Policy enforcement and audit for enterprise AI use, alongside correlated threat investigation

ThreatLens addresses the gap that opens when staff start using ChatGPT, Gemini, and similar services faster than the security organization can govern them. Its AI governance product inspects each outbound request in line, classifies what it contains, and then acts: redact the sensitive fields, route the prompt to an approved internal model, block it outright, or let it pass. Every one of those decisions is logged with the reasoning behind it, so a data protection officer can later show which categories of information left the organization, which did not, and under which policy version each call was judged.

The AI Assurance line handles the inventory side of the same problem. It builds an AI bill of materials covering the models, datasets, prompts, and third-party vendors an enterprise depends on, then checks that set continuously against the controls a regulated business has to evidence. Separately, ThreatLens Core works on conventional security telemetry, pulling signals from SIEM, EDR and XDR, and identity platforms and correlating them into enriched, prioritized investigations rather than isolated alerts. Documented integrations include Splunk, Microsoft Sentinel, Palo Alto Networks, and CrowdStrike. The company was founded in 2023 and is based in New York.