Well the first question is what do you mean by "security." Generally speaking most of the newer solutions can be categorized into three piles: companies who secure the agents, comapanies who secure their actions (usually but not always at the prompt level) and then finally people building the guardrails around the models and data themselves. In terms of efficacy, the guardrails around the models don't really work because it's too easy to tweak a prompt enough to hide the intent. I worked for an agentic security company and we saw agents getting past guardrails every week. There are some startups doing interesting things around securing the agent, but I would avoid the larger vendors like PAN, Crowdstrike, and Ping who are trying to recycle IAM for agents. It sorta works for single agents, it absolutely does not work for swarms....just ask Hugging Face. So that leaves you with security based on intent and actions, which I think is where this all needs to go. There are some interesting folks like Mill Pond Research that secure prompts by running them through a SLM focused on intent, or ones like my company, JLINC, which looks more at the intent of two agentic endpoints...we built it really for the world of agentic swarms. But for securing a single agent there about a dozen startups that have really interesting ways to do that which are WAY better than IAM.