Lema AI
Lema AI is an agentic AI platform for third-party risk management that uses autonomous agents to continuously analyze vendor artifacts, public intelligence, and organizational access data. Founded in 2023 by former Unit 8200 members, it serves Fortune 500 enterprises across healthcare, automotive, financial services, and AI sectors.
- Company typePrivate
- Founded2023
- HeadquartersTel Aviv, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Lema AI does
Lema AI (legally Lema Labs, Inc.) is an Israeli-American cybersecurity company founded in 2023 by three former Unit 8200 members — Eddie Dovzhik (CEO), Tomer Roizman (CTO), and Omer Yehudai (CPO) — that has built an agentic AI platform for third-party risk management (TPRM). The company operates dual headquarters with its US base in New York and engineering and R&D in Tel Aviv, employing approximately 35 people, and serves Fortune 500 enterprises and regulated organizations across healthcare, automotive, financial services, and AI sectors. Named enterprise customers include Well Health, OPENLANE, AlphaSense, Cresta, and Delta Dental.
The platform is architected around three integrated modules delivered as a unified product: Forensic AI Assessment analyzes vendor artifacts (SOC 2 reports, penetration tests, DPAs, privacy policies) using a patented zero-hallucination engine; Blast Radius Monitoring tracks how vendors are actually used inside the organization by ingesting telemetry from integrated identity providers (Okta, Microsoft Entra ID, Google Workspace), cloud security tools (Wiz, Netskope), and procurement systems (Zip, Ramp, Vendr, OneTrust); and Agentic Risk Engineering serves as the core AI engine where autonomous agents trained to emulate elite vulnerability researchers correlate artifacts, public intelligence, and relationship signals to surface genuine business threats with specific remediation steps. The platform claims the capacity to scan 16,000+ artifacts in 24 hours with 100% accuracy and reduce vendor assessment time from weeks to under five minutes.
Lema generates revenue through enterprise SaaS subscriptions sold via direct field sales with quote-based pricing and 30-minute demo-first engagement, targeting CISOs, security teams, and TPRM practitioners. The company has raised $24 million total — a $6.5M Seed co-led by F2 Venture Capital and Salesforce Ventures and a $17.5M Series A led by Team8 — and emerged from stealth in February 2026 with the explicit positioning of replacing compliance checklist-based TPRM with continuous, evidence-backed risk engineering for the era of third-party sprawl and AI tool proliferation.
Lema AI firmographics
Firmographics- Name
- Lema AI
- Legal name
- Lema Labs, Inc.
- Website
- https://lema.ai
- Company type
- Private
- Founded year
- 2023
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Lema AI is an agentic AI platform for third-party risk management that uses autonomous agents to continuously analyze vendor artifacts, public intelligence, and organizational access data. Founded in 2023 by former Unit 8200 members, it serves Fortune 500 enterprises across healthcare, automotive, financial services, and AI sectors.
- Ownership category
- akta.pro rank
Lema AI industry classification
Industry- Product category
- Third-Party Risk Management Software
- NAICS
- Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Third-Party Model/Vendor Risk & Supply-Chain Assurance (HDAAAMAK)
- akta.pro secondary industries
- Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA), Audit, Explainability & Accountability Tooling (traceability, reporting) (HDAAAKAL), LLM/GenAI Guardrails & Safety Controls (policy, filtering, routing) (HDAAAKAD)
Keywords
Where Lema AI is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices2 records
Markets served
Lema AI business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Enterprise SaaS Subscription: B2B SaaS platform for third-party risk management sold to enterprise customers on subscription basis. Revenue generated through annual or multi-year contracts with enterprise clients including Fortune 500 companies.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels6 records
Lema AI product offering
Product offeringCore offering
Lema AI provides an agentic AI platform for Third-Party Risk Management (TPRM) that automates continuous vendor security risk analysis. The platform replaces static compliance checklists with forensic artifact analysis, real-time blast radius monitoring, and autonomous AI agents that surface hidden risks and deliver specific remediation steps. It is sold as enterprise SaaS to security and risk teams at Fortune 500 and regulated organizations.
Product overview
Lema AI operates as a unified Agentic TPRM (Third-Party Risk Management) platform consisting of three integrated modules: Forensic AI Assessment, Blast Radius Monitoring, and Agentic Risk Engineering. The platform replaces traditional compliance-based TPRM approaches with continuous, AI-powered vendor risk analysis. Forensic AI Assessment automates artifact analysis of vendor documents; Blast Radius Monitoring tracks vendor access and scope changes in real time; and Agentic Risk Engineering serves as the core AI engine that correlates findings across all sources and delivers actionable remediation steps. The platform is designed to transform TPRM teams from compliance checkbox-checkers into Risk Engineers who uncover actual business-threatening risks.
Differentiator
Problem solved
Functional benefit
Products and services
- Forensic AI Assessment Automates the analysis of vendor reports and documents (SOC 2 reports, penetration tests, security policies, DPAs, privacy policies) to reveal what is hidden in submitted artifacts. Uses a patented zero-hallucination engine to cross-reference documents against each other and against operational reality, detecting misclassified vulnerabilities, hidden clauses, and policy inconsistencies. Built for enterprise security, vendor risk, and procurement teams.
- Blast Radius Monitoring Monitors the interface between the enterprise and vendors, revealing how vendors are actually used inside the organization. Tracks access to critical assets, data, procurement activity, and scope drift in real time, catching permission changes and exposure expansion before they become breaches. Targeted at enterprise security and risk teams needing continuous vendor exposure visibility.
- Agentic Risk Engineering The core AI engine that thinks like an elite vulnerability researcher. Forensically correlates artifacts, public intelligence, and relationship signals to surface risks that genuinely threaten the business, delivering exact remediation steps such as revoking access, enforcing least privilege, and removing indemnification clauses. Maps threat scenarios to business impact for enterprise security and risk teams.
Quantifiable outcome
- Vendor assessment time reduced from weeks to under 5 minutes
- +3 more outcomes
Companies that use Lema AI
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles1 record
Lema AI technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability8 records
Feature5 records
Lema AI partnerships and signals
Strategic signalScale indicators3 records
Recent moves7 records
Expansion highlights5 records
Lema AI competitors and assessment
Company assessmentDirect peers
- ProcessUnity: Direct TPRM competitor offering vendor risk management workflows including automated questionnaires, due diligence, and continuous monitoring for enterprise customers. Most comparable to Lema in target buyer (CISOs, TPRM practitioners) and core offering.
- AuditBoard: TPRM and audit management platform directly competing for enterprise compliance and vendor risk budgets. Lema's website runs comparison content against AuditBoard, indicating close overlap.
- Drata: Compliance automation platform with strong TPRM and vendor security review capabilities. Explicitly named in Lema's comparison pages as a peer; competes for the same mid-market and enterprise compliance buyer.
- Vanta: Trust management platform that automates security and compliance workflows including vendor risk reviews. Strong overlap with Lema on evidence collection and continuous monitoring for SaaS customers.
- Prevalent: Dedicated TPRM vendor offering vendor assessments, risk scoring, and continuous monitoring for enterprise customers. Most directly comparable product surface area to Lema in third-party risk.
- Whistic: Vendor security assessment platform (formerly SecurityScorecard's TPRM product line) focused on proactive vendor security reviews and trust exchanges. Competes for the same TPRM practitioner buyer.
Broad incumbents
- OneTrust: Larger GRC/privacy incumbent with TPRM as one module within a broad trust intelligence platform. Already named as an integration partner for Lema and competes for the same enterprise security and compliance buyer.
- ServiceNow Integrated Risk Management: Broad enterprise platform with TPRM and third-party risk capabilities inside its IRM suite. Explicitly named in Lema's comparison pages as a direct competitor for enterprise TPRM budgets.
- Bitsight: Cyber risk management platform with vendor risk monitoring capabilities. Lighter overlap with Lema's forensic analysis but competes for the same CISO budget allocated to third-party risk visibility.
- SecurityScorecard: Vendor risk scoring and monitoring platform widely used by enterprise security teams. Provides point-in-time and continuous vendor security ratings that overlap with Lema's Blast Radius Monitor use cases.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Lema AI social profiles
Digital presenceLema AI financial estimates
Financial estimateRevenue estimate
Valuation estimate
Lema AI leadership team
Management profileNumber of profiles
Profiles3 records
Lema AI funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Lema AI M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Lema AI
What does Lema AI do?
Lema AI provides an agentic AI platform for Third-Party Risk Management (TPRM) that automates continuous vendor security risk analysis. The platform replaces static compliance checklists with forensic artifact analysis, real-time blast radius monitoring, and autonomous AI agents that surface hidden risks and deliver specific remediation steps. It is sold as enterprise SaaS to security and risk teams at Fortune 500 and regulated organizations.
Is Lema AI a public or private company?
Lema AI is a private company. It is classified as venture growth investor backed and is currently operating.
When was Lema AI founded?
Lema AI was founded in 2023. It employs 11 to 50 people.
Where is Lema AI based?
Lema AI is headquartered in Tel Aviv, Israel, in the Middle East region.
How does Lema AI make money?
One revenue line is on record: enterprise SaaS Subscription.
Who are Lema AI's main competitors?
Direct peers on record are ProcessUnity, AuditBoard, Drata, Vanta, Prevalent and Whistic. Broad incumbents are OneTrust, ServiceNow Integrated Risk Management, Bitsight and SecurityScorecard.
Does Lema AI have an API?
No public API is recorded for Lema AI.
What industry is Lema AI in?
Lema AI's product category is Third-Party Risk Management Software. Its primary akta.pro industry code is HDAAAMAK, Third-Party Model/Vendor Risk & Supply-Chain Assurance, with a secondary code of HDAAAKAA, Model Governance, Risk & Compliance (GRC) Platforms. Its NAICS code is 54151 and its SIC code is 7370.