Sonoma
Sonoma Security is a San Francisco-based enterprise software company that provides an MCP governance platform for securing, monitoring, and controlling AI agent deployments across regulated industries including financial services, healthcare, retail, and manufacturing.
- Company typePrivate
- Founded2023
- HeadquartersSan Francisco, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Sonoma does
Sonoma Security, Inc. is a privately held, San Francisco-based software company founded in 2023 that builds an enterprise MCP (Model Context Protocol) Governance Platform for securing and operationalizing AI agent deployments. The platform is delivered as a single integrated product organized around three capability pillars: MCP Enablement (self-service catalog, visual workflow builder, one-click deployment), Governance & Compliance (granular entitlement policies, data flow governance rules, comprehensive audit logging), and Security Infrastructure (MCP supply chain vulnerability scanning, prompt injection protection, secure gateway enforcement). Sonoma holds SOC 2 Type II and ISO 27001 certifications and offers both SaaS and self-hostable deployment to address data residency requirements of regulated buyers.
The company's go-to-market is enterprise field sales, with demo-based CTAs targeting security and compliance leaders at organizations deploying AI agents. Revenue is generated through quote-based annual enterprise subscriptions for the MCP Governance Platform, with no publicly disclosed pricing tiers or named customer logos in the available data. The product targets a horizontal set of verticals — Financial Services, Healthcare, Retail, and Manufacturing — with tailored use cases (trading and risk assessment, clinical decision support, dynamic pricing, production automation), while the primary buyer persona is enterprise security teams responsible for AI agent governance.
Sonoma has established integration compatibility with 30+ enterprise platforms spanning model providers (OpenAI, Anthropic, AWS Bedrock, Vertex AI), developer tools (GitHub, Cursor, Devin), and business applications (Salesforce, Slack, Notion, Jira, HubSpot, Linear, Airtable). The company operates with 1-10 employees, has not disclosed any external funding rounds or institutional investors, and maintains a public status page reporting 99.758% uptime, consistent with limited but stable production traffic.
Sonoma firmographics
Firmographics- Name
- Sonoma
- Legal name
- Sonoma Security, Inc.
- Website
- https://sonoma.dev
- Company type
- Private
- Founded year
- 2023
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Sonoma Security is a San Francisco-based enterprise software company that provides an MCP governance platform for securing, monitoring, and controlling AI agent deployments across regulated industries including financial services, healthcare, retail, and manufacturing.
- Ownership category
- akta.pro rank
Sonoma industry classification
Industry- Product category
- AI Agent Governance & Security Software
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Data Security & Access Governance for Data (Entitlements/Policy Enforcement) (HDAEADAH)
Keywords
Where Sonoma is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Sonoma business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- MCP Governance Platform Subscription: Enterprise subscription for MCP governance platform providing security, compliance, and enablement tools for AI agent infrastructure
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise MCP Governance Platform |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
Sonoma product offering
Product offeringCore offering
Sonoma sells an enterprise MCP (Model Context Protocol) Governance Platform that provides secure agent connectivity, entitlement policies, data flow governance, and audit logging for organizations deploying AI agents built on MCP. The platform combines MCP enablement tooling for non-technical users with enterprise-grade governance, compliance, and security controls (including prompt injection protection and supply chain vulnerability scanning), delivered as an integrated, SOC 2 Type II and ISO 27001 certified solution that is also available for self-hosting.
Product overview
Sonoma is a single unified product offering: the Sonoma MCP Governance Platform. This platform provides three integrated capability pillars — MCP Enablement (self-service catalog, visual workflow builder, one-click deployment), Governance & Compliance (granular entitlement policies, data flow governance rules, comprehensive audit logging), and Security Infrastructure (MCP supply chain vulnerability scanning, prompt injection protection, secure gateway enforcement). All capabilities are delivered as an integrated enterprise-ready solution with SOC 2 Type II and ISO 27001 certifications.
Differentiator
Problem solved
Functional benefit
Products and services
- MCP Governance Platform Enterprise-grade governance, security, and enablement platform for AI agents built on the Model Context Protocol (MCP). It provides secure agent connectivity, granular entitlement policies, data flow governance rules, comprehensive audit logging, MCP supply chain vulnerability scanning, prompt injection protection, secure gateway enforcement, a self-service MCP catalog, a visual MCP workflow builder, and one-click workflow deployment. It is SOC 2 Type II and ISO 27001 certified and available as a self-hosted or cloud deployment. It is sold to enterprise security and compliance teams deploying AI agents across financial services, healthcare, retail, and manufacturing.
Quantifiable outcome
- Enterprise teams can deploy MCP governance in days rather than months
Companies that use Sonoma
Customer profileSegments5 records
Ideal customer profiles2 records
Sonoma technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature9 records
Sonoma partnerships and signals
Strategic signalPartnerships
29 partnerships are on record, tiered core.
- OpenAIcoreOpenAI is listed as one of the major enterprise platforms that uses MCP, indicating integration compatibility with Sonoma's governance platform.
- AnthropiccoreAnthropic's Claude is featured on the Sonoma website as a supported AI client, indicating integration with Sonoma's MCP infrastructure.
- MicrosoftcoreMicrosoft (MS Copilot) is listed among enterprise platforms using MCP.
- GitHubcoreGitHub (including GitHub Copilot) is listed among enterprise platforms using MCP.
- SalesforcecoreSalesforce is listed among enterprise platforms using MCP.
- AWS BedrockcoreAWS Bedrock is listed among enterprise platforms using MCP.
- LangChaincoreLangChain is listed among enterprise platforms using MCP.
- SlackcoreSlack is listed among enterprise platforms using MCP.
- NotioncoreNotion is listed among enterprise platforms using MCP.
- JiracoreJira is listed among enterprise platforms using MCP.
- HubSpotcoreHubSpot is listed among enterprise platforms using MCP.
- GleancoreGlean is listed among enterprise platforms using MCP.
- CursorcoreCursor is listed among enterprise platforms using MCP.
- PerplexitycorePerplexity is listed among enterprise platforms using MCP.
- Devin (Cognition)coreDevin by Cognition is listed among enterprise platforms using MCP.
- CrewAIcoreCrewAI is listed among enterprise platforms using MCP.
- AutoGencoreAutoGen is listed among enterprise platforms using MCP.
- Hugging FacecoreHugging Face is listed among enterprise platforms using MCP.
- Vertex AIcoreGoogle Vertex AI is listed among enterprise platforms using MCP.
- IntercomcoreIntercom is listed among enterprise platforms using MCP.
- LinearcoreLinear is listed among enterprise platforms using MCP.
- AirtablecoreAirtable is listed among enterprise platforms using MCP.
- LlamaIndexcoreLlamaIndex is listed among enterprise platforms using MCP.
- n8ncoren8n is listed among enterprise platforms using MCP.
- DustcoreDust is listed among enterprise platforms using MCP.
- GumloopcoreGumloop is listed among enterprise platforms using MCP.
- Unify GTMcoreUnify GTM is listed among enterprise platforms using MCP.
- AnvilogiccoreAnvilogic is listed among enterprise platforms using MCP.
- TorqcoreTorq is listed among enterprise platforms using MCP.
Scale indicators1 record
Recent moves5 records
Expansion highlights4 records
Sonoma competitors and assessment
Company assessmentDirect peers
- Portkey: Portkey is an AI gateway and observability platform for LLM applications that offers policy controls, guardrails, and traffic management across model providers. It is directly comparable to Sonoma because both sit as an enforcement and governance layer between enterprise AI agents and underlying model/tool APIs.
- Helicone: Helicone provides an AI observability, monitoring, and gateway product for LLM applications, including request logging, rate limits, and policy enforcement. It overlaps with Sonoma's audit-logging, governance, and secure-gateway capabilities for AI agent traffic.
- Arthur AI: Arthur AI is an AI observability and security platform that monitors, evaluates, and enforces policy on production model and agent workloads. It is comparable to Sonoma in targeting enterprise buyers who need governance and guardrails on deployed AI agents.
- Lakera: Lakera (Guardrails) is a security platform purpose-built for LLM applications, offering prompt-injection protection, content moderation, and policy enforcement. Its emphasis on securing LLM/agent traffic aligns directly with Sonoma's prompt-injection protection and secure gateway enforcement features.
- Prompt Security: Prompt Security offers an enterprise platform for protecting AI assistants, agents, and LLM applications from prompt injection, data leakage, and supply-chain risks. It competes head-to-head with Sonoma on AI-agent-specific security and governance controls.
- Troj.AI: Troj.AI provides AI security and risk management for generative AI and machine learning systems, including red-teaming, policy enforcement, and vulnerability scanning. It is comparable to Sonoma as an enterprise-grade AI safety and governance vendor.
- Noma Security: Noma Security is an AI and LLM security platform focused on enterprise AI applications, providing model and agent risk management, data protection, and policy controls. It targets the same enterprise security buyer as Sonoma for AI agent governance.
- HiddenLayer: HiddenLayer delivers AI/ML security solutions including threat detection, model protection, and adversarial defense for enterprise AI deployments. It is a direct competitor in the broader AI-security category that Sonoma's MCP governance product addresses.
Broad incumbents
- Cloudflare: Cloudflare operates a broad internet security, networking, and developer platform that includes AI gateway, Workers AI, and bot/agent protection capabilities. It is comparable as a large incumbent that could natively absorb MCP-style governance and security into its existing enterprise footprint.
- Datadog: Datadog provides enterprise observability and security monitoring, including LLM observability features for AI applications. It is a broad incumbent competing for the same enterprise spend on AI workload visibility and policy enforcement that Sonoma targets.
Market position
Strengths4 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights6 records
Customer concentration
Sonoma social profiles
Digital presenceSonoma compliance and trust
Trust signalCompliance2 records
Sonoma financial estimates
Financial estimateRevenue estimate
Valuation estimate
Sonoma leadership team
Management profileNumber of profiles
Sonoma funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Sonoma M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Sonoma
What does Sonoma do?
Sonoma sells an enterprise MCP (Model Context Protocol) Governance Platform that provides secure agent connectivity, entitlement policies, data flow governance, and audit logging for organizations deploying AI agents built on MCP. The platform combines MCP enablement tooling for non-technical users with enterprise-grade governance, compliance, and security controls (including prompt injection protection and supply chain vulnerability scanning), delivered as an integrated, SOC 2 Type II and ISO 27001 certified solution that is also available for self-hosting.
Is Sonoma a public or private company?
Sonoma is a private company. It is classified as unknown and is currently operating.
When was Sonoma founded?
Sonoma was founded in 2023. It employs 1 to 10 people.
Where is Sonoma based?
Sonoma is headquartered in San Francisco, United States, in the North America region.
How does Sonoma make money?
One revenue line is on record: MCP Governance Platform Subscription.
Who are Sonoma's main competitors?
Direct peers on record are Portkey, Helicone, Arthur AI, Lakera, Prompt Security, Troj.AI, Noma Security and HiddenLayer. Broad incumbents are Cloudflare and Datadog.
Does Sonoma have an API?
No public API is recorded for Sonoma.
What industry is Sonoma in?
Sonoma's product category is AI Agent Governance & Security Software. Its primary akta.pro industry code is HDAEADAH, Data Security & Access Governance for Data (Entitlements/Policy Enforcement). Its NAICS code is 5132 and its SIC code is 7372.