What Pangea does

Pangea Cyber Corporation, founded in 2021 and headquartered in Palo Alto, California, operated an API-driven Security Platform-as-a-Service targeting cloud-native developers and application builders. The platform consolidated multiple cybersecurity functions — including authentication, authorization, secrets management, secure audit logging, and data redaction — into a single set of developer-accessible security microservices callable via unified APIs. This design enabled software teams to embed security capabilities directly into application code rather than integrating multiple point solutions, compressing the time-to-security from months to minutes.

The company's flagship product, AI Guard, combined multiple detectors (Prompt Guard, Redact, Secure Audit Log, Sanitize) into configurable defense-in-depth recipes protecting generative AI and retrieval-augmented generation (RAG) applications from prompt injection attacks, authorization bypass, and sensitive data exposure — addressing vulnerabilities catalogued in the OWASP Top 10 for LLMs. Pangea also offered deployable Edge Services on Google Cloud Platform via Kubernetes and Helm for low-latency cloud-native security processing.

Pangea generated revenue through a usage-based, consumption-pricing model on its self-serve developer platform. The company raised $52 million in total venture funding across a $25 million Series A (May 2022, led by Ballistic Ventures) and a $26 million Series B (November 2022, led by GV). In September 2025, CrowdStrike acquired Pangea for approximately $260 million, integrating its AI security guardrail technology into the Falcon platform to address emerging AI agent-era threats across its enterprise customer base.

Name

Pangea

Legal name

Pangea Cyber Corporation

Website

https://pangea.cloud

Company type

Private

Founded year

2021

Operating status

Acquired

Headcount range

11–50 employees

Short description

Pangea provides an API-first Security Platform-as-a-Service for cloud-native developers, offering authentication, secrets management, logging, and AI security guardrails. Acquired by CrowdStrike in 2025, its technology now protects enterprise AI applications within the Falcon ecosystem.

Ownership category

akta.pro rank

Product category

Application Security

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Container & Kubernetes Application Security (HDADACAE)

akta.pro secondary industry

Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB)

Keywords

• Application security platform
• API security services
• AI security guardrails
• Developer security tools
• Identity and access management

Headquarters

HQ city

Palo Alto

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. API-based Security Services (Platform-as-a-Service): Pangea generates revenue by providing security microservices and APIs on a consumption-based, pay-as-you-go basis. Developers and application builders subscribe to and consume security services (authentication, secrets management, logging, redaction, AI Guard) via API calls, paying based on usage volume. This model aligns with the developer-centric, self-serve go-to-market approach.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels2 records

Core offering

Pangea provides an API-driven Security Platform-as-a-Service that enables developers to embed security features — including authentication, authorization, secrets management, audit logging, redaction, and AI security guardrails — directly into applications via simple API calls. The platform offers pre-built security building blocks that integrate as modular services, allowing application teams to consume security capabilities on demand without building them from scratch.

Product overview

Pangea is an API-driven Security Platform-as-a-Service targeting cloud-native application builders and developers. The platform unifies a comprehensive set of cybersecurity functions—including authentication, secrets management, logging, and AI security—into a single developer-oriented cybersecurity hub accessible via API. Its core product is AI Guard, which combines multiple sub-product detectors (Prompt Guard, Redact, Secure Audit Log, Sanitize, AuthZ) into configurable security recipes that protect generative AI and RAG applications from prompt injection, sensitive data exposure, and authorization bypass. All services are delivered as microservices callable through a unified API.

Differentiator

Problem solved

Functional benefit

Products and services

• AI Guard
• Prompt Guard
• Sanitize
• Redact
• AuthZ
• Secure Audit Log

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature8 records

Partnerships

Two partnerships are on record, tiered flagship and core.

• CrowdStrikeflagshipStrategic or Co-development PartnerCrowdStrike acquired Pangea Cyber for approximately $260 million in 2025, integrating Pangea's AI security guardrail technology into the Falcon security ecosystem as part of CrowdStrike's strategy to build a next-generation identity and AI security platform. This acquisition extended CrowdStrike's capabilities to address AI agent-era security threats including prompt injection attacks.
• Google Cloud Platform (GCP)coreTechnology or IntegrationPangea offers Edge Services (such as Redact and AI Guard) deployable in Google Cloud Platform environments using Kubernetes and Helm. This integration enables Pangea customers to run security services as edge workloads within their GCP infrastructure, providing low-latency, cloud-native security processing.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Salt Security: Salt Security specializes in API security, including discovery, posture management, and runtime protection. It is comparable to Pangea's broader API security positioning around authentication, secrets management, and API threat protection (acquired by Akamai).
• Wallarm: Wallarm offers API security, bot management, and LLM protection for cloud-native applications. Its combined API and AI security positioning closely mirrors Pangea's unified platform approach.
• Lakera: Lakera provides AI application security guardrails focused on prompt injection, data leakage prevention, and LLM input/output protection. It is the most direct competitor to Pangea's AI Guard offering, serving similar developers and enterprise security teams.
• Robust Intelligence: Robust Intelligence provides AI application security testing and runtime protection for ML models and LLM applications, addressing prompt injection and data leakage. It is a close comparable to Pangea's AI Guard, and was itself acquired by Cisco.
• Traceable AI: Traceable AI provides API security and AI/LLM application protection, combining traditional API threat detection with LLM-specific guardrails. It is directly comparable to Pangea's API-first, AI-aware security platform approach.
• HiddenLayer: HiddenLayer offers AI security solutions for enterprises, including model and application protection against adversarial attacks, prompt injection, and data exposure. It competes directly with Pangea in the AI security guardrails category.

Broad incumbents

• Snyk: Snyk is an established developer security platform covering code, dependencies, containers, and IaC. While broader than Pangea, it shares the developer-first GTM motion and targets similar cloud-native application security use cases.
• Auth0 (Okta): Auth0, now part of Okta, is a leading identity and authentication platform offering SSO, MFA, and API-based auth services. It is comparable to Pangea's Authentication API and AuthZ offerings, and Okta Ventures is a Pangea investor, signaling adjacent positioning.
• Cloudflare: Cloudflare provides a broad security and edge platform with API security, bot management, WAF, and increasingly AI/LLM security features. Its Workers AI and edge compute capabilities overlap with Pangea's edge deployment model.

Emerging players

• Rebuff.ai: Rebuff.ai focuses on prompt injection detection and prevention for LLM applications. It is an emerging player with narrower scope than Pangea's AI Guard but directly comparable functionality in prompt-injection protection.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/PangeaCyber
• Facebookfacebook.com/pangeacyber
• LinkedInlinkedin.com/company/pangea-cyber

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds2 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pangea