Lookout offers a mobile‑native security platform that combines endpoint detection and response with AI visibility and governance, continuously discovering both sanctioned and unsanctioned AI applications on corporate and BYOD devices. Leveraging telemetry from over 220 million devices, it uses machine‑learning to detect AI‑driven phishing, credential‑theft, and data‑exfiltration in real time, while automatically enforcing data‑handling guardrails and providing audit‑ready compliance reports aligned with the EU AI Act, NIST AI RMF, and ISO/IEC 42001.
Funding
$150M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
BFounders
Product
Problem
Organizations lack visibility into AI applications and autonomous agents running on employee mobile devices, creating “Shadow AI” risks that evade traditional endpoint and cloud security controls. This blind spot, combined with the rise of AI‑generated phishing and credential‑theft attacks, leaves enterprises vulnerable to data exfiltration and compliance failures.
Solution
Lookout provides a mobile‑native security platform that combines endpoint detection and response (EDR) with AI visibility and governance. By leveraging telemetry from over 220 million devices, the solution continuously discovers both sanctioned and unsanctioned AI apps, monitors autonomous agent behavior, and enforces real‑time data guardrails. Integrated machine‑learning models detect AI‑driven phishing, account takeover, and data‑exfiltration attempts as they occur, delivering automated triage and actionable alerts to security operations centers. The platform also generates audit‑ready evidence aligned with the EU AI Act, NIST AI RMF, and ISO/IEC 42001, helping organizations demonstrate compliance and close governance gaps.
Target Audience
Primary customers are enterprise security and risk teams in large organizations that need to protect mobile workforces and ensure AI governance, including regulated industries such as finance, healthcare, and government.
Features
- Real‑time inventory of all AI applications on corporate and BYOD devices, exposing “Shadow AI” and unauthorized SDKs
- Continuous monitoring of autonomous AI agent permissions and workflows to prevent unauthorized data access
- AI‑driven detection of mobile phishing, credential‑theft, and data‑exfiltration using behavior, tone, and activity analysis
- Automated policy enforcement that blocks unsanctioned AI services and enforces data‑handling guardrails
- Cloud‑based analytics pipeline built on the world’s largest mobile threat telemetry dataset for rapid threat correlation
- Integrated compliance reporting that maps findings to EU AI Act, NIST AI RMF, and ISO/IEC 42001 requirements
- Single‑pane‑of‑glass dashboard for SOC teams with actionable alerts, device health status, and AI activity metrics