01 · ABOUT

What Lasso Security does

Runs an intermediary gateway that proxies requests to MCP servers and manages their lifecycle.

Why teams reach for it: Governs what an agent is trying to do across its whole execution chain, rather than filtering prompt and response content.

Worth knowing

scanning tool descriptions. It supports shadow MCP discovery, prompt-injection detection, tool-poisoning detection.

Self-hostedOpen SourceNot applicableMCP Server & Client
02 · TECHNICAL SPECIFICATIONS

How Lasso Security compares

Fields the vendor doesn't document are left blank here rather than guessed — a blank means nothing verified, not a "no."

Secondary Functions
Runtime guardrails, Posture management, Threat detection, Data loss prevention, Access governance
Deployment Point
In request path
Scan Target
tool descriptions
Shadow Mcp Discovery
Yes
Prompt Injection Detection
Yes
Tool Poisoning Detection
Yes
Clients Covered
Claude Desktop, Claude Code, Cursor, Windsurf
Policy Enforcement
Both
Siem Integration
Yes
Compliance Frameworks
NIST AI Risk Management Framework, SOC 2 Type 2, ISO 27001, ISO 42001, EU AI Act, HIPAA, PCI-DSS, FedRAMP
03 · NEW TO MCP?
How will you enforce policy and reduce risk?

Security & governance tools help teams enforce policy, monitor risk, and keep MCP usage compliant with internal rules.