Cranium
Discover, govern, secure and prove enterprise AI and agents
Overview
Cranium is an enterprise AI security and governance platform spun out of KPMG Studio in 2023. It inventories models, agents and AI vendors, maps them to the EU AI Act, NIST AI RMF and ISO 42001, red-teams and monitors them at runtime, and produces AI Cards as shareable evidence. In May 2026 it acquired the agentic-AI security company Aiceberg.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 14 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
Use cases
What you can produce with Cranium
- A living inventory and AI bill of materials covering models, agents, datasets and AI vendors, including shadow AI
- Runtime observation of model and agent sessions, with risk signals and token-cost tracking
- AI policy mapped to the EU AI Act, NIST AI RMF and ISO 42001, with continuous compliance posture
- Adversarial testing and runtime threat defence for models and agents
- Shareable Cranium AI Cards and trust hubs as audit-ready evidence for regulators and customers
- Agent discovery that finds AI agents and the tools they invoke (AgentSensor)
Cranium covers the whole AI governance job in one platform: finding shadow AI, watching agents at runtime, mapping controls to the EU AI Act, NIST AI RMF and ISO 42001, and handing auditors or customers an AI Card as evidence. The May 2026 Aiceberg acquisition adds agent-security depth and a new CTO.
It is sold only through demos, with no published price, and its value assumes a sizeable AI estate and a risk function to run it. Worth shortlisting for regulated enterprises, including ASEAN banks and insurers facing AI rules; too heavy for small teams.
What we found
Cranium is an AI security and governance platform that came out of KPMG Studio, the accounting firm's incubator. It launched out of stealth in April 2023 with $7 million from KPMG and SYN Ventures, and that October raised a $25 million Series A led by Telstra Ventures, taking its disclosed funding to $32 million. Chief executive Jonathan Dambrot co-founded it with Felix Knoll and Paul Spicer. Its press releases are datelined Short Hills, New Jersey.
The product has broadened from inventory into a full loop. Cranium now describes five steps: discover every model, agent, dataset and AI vendor in use, including shadow AI; observe live model and agent behaviour; govern against policy mapped to the EU AI Act, NIST AI RMF and ISO 42001; secure through red-teaming and runtime defence; and prove compliance with shareable AI Cards and trust hubs. October 2025 brought AgentSensor for finding agents and the tools they call, CloudSensor for cloud alerts, a ComplianceAgent for questionnaires and Arena Shield for testing guardrails.
The biggest change came in May 2026, when Cranium acquired Aiceberg, an agentic-AI security company. Aiceberg's chief executive, Alex Schlager, became Cranium's chief technology officer and the whole Aiceberg team moved across. The same day Cranium announced an integration with Weights & Biases and an alliance with the advisory firm ISTARI. Cranium's own site lists analyst recognition, including a Gartner Cool Vendor mention and a TAG Infosphere top-five ranking; those are the vendor's claims rather than findings we checked.
There is no public price or self-serve plan; every route leads to a demo, and Cranium says it is SOC 2 Type 2 compliant and ISO 27001 certified. A free online learning environment teaches AI security and red-teaming, but it is training, not the product. Cranium suits large regulated enterprises that need an inventory of their AI and audit-ready evidence. A company with two vendor chatbots will find it more than it needs.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including Cranium's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Cranium unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Cranium directly →
Spotted something out of date? Suggest an update →
Alternatives to Cranium
More in Security & Safety
