AI Defense Stack

AI security posture management & discovery

SandboxAQ AQtive Guard AI-SPM: AI security posture management product

AQtive Guard AI-SPM is an AI security posture management product from SandboxAQ. It is a commercial product offered as: SaaS. Pricing model: not published.

  • Last reviewed
Visit AQtive Guard AI-SPM (opens in a new tab) Documentation (opens in a new tab)
Commercial Layer 2: Discovery and posture

Best for

  • Security teams that want one posture product covering AI asset discovery, shift-left scanning and runtime guardrails, and are willing to confirm availability with the vendor
  • SandboxAQ customers who already inventory cryptography in AQtive Guard and want AI assets in the same console

Consider instead if

  • You want an AI-SPM from a cloud security platform with documented attack path analysis. See Wiz AI-SPM.
  • You run on Azure and want AI posture inside the cloud provider's own security service. See Defender AI-SPM.

What AQtive Guard AI-SPM does

AQtive Guard is SandboxAQ's platform for cryptography posture, and AI-SPM is a second solution inside it, so buyers get AI posture next to crypto findings in one console. It finds models, agents and MCP servers by scanning GitHub and GitLab code and AWS accounts, where it detects Bedrock, SageMaker and Lex, and checks them against built-in and custom rules. Like Wiz and Orca it reaches into runtime, but through its own enforcement point: an on-premises AI Gateway proxy blocks or masks jailbreaks, toxic content, PII and secrets for agents that point their base URL at it, and a browser extension routes ChatGPT and Gemini use through the same gateway. Zscaler's AI-SPM leans on its data security platform instead. The public changelog has one alpha entry from January 2025, and the API reference needs a login.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
SandboxAQ Source, checked October 21, 2026: sandboxaq.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: aqtiveguard.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: sandboxaq.com (opens in a new tab)
Latest release
March 22, 2026 Source, checked October 21, 2026: aqtiveguard.com (opens in a new tab)
Deployment
SaaS Source, checked October 21, 2026: aws.amazon.com (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: aqtiveguard.com (opens in a new tab)
Website
sandboxaq.com Source, checked October 21, 2026: sandboxaq.com (opens in a new tab)
Documentation
docs.aqtiveguard.com Source, checked October 21, 2026: docs.aqtiveguard.com (opens in a new tab)
API reference
Not documented in the sources we checked
Quickstart
docs.aqtiveguard.com Source, checked October 21, 2026: docs.aqtiveguard.com (opens in a new tab)
Security page
Not documented in the sources we checked
Attestations or disclosure
Not documented in the sources we checked

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where AQtive Guard AI-SPM fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that AQtive Guard AI-SPM covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L2 Discovery Discovery and posture Primary Find the AI models, services, agents, MCP servers and AI apps in use, and check how each is configured and exposed. Follows its category, AI security posture management & discovery
L6 Runtime Runtime guardrails Also covers Documents guardrails enforcement on every AI interaction without code changes. Enforces guardrails on every AI interaction with no code changes; An on-premises AI Gateway blocks or masks jailbreaks, prompt injection, toxicity, PII and secrets for agents and browser AI use

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to AQtive Guard AI-SPM, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM01 Prompt Injection The AI Gateway's jailbreak guardrail detects prompt injection and attempts to bypass safety controls. Enforces guardrails on every AI interaction with no code changes; An on-premises AI Gateway blocks or masks jailbreaks, prompt injection, toxicity, PII and secrets for agents and browser AI use
LLM02 Sensitive Information Disclosure Gateway guardrails block or mask PII and secrets such as API keys before a request reaches the model provider. Enforces guardrails on every AI interaction with no code changes; An on-premises AI Gateway blocks or masks jailbreaks, prompt injection, toxicity, PII and secrets for agents and browser AI use
LLM03 Supply Chain Evaluates AI assets for insecure dependencies and runs security checks on MCP connectors. Evaluates AI assets for exploitable weaknesses, insecure dependencies and exposure risks; Runs automated security evaluation of MCP connectors across an environment

Not mapped in our analysis: LLM06, LLM08. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI security posture management & discovery, ranked within the category by Coverage Score.

Snyk Evo AI-SPM

Snyk

Commercial
  • SaaS
  • CLI

Maps AI models, agents, datasets and MCP servers across code and apps, scores model risk and enforces policy.

Best for: Teams that already use Snyk and want an inventory of AI models, agents and MCP servers tied to policy in the same platform

Coverage Score 64 out of 100
  • LLM03 Supply Chain
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • +1 more

Reviewed

Microsoft Defender for Cloud AI security posture management

Microsoft

Commercial
  • Cloud-native

Finds AI workloads across Azure, AWS and Google Cloud and flags risks with recommendations and attack paths.

Best for: Teams already using Defender for Cloud that want AI workloads in Azure, AWS and Google Cloud added to their posture view

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain

Reviewed

Wiz AI Security Posture Management (AI-SPM)

Google (Wiz)

Commercial
  • SaaS
  • Cloud-native

Finds AI services across cloud accounts without agents and maps misconfigurations and attack paths.

Best for: Cloud security teams that want agentless discovery of AI services and their risks inside a cloud security platform

Coverage Score 54 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain
  • LLM06 Excessive Agency

Reviewed

AQtive Guard AI-SPM FAQ

Is AQtive Guard AI-SPM generally available?

The December 3, 2025 release said it was available to a limited set of customers ahead of broad availability in 2026. The March 22, 2026 post lists capabilities as shipping but uses no availability label, so confirm with the vendor.

Is it open source?

No. It is a commercial product, and we found no public source repository for it.

Does SandboxAQ publish a price?

Not on the pages we opened. The post offers a demo request and the launch release states no price or plan.

Key facts you can cite

We have no commercial relationship with SandboxAQ.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.