According to TechRepublic, cloud security firm Zscaler has acquired AI security specialist SPLX to create a dedicated AI protection layer within its Zero Trust Exchange platform. The financial details weren’t disclosed, but the timing looks strategic—companies are forecast to spend $375 billion on AI infrastructure in 2025 alone, which is a massive 67% jump from last year. SPLX, founded just last year in 2023, had raised about $9 million from LAUNCHub Ventures and Rain Capital before this exit. Zscaler CEO Jay Chaudhry stated the combination will secure “the entire AI lifecycle on one platform,” addressing everything from prompt protection to model security. The integration specifically tackles the growing problem of shadow AI, where employees use unauthorized apps that create security blind spots.
The shadow AI problem is real
Here’s the thing about shadow AI—it’s not going away. Employees are spinning up unauthorized tools left and right, trying to move faster without IT’s blessing. And honestly, can you blame them? Traditional security processes move at a snail’s pace compared to how quickly AI is evolving. SPLX had already launched an AI Asset Management tool earlier this year specifically to find these hidden models and workflows that enterprises didn’t even know existed. But discovery is only half the battle. The real challenge is securing this stuff without killing innovation entirely.
Automated red-teaming changes the game
The most interesting part of this acquisition might be SPLX’s automated red-teaming capability. They ship with over 5,000 purpose-built attack simulations to probe AI systems and recommend fixes in real-time. That’s a significant shift from the traditional “patch and pray” approach that security teams are used to. Basically, instead of waiting for vulnerabilities to be exploited, you’re constantly testing your defenses. In a world where AI systems are becoming more autonomous and interconnected, that proactive mindset matters. A lot.
The bigger picture here
Look, traditional security tools just weren’t built for AI’s quirks. They struggle with protecting sensitive data inside prompts, defending machine learning models from targeted attacks, and governing who can use what AI capabilities. This acquisition is Zscaler’s attempt to get ahead of that curve. As Zscaler’s announcement makes clear, they’re betting big on securing the entire AI lifecycle. But I’ve got to wonder—can any platform truly keep up with how fast AI is evolving? SPLX CEO Kristian Kamber thinks joining forces will secure “AI innovation at the speed organizations are adopting it.” That’s the dream, anyway. The reality might be messier.
Don’t ignore the acquisition risks
Let’s be real for a second—tech acquisitions don’t always work out as planned. Integrating a young startup’s technology into an established platform like Zscaler’s Zero Trust Exchange is tricky business. Culture clashes, technology integration headaches, and the inevitable departure of key talent can derail even the most promising acquisitions. And SPLX was founded just last year—they’re essentially still a startup. There’s also the question of whether this specialized AI security approach will scale across Zscaler’s massive customer base. The promise is compelling, but the execution will be everything.
