies handling sensitive data and critical infrastructure
Large retailers and consumer packaged goods companies deploying AI across business units
Technology companies building and deploying generative AI applications

Strengths and what to watch

Strengths

KPMG pedigree and $32M Series A funding provide credibility and runway in an emerging category where large enterprises demand established players
Comprehensive platform spanning discovery, testing, compliance, and third-party risk in a single system rather than point solutions
Recent acquisitions (Aiceberg) and strategic integrations (Weights & Biases, ISTARI) expanding agentic AI governance and model lifecycle coverage

Watch for

Customer concentration risk: case studies highlight financial services and life sciences but named customers remain undisclosed; revenue heavily weighted to a small number of enterprise accounts typical of early-stage B2B SaaS
Aggressive M&A strategy (Aiceberg acquisition in May 2026) undertaken with $32M total funding and $7.3M ARR suggests capital intensity; runway dependent on continued fundraising or reaching profitability faster than disclosed
Intense competitive landscape: HiddenLayer, Robust Intelligence, Protect AI, and CalypsoAI operate in overlapping AI security segments; Cranium's differentiation rests on breadth (governance + security) and KPMG ties rather than defensible IP

Recent moves

Key Information

Industry: AI Observability
Founded: 2022

Frequently Asked Questions

What is Cranium?

Cranium is an AI security and governance platform that helps enterprises discover, test, and monitor AI systems for vulnerabilities and compliance. Founded in 2022 as a KPMG startup spinout, it addresses enterprise AI risk management across models and supply chains.

What capabilities does Cranium offer?

Cranium's platform spans AI model discovery and inventory, security testing including red-teaming and prompt injection detection, compliance enforcement across NIST RMF and EU AI Act frameworks, and continuous monitoring of third-party vendor AI risks for comprehensive enterprise AI governance coverage.

Who founded Cranium?

Cranium was founded in 2022 by Jonathan Dambrot (CEO), Felix Knoll, Paul Spicer, and Daniel Christman—all veterans from KPMG's cybersecurity and AI practices. It later spun out independently from KPMG's venture studio as a standalone firm in April 2023.

Which industries does Cranium serve?

Cranium serves financial services firms managing vendor AI risk, life sciences and healthcare organizations subject to AI regulatory requirements, federal and state government agencies handling sensitive data, large retailers and CPG companies deploying AI, and technology firms building generative applications.

How much funding has Cranium raised?

Cranium raised $25 million in Series A funding in October 2023, led by Telstra Ventures, bringing total capital to $32 million. As of September 2025, the company reported $7.3 million in annual recurring revenue and operated with 62 team members.

What is Cranium's recent product focus?

In May 2026, Cranium acquired Aiceberg to significantly strengthen its agentic AI security and governance capabilities. Recent product launches include Arena for red-teaming, AgentSensor and CloudSensor for AI monitoring, ComplianceAgent for governance, and Arena Shield for vulnerability simulation and remediation.

How Cranium compares

Direct head-to-head against 3 competitors. Picked by 7wData.

Positioning: AI security and governance platform that helps enterprises discover, test, and monitor AI systems for vulnerabilities and compliance across their models and supply chains.
Customer segments: Enterprise financial services firms managing third-party AI and vendor risk
Strengths: KPMG pedigree and $32M Series A funding provide credibility and runway in an emerging category where large enterprises demand established players
Watch for: Customer concentration risk: case studies highlight financial services and life sciences but named customers remain undisclosed; revenue heavily weighted to a small number of enterprise accounts typical of early-stage B2B SaaS
Recent moves: Cranium acquires Aiceberg to strengthen agentic AI security and governance; CEO Alex Schlager joins as CTO

Positioning: Enterprise AI security platform covering model lifecycle from supply chain through runtime, recognized as Gartner Cool Vendor for AI Security.
Customer segments: Fortune 500 CISOs and AI executives in finance, defense, government. Application developers shipping AI-enabled products.
Strengths: Runtime threat detection outside the inference path using deterministic classifiers, covering agentic AI workflows without performance impact.
Watch for: Complex deployment requires large ML and infrastructure teams, high technical expertise barrier slows adoption for resource-constrained security organizations.
Recent moves: March 2026: launched AI Runtime Security module purpose-built for autonomous agent monitoring and threat response.

Positioning: AI/ML security platform covering model scanning, red teaming, and runtime protection across the full ML lifecycle.
Customer segments: Fortune 500 enterprises in finance, healthcare, government deploying proprietary models or integrating LLMs into production workflows.
Strengths: Guardian scans 35+ model formats detecting deserialization attacks and backdoors, backed by threat intel from 17,000 plus security researchers.
Watch for: Acquisition by Palo Alto Networks (completed July 2025) means roadmap and pricing now controlled by a larger vendor, reducing standalone flexibility.
Recent moves: Acquired by Palo Alto Networks for $500M plus, completed July 22, 2025, with technology integrated into Prisma AIRS platform.

Positioning: AI model security platform acquired by Cisco, now integrated into Cisco AI Defense for enterprise AI protection.
Customer segments: Fortune 100 enterprises in finance, travel, consulting, and government deploying AI at scale. Security and compliance buyers.
Strengths: Algorithmic red teaming that automatically tests AI models against 100 plus safety and security issues before deployment.
Watch for: Post-acquisition absorption into Cisco may slow product iteration and reduce responsiveness to non-Cisco-stack customers.
Recent moves: January 2025: Cisco launched AI Defense, the commercial product built on Robust Intelligence capabilities after September 2024 acquisition.

Sources

www.cranium.ai — Company overview, product portfolio, mission statement
techcrunch.com — Founders, KPMG spinout details, origin story, initial team composition
siliconangle.com — Series A funding of $25M in October 2023, Telstra Ventures as lead investor, total funding to $32M
www.prnewswire.com — CEO Jonathan Dambrot statement, Series A funding details, use of proceeds, KPMG and SYN Ventures participation
tracxn.com — Employee count 62 as of April 30 2026, company financials, team composition
getlatka.com — $7.3M ARR as of September 2025, $21.9M valuation, bootstrapped model confirmation
www.prnewswire.com — Arena platform launch May 15 2025, red-teaming capabilities, compliance alignment
www.prnewswire.com — October 2025 feature releases: AgentSensor, CloudSensor, ComplianceAgent, Arena Shield
www.businesswire.com — Aiceberg acquisition in May 2026, Alex Schlager as new CTO, technology integration details
cranium.ai — Leadership team: Jonathan Dambrot (CEO), Felix Knoll (COO/CRO), Paul Spicer (VP IT Security), Vivek Radia (CFO), advisory board composition
cranium.ai — Financial services customer use case showing discovery, testing, and governance workflow
cranium.ai — Life sciences customer segment, compliance and risk management application