# Pistra

Pistra is a cybersecurity company based in Saudi Arabia, founded in 2025. It has 1 product listed on CybersecTools.

> The AI enforcement layer. Every AI call, enforced and provable.

Source: https://cybersectools.com/companies/pistra · Updated September 2026

## Quick facts

- Category: [AI Security](https://cybersectools.com/categories/ai-security)
- Type: Products and services
- Headquarters: Saudi Arabia
- Founded: 2025
- Products listed: 1
- Website: [pistra.ai](https://pistra.ai/)

## What does Pistra do?

pistra is the AI enforcement layer. Every model, tool and agent call is
checked against your policy in line. Every decision leaves a signed record
you can prove to anyone.

It is one Go binary on the path between your applications and AI
providers. OpenAI and Anthropic SDKs, MCP clients, agent-to-agent traffic
and realtime WebSocket sessions all point at it. Each request is checked
against a gateway-issued virtual key, access rules and token budgets, then
inspected by the guardrail detectors you configure. pistra swaps in the
real provider credential and forwards the request. A request that needed
no change is forwarded byte for byte.

What it enforces:

- Personal data and secrets: 83 identifier types, 51 of them
  checksum-validated, and 19 credential kinds, found and redacted in
  prompts and in streamed responses.
- Prompt injection and jailbreaks: a classifier or an LLM judge, on the
  user's turn and on tool results.
- Access and spend: per-team profiles, model allowlists, access rules
  and token budgets.
- Silent degradation: a body it could not inspect is counted, and a
  translation that would drop a capability the request uses is refused.

Each decision is signed by the node that made it and chained to the one
before, in a store you hold. A third party can verify the chain without
trusting the node that wrote it. AI governance platforms draw on that
record as their evidence source.

pistra is self-hosted, on Kubernetes with a Helm chart or on VMs, as a
raft-backed cluster with no external database. It also runs as an
inspector behind a gateway you already have, over Envoy ext_proc,
enforcing policy on traffic it does not route.

Categories: [AI Security](https://cybersectools.com/categories/ai-security), [Data Protection](https://cybersectools.com/categories/data-protection)

## Pistra products

- [Pistra](https://cybersectools.com/tools/pistra): The AI enforcement layer. Every AI call, enforced and provable. (commercial)

---

More on Pistra: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md