Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Penaxtra AI-SPM review

#9 of 18 in AI Security Posture Management (AI-SPM) Tools Software

A hybrid AI-SPM platform with asset discovery, testing and runtime controls.

7.5/10Editor score
Penaxtra AI-SPM7.5 Visit Penaxtra

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Penaxtra AI-SPM helps organisations monitor security posture across LLM applications, agents, MCP servers, RAG pipelines and other AI services. Its inventory spans 11 AI asset kinds, and read-only cloud discovery can find managed AI and ML services. That breadth makes it relevant to teams putting AI into production, particularly those that need ongoing risk monitoring and audit evidence. Small, mid-market and enterprise teams are listed as fits, but the paid entry point makes it less suited to buyers seeking a free evaluation tier.

The published monthly plans show Starter at €290 per tenant and Business at €1,290 per tenant. Starter includes weekly scheduled scans, unlimited model card analysis, PDF audit-evidence export and email support. Business adds daily scans, RAG security testing with 13 automated checks, cloud AI posture, webhook, Slack and Jira integrations, SIEM forwarding, and email plus chat support. Enterprise offers custom endpoint count and SLA, architecture review, customer-specific compliance framework mapping and an on-prem runtime gateway agent; its price is custom. The Starter tier names OWASP LLM Top 10 and NIST AI 600-1 framework mappings.

Hybrid deployment is a notable fit for organisations that want a hosted control plane alongside self-hosted runtime enforcement: the managed control plane is hosted in the EU, while the gateway can run inside a customer VPC. Gateway controls include DLP rules, tool allowlists and signed policy bundles verified by the gateway. Findings can be routed to Slack, Jira, Splunk HEC, QRadar, webhooks or the public API. This combination suits teams coordinating AI findings with security operations and applying runtime policies. Buyers who need RAG testing, daily scans or those integrations should budget for Business; teams needing bespoke endpoint limits, SLA or on-prem gateway support should consider Enterprise. Those seeking a no-cost plan or a simple inventory-only tool may find the paid, control-rich offering more than they need.

Penaxtra AI-SPM pros and cons

  • Where it wins
    • Inventories 11 AI asset kinds, from agents to vector databases
    • Adds RAG testing and daily scans on the Business plan
    • Supports self-hosted runtime controls and audit-evidence export
  • Where it doesn't
    • No free plan; Starter starts at €290 per tenant monthly
    • RAG tests and daily scans require the €1,290 Business plan
    • Enterprise pricing is custom, with endpoint count and SLA tailored

Penaxtra AI-SPM fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update