What exactly did Vanta announce?
A definitive agreement to acquire Pillar Security, an AI security platform that discovers, tests, secures and governs AI agents. Vanta says Pillar's runtime protection and adversarial testing will plug into its Trust Graph so that policy documents about AI become enforceable boundaries. The release puts customer count at more than 20,000, up from 16,000 in the first quarter of 2026, and notes the AI governance offering Vanta launched in July 2026 has a waitlist six times oversubscribed. This is Vanta's third acquisition after Riskey and Trustpage.
When do the new features actually arrive?
The release lists four dated deliveries. AI Inventory in January 2027: a map of AI applications, models, agents, skills and MCP servers tied to owners, data access, vendors, controls and risks. Runtime monitoring and detection in January 2027. Red-teaming in spring 2027. Runtime enforcement, which blocks unauthorized agent actions in real time, in summer 2027. Everything a switcher could use before the end of this year is already in the product and is already reflected in Vanta's review here.
Should the deal change a decision to leave Vanta?
Only if the reason you are leaving is AI governance and you can wait until mid 2027. The common reasons for switching tracked on this site are price at renewal, the quality of the people behind the platform, framework coverage and evidence collection depth. None of those is addressed by the Pillar deal. If your reason is that you run AI agents in production and your auditor is asking for proof of how they are controlled, the roadmap is relevant, but the proof it promises is not available until next year, so a switch planned for the next audit window still has to be decided on today's product.
Should the deal change a decision to move to Vanta?
Treat the 2027 dates as a contract question. Ask whether Pillar capabilities will be included in your tier or sold separately, and whether the release's "early 2027" general availability applies to all customers. A vendor that has just bought a company usually has a packaging decision ahead of it, and a buyer signing a multi-year term now is signing before that decision is public.
What changed at Scytale this week?
Scytale's pricing page carries a modified date of 6 November 2026, four days after the 2 November rewrite that introduced the Build, Scale and Enterprise plans. The plan cards and the feature table's allowances are unchanged: evidence readiness checks at 100, 500 and 2,000 a year, agentic questionnaire responses at 30, 150 and 1,000 a year, managed security questionnaires at none, 100 and 500 a year, MCP credits at 1,000, 10,000 and 50,000 a month. The penetration testing add-on still offers one retest on Build and unlimited on Scale and Enterprise.
The difference is that the 5 November read of the table listed a cloud assessment add-on on every plan, and today's read has no cloud assessment row at all. The Scytale review and the pair pages on this site no longer mention it, and the read date on those pages is now 10 November 2026. Because no scored criterion depends on that add-on, Scytale's 7.26 total and Vanta's 6.96 total are unchanged.
What should a switcher put in the migration plan this month?
Three lines. First, a dated inventory of which AI agents you run and who owns them, because every platform, Vanta included, will want it in 2027 and your auditor may want it sooner. Second, a note of which vendor features in your shortlist are live today versus announced, with the source and the date. Third, for Scytale specifically, confirmation on a demo of what the penetration testing add-on costs and whether any cloud assessment work is still offered, since the page no longer lists it.
What else should a switcher know?
Does the Pillar acquisition move Vanta's score?
No. Scores here change when a vendor's product or pricing page changes. The release describes 2027 deliveries and does not change Vanta's current pages.
Is Scytale's pricing different from last week?
No prices are published either week. The plans and allowances are identical. The only visible change is the missing cloud assessment add-on row.
Which sources did we use?
Source: Vanta, "Vanta to Acquire Pillar Security to Turn AI Policy Into Practice", Business Wire, 9 November 2026 · read 2026-11-10
Source: Scytale pricing page (metadata modified 6 November 2026) · read 2026-11-10
Source: Scytale penetration testing · read 2026-11-10