# AI red teaming for autonomous purchasing agents

Canonical: https://www.safecli.org/research?q=AI%20red%20teaming%20for%20autonomous%20purchasing%20agents
Discovery checked: 2026-11-07T14:58:21.008Z

## Competitive market
Several direct alternatives are indexed. Recent momentum is not yet established.
Red hot: at least 6 direct vendors, 3 sourced signals in 180 days, 2 companies and 2 signal types, after multi-angle discovery. Greenfield candidate: at most 2 direct and 3 adjacent vendors plus 2 recent unmet-need sources from different publishers. Low counts alone never qualify.

## Counterhold
Domain: counterhold.com
Adversarial testing agentic-commerce
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:30.066Z
Details: https://www.safecli.org/company/counterhold.com
Source: Counterhold: Adversarial testing for AI agents that move money or make deals — https://counterhold.com/
Source: AI agents giving away money: a sourced incident tracker | Counterhold — https://counterhold.com/incidents
Source: Attack scenarios for testing AI agents that move money | Counterhold — https://counterhold.com/scenarios
Source: AI agent regulation: money, liability and consumer law | Counterhold — https://counterhold.com/regulation
Source: Delivered, but ‘never arrived’: E-commerce support agent test scenario | Counterhold — https://counterhold.com/scenarios/delivered-but-never-arrived
Source: Counterhold: Adversarial testing for AI agents that move money or make deals — https://counterhold.com/

## gordonguard
Domain: pypi.org
Adversarial testing guardrails
Enterprise: Enterprise claimed
API: API mentioned
Evidence checked: 2026-11-07T14:58:30.066Z
Details: https://www.safecli.org/company/pypi.org
Source: PyPI · The Python Package Index — https://pypi.org/
Source: miso-client v4.17.1 — https://pypi.org/project/miso-client/4.17.1/
Source: onetrust-api v0.2.0 — https://pypi.org/project/onetrust-api/0.2.0/
Source: workos v9.1.0 — https://pypi.org/project/workos/9.1.0/
Source: evertrust-horizon v2.10.0 — https://pypi.org/project/evertrust-horizon/
Source: complychain v3.0.0 — https://pypi.org/project/complychain/
Source: hyperscale-trust v0.1.0 — https://pypi.org/project/hyperscale-trust/
Source: l4s3r-authnz v1.1.0 — https://pypi.org/project/l4s3r-authnz/1.1.0/

## Promptfoo
Domain: promptfoo.dev
Automated red teaming
Enterprise: Enterprise claimed
API: Public API
Evidence checked: 2026-11-07T14:58:30.066Z
Details: https://www.safecli.org/company/promptfoo.dev
Source: Build Secure AI Applications | Promptfoo — https://promptfoo.dev/
Source: Types of LLM vulnerabilities | Promptfoo — https://www.promptfoo.dev/docs/red-team/llm-vulnerability-types/
Source: Audit Logging | Promptfoo — https://www.promptfoo.dev/docs/enterprise/audit-logging/
Source: Promptfoo Achieves SOC 2 Type II and ISO 27001 Certification: Strengthening Trust in AI Security | Promptfoo — https://www.promptfoo.dev/blog/SOC2-compliance/
Source: Build Secure AI Applications | Promptfoo — https://www.promptfoo.dev/

## spck.dev
Domain: spck.dev
Shopping agent conformance
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:21.008Z
Details: https://www.safecli.org/company/spck.dev
Source: Build a Shopping Agent That Checks Out Safely — spck.dev — https://spck.dev/agent

## Pillar Security
Domain: pillar.security
Agentic security platform
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:22.480Z
Details: https://www.safecli.org/company/pillar.security
Source: Best AI Red Teaming Providers for Enterprise AI Agents and GenAI Apps (2026): A Buyer's Comparison — https://www.pillar.security/blog/best-ai-red-teaming-providers-for-enterprise-ai-agents-and-genai-apps-2026-a-buyers-comparison

## DeepIDV (Arbiter)
Domain: deepidv.com
Autonomous commerce red-teaming
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:21.008Z
Details: https://www.safecli.org/company/deepidv.com
Source: Red Team Prompt to Attack Agentic Checkout With Leaked Mandates and Synthetic Principals | The Deep Brief — deepidv — https://www.deepidv.com/media/prompts/unauthorized-agent-purchase-drill

## F5 AI Red Team
Domain: f5.com
AI vulnerability scanning
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:22.480Z
Details: https://www.safecli.org/company/f5.com
Source: F5 AI Red Team | F5 — https://www.f5.com/products/ai-red-team

## Syntony (A440)
Domain: syntonyresearch.ai
Adversarial intelligence workspace
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:21.008Z
Details: https://www.safecli.org/company/syntonyresearch.ai
Source: A440: adversarial intelligence for AI agents | Syntony — https://www.syntonyresearch.ai/products/a440/

## Zscaler AI Red Teaming
Domain: zscaler.com
Automated agent security
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:22.480Z
Details: https://www.safecli.org/company/zscaler.com
Source: Leading Cloud Enterprise Security Provider for Zero Trust — https://zscaler.com/

## Palo Alto Networks Prisma AIRS
Domain: paloaltonetworks.com
Adversarial AI testing
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:22.480Z
Details: https://www.safecli.org/company/paloaltonetworks.com
Source: Leader in Cybersecurity Protection & Software for the Modern Enterprises - Palo Alto Networks — https://paloaltonetworks.com/

## General Analysis
Domain: generalanalysis.com
Agentic security platform
Enterprise: Unverified
API: Unknown
Evidence checked: 2026-11-07T14:58:21.008Z
Details: https://www.safecli.org/company/generalanalysis.com
Source: AI Red Teaming Platform | Agentic AI Security Testing | General Analysis — https://generalanalysis.com/products/automated-ai-red-teaming

## Interpretation
Company-published evidence, not an independent audit. Unknown means unverified, not absent. Market labels are research heuristics, not proof of demand.