Appsentinels
Founded 2021 Β· 50 employees on LinkedIn Β· 1 known investors
AppSentinels provides a unified security platform that protects business logic across APIs, AI agents, and MCP workflows, offering discovery, continuous red-teaming, and runtime protection. It serves enterprises running modern applications where AI makes decisions and APIs execute actions, with on-prem, cloud, or hybrid deployment options.
Also known as AppSentinels
Investors Β· 1
Company profile
researched Aug 2026AppSentinels develops a security platform that protects application business logic across APIs, AI agents and Model Context Protocol (MCP) workflows. The company positions business logic β how decisions are made and how actions are executed β as the central attack surface in applications where AI systems make decisions and APIs carry out actions, and unifies API security, agentic AI security and MCP security in a single control plane spanning the decision and execution layers.
The platform is organized into three capability tiers that can be adopted independently or together. Discovery auto-inventories APIs and sensitive data, surfaces shadow and zombie APIs, and maps AI assets, agents and MCP servers while detecting configuration drift and over-privileged tools. Red teaming provides continuous automated penetration testing for issues such as BOLA/BFLA on the API side and semantic hijacking, prompt injection and logic bombs on the AI side. Runtime protection blocks workflow tampering and logic abuse, and enforces intent-based guardrails to prevent agents from taking unauthorized business actions. Adjacent use cases include sensitive data discovery with more than 60 data recognizers, posture management and real-time risk scoring, incident response with MITRE threat-model mapping and threat-actor views, bot/DoS/abuse protection with a built-in WAF, and compliance support.
The company markets vertical solutions for banking and financial services, retail and eCommerce, healthcare and pharma, and public sector and government, addressing needs such as PII/PCI/PHI protection, HIPAA alignment, fraud prevention, scraping, account takeover and coupon or workflow abuse.
Business model
AppSentinels sells an enterprise security platform, deployable on-premises, in the cloud or hybrid, using agent-based or agentless options and inline or out-of-band enforcement. Customers can start with a single capability β discovery, continuous red teaming or runtime protection β for APIs, AI/MCP, or both, and expand into full-lifecycle coverage. Enforcement can use AppSentinels sensors or a customer's existing inline devices and integrations.
Traction
Company-reported figures cite more than 150,000 unique API endpoints protected, over 5,000 AI agents and MCP servers governed and more than 250 billion API calls secured monthly. Published customer testimonials come from security leaders at Nykaa, Finspot, DevRev and Zee Enterprise Ltd.
βΈFull profile β market position, technology, go-to-market, geography, history
Market position
AppSentinels states it is recognized by Gartner as a leading API security vendor and was named an Outperformer and Leader in the GigaOm API Security Radar report. It says it secures APIs for enterprises including a top-3 global credit card conglomerate, a top-5 global bank and the world's second-largest IT services company.
The company differentiates on business logic security β detecting workflow abuse and fraud that signature- or WAF-based tools miss β on continuous automated pen-testing positioned as an always-on pen-test team, and on delivering API, agentic AI and MCP protection through one unified platform covering shift-left testing through runtime enforcement, with wide onboarding and deployment options.
Technology
The product uses a three-tier architecture designed to adapt to on-premises, cloud or hybrid deployments at enterprise scale, with high availability, fail-safe controls and low-latency operation across billions of API calls and AI-driven executions. Capabilities include automated API and AI asset discovery, sensitive data classification, context-aware DAST that generates and executes business-logic test cases, AI/ML models for runtime detection of business logic attacks, BOLA/IDOR, bots, data exfiltration and DoS, real-time intent detection for agent actions, automated Swagger documentation and configuration drift detection, plus more than 50 traffic and tooling integrations across API gateways, cloud platforms, AI stacks, data stores and DevOps/SOAR systems.
Go-to-market
Direct enterprise sales driven by demo requests on the company website, supported by analyst recognition (GigaOm Radar; presence in Gartner Hype Cycles and Market Guides), customer testimonials, and vertical- and use-case-specific solution positioning.
Large enterprises running API- and AI-driven applications, with named focus verticals in banking and financial services, retail and eCommerce, healthcare and pharma, public sector and government, plus fintech, public utilities and technology. Buyers include CISOs, security teams, developers and DevOps.
Geography
Publicly cited customers include India-based companies such as Nykaa, Finspot, DevRev and Zee Enterprise Ltd., alongside unnamed global financial and IT services enterprises.
History
The company is led by co-founders Puneet Tutliani (CEO), Mohit Joshi (CDO) and Deepak Kushwaha, with Ajay Goel as a board member. Other leadership includes CTO Rajeev Chaubey, VP Engineering Arun Koshal, VP Growth & Customer Engagement Mahesh Gupta, VP Quality & Customer Success Elango Krishnasami, Senior Director of Engineering Vinay Patil, and founding team member and principal scientist Sachin Desai. Its product scope has expanded from API security into agentic AI and MCP security.
Compiled by commissioned research from 6 cited public sources β announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed β not independently audited.
Timeline Β· 1
launches, deals, and filingsAppSentinels states it was recognized as a Leader and Outperformer in the GigaOm Radar report on API security, and that it appears in Gartner Hype Cycles and Market Guides covering API protection and security testing.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
βΈResearch sources Β· 6
primary sources listed
- Appsentinelsappsentinels.ai Β· web
6 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Appsentinels do?
- AppSentinels is a security platform unifying API, agentic AI and MCP protection around application business logic.
- Who are Appsentinels's investors?
- Appsentinels's investors include Info Edge Ventures.