档案库 · AI 与模型 · 战略决策 · 2022–2026
Cranium 豪赌欧盟AI法案，让AI安全成为刚需
由毕马威孵化的AI安全公司，2023年独立运营，融资2500万美元，押注监管。
Cranium
做的是什么生意
Provides AI security and governance SaaS for large enterprises: automatically discovers and inventories all AI models, agents, and third-party AI suppliers within an organization, conducts red-team security testing, and generates compliance proof such as AI Cards.
启动资金：Cumulative $32M: 2023 seed round (backed by KPMG and SYN Ventures), 2023-10 Series A $25M (led by Telstra Ventures, with KPMG LLP and SYN Ventures participating).
起因
Founded in 2022 inside KPMG’s startup incubator KPMG Studio, it was the first spin-out company incubated by KPMG, and all four founders came from KPMG’s cybersecurity and AI business; in 2023-04 it emerged from stealth and began independent operations, with seed funding from KPMG and SYN Ventures. Founder Jonathan Dambrot saw that after ChatGPT was released, every enterprise was deploying AI, but no one could clearly say what data these models were using, whether they could be attacked, or whether they were compliant.
经过
In 2023-10 it completed a $25M Series A (led by Telstra Ventures), bringing cumulative funding to $32M; it launched AI Card (packaging an AI application’s safety, use, data, and governance into a shareable compliance profile) and AI Maturity Score. In 2025-05 it released the Arena red-team platform, focusing on LLM prompt injection testing and EU AI Act/NIST RMF audit readiness; the product line subsequently expanded to agent monitoring (AgentSensor), cloud and compliance modules, and the official website states that the Govern module directly maps to the EU AI Act.
结果
Still running, and the regulatory dividend is being realized: the EU AI Act becomes fully applicable on 2026-08-02 (high-risk provisions were extended by the AI Omnibus to 2027-12/2028-08), turning “being able to prove AI safety” from a slogan into a legal obligation. A third-party profile says its 2025-09 annual recurring revenue was about $7.3M and that in 2026-05 it acquired agent AI security company Aiceberg; the official website claims recognition such as Gartner Cool Vendor 2025 and Fortune Top 50 Cybersecurity Companies 2025.
背景
Cranium是一家位于新泽西的AI安全公司，2022年在毕马威内部孵化，2023年4月独立运营。它押注欧盟AI法案将使证明AI安全性成为采购必选项。该法案于2024年8月1日生效，2026年8月2日适用。
它提供AI资产清单和红队测试，将合规打包成AI卡片。2023年10月完成2500万美元A轮融资（泰尔斯风险投资、毕马威、SYN Ventures），累计融资3200万美元。2025年5月发布Arena红队平台。
截至2026年9月仍在扩张。法案全面适用；禁止条款自2025年2月起生效，通用AI规则自2025年8月起，高风险条款推迟至2027年12月。第三方数据：2025年9月年经常性收入约730万美元，2026年5月收购Aiceberg。被认可为2025年Gartner酷厂商、2025年《财富》网络安全50强。
这件事要成立，得有什么
- 欧盟AI法案将AI治理从可选变成法律义务，并提供分阶段生效时间表，迫使企业立即购买工具而不是等待。
- 从毕马威孵化起步，意味着首日就有企业客户渠道，将“合规需求”直接转化为早期收入，无需从零开始市场教育。
- 产品先交付轻量级项目，如“清单+AI卡片”证明，再扩展至红队测试和智能体监控，沿着企业需求逐步扩大品类。
- 监管红利一波接一波：2024年生效、2025年禁令、2026年适用、2027年高风险规则，每个截止日期都重建采购紧迫性。
可借鉴之处
尽早将合规产品化以锁定利基市场；Cranium利用了毕马威渠道和法规生效前的时间差。
后续进展
截至2026年9月，Cranium独立运营。欧盟AI法案自2026年8月2日起全面生效。第三方数据显示2025年9月年经常性收入约730万美元，员工约62人，2026年5月收购Aiceberg。获Gartner和《财富》2025网络安全50强认可。风险：竞争和客户集中度。
资料来源
- AI Act
- Cranium raises $25M to fund enterprise AI monitoring, security, and compliance platform
- Cranium raises $25m in series A funding to advance AI security solutions
- Cranium Launches Arena: The Industry's First AI Red Teaming Platform That Extends to the AI Supply Chain
- Cranium (company profile)
发现哪里写错了？告诉我们。
轮到你了
你刚读完一家。说说你在做什么，看看谁在赌同一件事。
免费账号 · 3 次免费提问 · 不用绑卡