LLM-security coverage matrix: every vendor vs the OWASP LLM Top 10 (2026)
21 LLM-security vendors, scored against all ten OWASP LLM Top 10 (2025) risks. Every cell reads Covered, Partial, Not covered, or Unverified, set by hand from public documentation. Rows are ranked by how many risks each vendor covers, and no vendor can pay to move up. Last verified 2026-07-13.
Across the 21 vendors llmthreat tracks, LLM01 Prompt Injection is the most-covered OWASP LLM Top 10 risk (17 of 21 vendors scored Covered) and LLM05 Improper Output Handling the least (2 of 21), per llmthreat's review of public vendor documentation as of .
| Vendor | 01 | 02 | 03 | 04 | 05 | 06 | 07 | 08 | 09 | 10 | Covered |
|---|---|---|---|---|---|---|---|---|---|---|---|
| LakeraGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Covered. | LLM05 Covered. | LLM06 Partial. | LLM07 Covered. | LLM08 Covered. | LLM09 Covered. | LLM10 Covered. | 8 |
| Noma SecurityAI-SPM / Runtime Protection | LLM01 Covered. | LLM02 Covered. | LLM03 Covered. | LLM04 Covered. | LLM05 Unverified. | LLM06 Covered. | LLM07 Partial. | LLM08 Partial. | LLM09 Partial. | LLM10 Partial. | 5 |
| StraikerAgentic AI Security | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Covered. | LLM07 Covered. | LLM08 Partial. | LLM09 Covered. | LLM10 Partial. | 5 |
| TrojAIAI Red Teaming | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Covered. | LLM07 Covered. | LLM08 Covered. | LLM09 Partial. | LLM10 Unverified. | 5 |
| VijilAgentic AI Security | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Covered. | LLM07 Partial. | LLM08 Not covered. | LLM09 Covered. | LLM10 Covered. | 5 |
| Enkrypt AIGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Partial. | LLM07 Covered. | LLM08 Partial. | LLM09 Covered. | LLM10 Partial. | 4 |
| GiskardAI Red Teaming | LLM01 Covered. | LLM02 Covered. | LLM03 Not covered. | LLM04 Not covered. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Partial. | LLM09 Covered. | LLM10 Covered. | 4 |
| MindgardAI Red Teaming | LLM01 Covered. | LLM02 Partial. | LLM03 Partial. | LLM04 Covered. | LLM05 Unverified. | LLM06 Partial. | LLM07 Covered. | LLM08 Unverified. | LLM09 Covered. | LLM10 Partial. | 4 |
| NeuralTrustGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Covered. | LLM06 Partial. | LLM07 Partial. | LLM08 Not covered. | LLM09 Covered. | LLM10 Partial. | 4 |
| AktoAgentic AI Security | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Not covered. | LLM06 Covered. | LLM07 Not covered. | LLM08 Not covered. | LLM09 Partial. | LLM10 Partial. | 3 |
| HiddenLayerAI-SPM / Runtime Protection | LLM01 Covered. | LLM02 Covered. | LLM03 Covered. | LLM04 Partial. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Partial. | LLM09 Not covered. | LLM10 Partial. | 3 |
| Lasso SecurityGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Covered. | LLM07 Unverified. | LLM08 Unverified. | LLM09 Unverified. | LLM10 Unverified. | 3 |
| PangeaGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Unverified. | LLM04 Unverified. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Partial. | LLM09 Covered. | LLM10 Partial. | 3 |
| Prompt SecurityGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Not covered. | LLM04 Not covered. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Partial. | LLM09 Not covered. | LLM10 Covered. | 3 |
| Robust IntelligenceAI Red Teaming | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Covered. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Unverified. | LLM09 Partial. | LLM10 Unverified. | 3 |
| WitnessAIGuardrails / LLM Firewall | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Not covered. | LLM05 Partial. | LLM06 Covered. | LLM07 Not covered. | LLM08 Not covered. | LLM09 Partial. | LLM10 Not covered. | 3 |
| CalypsoAIAI Red Teaming | LLM01 Covered. | LLM02 Covered. | LLM03 Partial. | LLM04 Partial. | LLM05 Partial. | LLM06 Partial. | LLM07 Partial. | LLM08 Not covered. | LLM09 Partial. | LLM10 Partial. | 2 |
| Credo AIAI Governance / Model Risk | LLM01 Partial. | LLM02 Partial. | LLM03 Covered. | LLM04 Not covered. | LLM05 Not covered. | LLM06 Covered. | LLM07 Not covered. | LLM08 Not covered. | LLM09 Partial. | LLM10 Not covered. | 2 |
| Protect AIAI-SPM / Runtime Protection | LLM01 Partial. | LLM02 Partial. | LLM03 Covered. | LLM04 Covered. | LLM05 Partial. | LLM06 Unverified. | LLM07 Partial. | LLM08 Unverified. | LLM09 Unverified. | LLM10 Unverified. | 2 |
| ApiiroAI-SPM / Runtime Protection | LLM01 Partial. | LLM02 Partial. | LLM03 Covered. | LLM04 Partial. | LLM05 Partial. | LLM06 Partial. | LLM07 Not covered. | LLM08 Not covered. | LLM09 Not covered. | LLM10 Not covered. | 1 |
| CraniumAI-SPM / Runtime Protection | LLM01 Partial. | LLM02 Partial. | LLM03 Covered. | LLM04 Partial. | LLM05 Not covered. | LLM06 Partial. | LLM07 Not covered. | LLM08 Not covered. | LLM09 Not covered. | LLM10 Not covered. | 1 |
Columns, left to right: 01 Prompt Injection · 02 Sensitive Information Disclosure · 03 Supply Chain · 04 Data and Model Poisoning · 05 Improper Output Handling · 06 Excessive Agency · 07 System Prompt Leakage · 08 Vector and Embedding Weaknesses · 09 Misinformation · 10 Unbounded Consumption.
LLM Threat, "LLM-security vendor coverage matrix (OWASP LLM Top 10, 2025)", llmthreat.com, last verified 2026-07-13, https://llmthreat.com/coverage-matrix