Catalog Systems Use-case-specific agent harnesses SnapAttack

SnapAttack

https://www.splunk.com/en_us/products/enterprise-security.html

Founded 2021 inside Booz Allen Hamilton; spun out 2022. Detection-as-code platform — threat emulation + auto-generated detections. Adds GenAI threat-content layer 2024. Acquired by Cisco (2025-01-31; announced 2024-12-16) to extend Splunk Enterprise Security; snapattack.com now redirects to Splunk ES.

Acquired. acquired by Cisco Source · Alternatives and migration notes →

Acquired · Verified 2026-10-29 · fresh as of 2026-10-29 · 15 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Detection-as-code platform with threat-emulation AI vendor fix
Tier
T3
Section
Use-case-specific agent harnesses
Created
2021 (founded inside BAH); 2022 spinout vendor fix
Latest release
not applicable — wrong section fix
License
not applicable — not OSS fix
GitHub
not applicable — no GitHub repo fix
Pricing
not applicable — wrong section fix
Funding
Acquired by Cisco (2025-01-31) for Splunk; Booz Allen-incubated vendor fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
commercial vendor fix

When to use

Optimised for: threat-emulation + detection-as-code for SOC teams

Anti-fit: not applicable — wrong section

Pros & cons

Pros

Booz Allen lineage gives federal credibility; detection-as-code is differentiator; Splunk distribution post-acq.

Cons

Small pre-acq footprint; product roadmap subject to Splunk consolidation.

Claims & capabilities

Spun out of Booz Allen 2022; AI threat-emulation feature 2024; **acquired by Cisco's Splunk Mar-2025**

Technical surface

API surface
not applicable — wrong section
Backend storage
not applicable — wrong section
Deployment
not applicable — wrong section
Embedding model
not applicable — not a memory product
Multi-tenancy
not applicable — wrong section
MCP
not applicable — wrong section
A2A
not applicable — wrong section
OpenTelemetry
not applicable — wrong section

Alternatives to SnapAttack → live options ranked by shared design, licence, hosting and MCP support

Similar systems

Other use-case-specific agent harnesses in the catalog, ranked by inbound references.

  • Calypso AI (now F5 AI Guardrails) T2

    Dublin / NYC founded 2018; GenAI security and content scanning. $23M Series A-1 Aug-2024 (Paladin Capital + Lockheed Martin Ventures). Pivoted from defence ML to enterprise GenAI guardrails 2023-24.

  • Salesforce Agentforce T1

    Cross-listing: Salesforce Agentforce already exists under Vertical / Customer-support / voice memory; this row is the Agent-harness framing — Agentforce as the consumer-facing agent IDE / builder on Data Cloud. Agentforce launched Sep-2024; Agentforce 2.0 announced Dec-2024.

  • Lasso Security T2

    Tel-Aviv-founded LLM security platform — adversarial testing, prompt-injection defence, data-leakage prevention. $6M seed Nov-2023 (Entrée Capital + Samsung Next).

  • Pillar Security T2

    Tel-Aviv-founded (Dor Sarig + Ziv Karliner, both ex-IDF cyber); end-to-end LLM security platform — discovery, red-teaming, runtime guardrails. $9M seed Apr-2024 (Shield Capital + Greenfield).

  • Promptfoo T2

    OSS (MIT) prompt-engineering eval and red-team CLI; supports OWASP LLM Top-10 vulnerability tests, jailbreak generation, and CI/CD pipeline integration. $5M seed Mar-2024 (Andreessen Horowitz). Founders ex-Discord + ex-Smile Identity.

  • Protect AI T2

    Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI security. Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); its capabilities now ship in Prisma AIRS. Products: Recon (red-team), ModelScan (model artifact scanner), Sightline (vulnerability DB).

Sources (14 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-29
    • Homepage “https://www.snapattack.com/” → “https://www.splunk.com/en_us/products/enterprise-security.html”
    • Funding / ownership “Booz Allen-incubated; acquired by Splunk Mar-2025” → “Acquired by Cisco (2025-01-31) for Splunk; Booz Allen-incubated” source
    #305