Join our Newsletter — 33% off our NHI Course

Understanding Verno Labs

Verno Labs is an offensive security company for AI agents. It points custom offensive LLMs at a customer’s own agents, across text, voice and multimodal interactions, to find vulnerabilities before attackers do.

It is built for teams putting agents into production that need to know how those agents can be manipulated, and to watch for the same attacks once the agents are live. The platform follows a cycle of attack, detect and fix.

At A Glance

VendorVerno Labs (Pallma AI Ltd.)
CategoryAI model security, AI agent security
Identities coveredAI agents and their tool calls
DeploymentManaged SaaS or self-hosted on AWS, GCP or Azure
Agentic AIOffensive LLMs, Hydra model, AI security agent
FundingPre-seed led by Marathon Venture Capital
Market classificationAI Model Security; also AI Agent Security

What Verno Labs Does

An agent that can call tools and act on a user’s behalf can be talked into doing the wrong thing, and those weaknesses often only appear over several turns or across sessions. Verno Labs tests for them with attacks that plan, execute and adapt, both before and during deployment, then keeps watching agents in production. The aim is to find a manipulation path in testing rather than in an incident report. Findings map to an attack taxonomy aligned with OWASP LLM, OWASP Agentic and MITRE ATLAS.

Products

Verno Red

Verno Red runs real attacks against AI agents. Campaigns are multi-turn, adaptive and continuous, and work against text, voice and multimodal agents. Each finding is mapped to OWASP, MITRE and CWE, so security teams can see which class of weakness they are dealing with.

Verno Guard

Once agents are live, Verno Guard monitors every interaction and tool call in production. Adversarial behaviour is raised as a structured incident with severity, context and the attack chain that produced it, and multi-step attacks are reconstructed across sessions.

Verno Fix

Verno Fix turns findings from Red and incidents from Guard into prioritised remediations, generates fixes and tracks each one from discovery through to validated closure.

Hydra And The AI Security Agent

Hydra is Verno Labs’ offensive security model. Rather than replaying a fixed list of prompts, it discovers attacks autonomously and probes agents continuously, reaching weaknesses that only show up as a conversation develops. The AI security agent sits on top of the platform as a natural-language interface, so analysts can ask about vulnerabilities and incidents in plain language instead of searching dashboards.

How It Works

ComponentWhat it does
DeploymentCustomers choose managed SaaS or a self-hosted install on AWS, GCP or Azure.
Python SDKAgents are instrumented through a Python SDK.
TelemetryRuntime detections from Verno Guard flow back into testing in Verno Red, so what is seen in production shapes the next round of attacks.
OutputsFindings and incidents are sent to ticketing, messaging and SIEM tools or webhooks.
Terminal UIAlongside the web platform, a terminal UI shows status, policies and tool calls from the command line.

Identities And Systems Covered

AI agentsText, voice and multimodal agents, including their tool calls
Agent frameworksLangChain, LangGraph, custom orchestration and custom agents, through the Python SDK
Agent platformsMicrosoft Agent 365, tested for prompt injection, sensitive data exposure, permission abuse and unintended agent actions; Gemini Enterprise

Integrations

AreaIntegrations
Ticketing and incident responseJira, PagerDuty, Incident.io, Nofire, Resolve
MessagingSlack
Security operationsSIEM, webhooks

Company Background

Legal entityPallma AI Ltd. (engineered in Europe)
Founded2025
HeadquartersLondon, United Kingdom
LeadershipPavlos Mitsoulis, co-founder and CEO
FundingA reported $1.6 million pre-seed round with technology leaders from AWS, Meta and Google
ResearchVernoBench, a benchmark for prompt extraction evaluation

Note: This overview is compiled from Verno Labs’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.

Explore More

Browse vendors

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

Book a demo

See the platform

Tell us a little about you and we’ll pass your request to the vendor’s team.

Fill in all fields marked * and tick the consent box to continue.