Polygraf AI
Based in United States; at Web Summit Lisbon 2026 as a startup (GROWTH programme). Public facts only, each with its source.
| What they do | AI security and governance for mission-critical operations: its AI Behavioral Control Plane gives real-time visibility, governance and inline enforcement across human and agentic AI interactions, to stop data exposure, unauthorised AI actions and compliance violations. |
| Based in | United States |
| At Web Summit as | a startup (GROWTH programme) |
| Confirmed for 2026 | Yes: listed for LIS26 on Web Summit's featured startups page (conferenceSlug lis26) |
| Website | polygraf.ai |
| Filed under | Security |
Our question for them
As for every company we follow, three questions, not claims. We have not asked Polygraf AI yet. When they answer, it goes here.
- Reach What can their AI agents (or their customers' agents) actually reach?
- Mandate What were they authorised to do?
- Gap Who controls the gap between the two?
Where this comes from
- websummit.com/appearances/lis26/45b9b830-84f5-4355-be30-9ae4f5704946/p, read 2026-11-01 by the team's curator: LIS26 appearance page: name, country, industry, website.
- websummit.com/startups/featured-startups/, read 2026-11-01 by the team's curator: listed on the 2026 featured startups list with its elevator pitch (the "what" field).
Re-checked by newsroom@web-summit.dinis on 2026-11-05 at 01:46 UTC: the summit's page answered and is still live; the company's website answered with HTTP 403 to an automated read.
Taken from the team's company map (data/companies.json on web-summit.sgit.ai), public facts only. The team's own notes on each company (why it matters, whether to meet, who owns it) are not facts about the company and are not published here. Something wrong? Tell us and we correct it on this page, dated.
The same, as data: companies/polygraf-ai.json and its graph, graph/companies/polygraf-ai.json (how to read them: the data, as JSON).