If you license AIShield's model scanner, red teaming or AI firewall, your vendor is leaving Bosch's control: Protectt.ai, an Indian mobile app security startup, is taking a controlling stake, and Bosch keeps a minority. The products, the contract terms and the on-prem commitments you signed for have not been restated by the new owner. Until they are, treat this as a change of control and check your paper.
Analytics India Magazine reported on October 27, 2026 that Protectt.ai Labs acquired a majority stake through a primary share issuance combined with a secondary purchase from existing investors, and that AIShield will run as an independent company, AI Shield Private Limited, under Protectt.ai. No price, stake percentage or closing date was disclosed. Inc42's report the same day describes the deal as planned ("to acquire") and says Bosch retains a minority stake. The two outlets disagree on whether it has closed, so ask your account team which it is.
What Protectt.ai Is Buying
AIShield is an AI security product line that Bosch built inside its software services arm and is now handing to a smaller, single-focus owner. Bosch Global Software Technologies announced AIShield on May 2, 2022 as an "autonomous corporate startup" inside BGSW, sold as a SaaS product plus consulting services and deployable in embedded, cloud and on-premises environments.
Today it sells two product families. AIShield's new site lists AISpectra for development-time security (a model scanner that statically assesses the AI supply chain, plus automated red teaming) and AIGuardian for runtime protection (an AI firewall that applies policy across applications). The same page promises "flexible deployment across SaaS, on-prem & air-gapped environments" and says AIShield is trusted by "more than 45 organizations."
The legacy Bosch-branded site still reads "Powered by Bosch," carries a Bosch Global Software Technologies footer, and shows a banner pointing visitors to the new domain. It lists a Splunk and Microsoft Sentinel integration for Guardian, an AWS Partner GenAI CoE listing for the guardrails product, and unnamed testimonials from a US technology consultancy, a UK bank and an Indian healthcare startup. Analytics India Magazine says AIShield has more than 40 patent filings, including 11 granted patent families, and customers in Europe and the Middle East.
The number that should shape your risk review is headcount. Inc42 puts AIShield at roughly 12 to 15 employees today, with a plan to grow to 50 to 60 by March 2027. That is a small team carrying a product that more than 45 organizations depend on, and the buyer says it is still working out who moves where. "We are still restructuring and discussing with employees," Protectt.ai cofounder Manish Mimani told Inc42.
Who Protectt.ai Is
Protectt.ai is a mobile app security and fraud prevention vendor whose core customers are Indian banks and regulated financial firms. Analytics India Magazine describes its customer base as banks, NBFCs, insurers, fintechs and government platforms in India, with markets in the Middle East and North Africa, Southeast Asia and the US. Its product line is RASP, device and SIM binding, code obfuscation and app fraud scoring.
It is a Series A company. Entrackr reported in March 2025 that Protectt.ai raised Rs 76 crore (about $8.7 million) in a round led by Bessemer Venture Partners. Inc42 says AIShield is its first acquisition, that it set up an M&A team earlier in 2026, and that it is looking at API security and cloud security deals next.
The overlap you need to understand sits on Protectt.ai's own homepage. Protectt.ai already lists "AI Red Teaming," "Runtime Protection" ("intelligent firewall for 24/7 LLM threat mitigation") and "Model Scanner" ("zero-trust verification for ML models and supply chain security"). Those are the same three categories AIShield sells as AISpectra and AIGuardian. Neither company has said which brand, codebase or support desk survives. Inc42 reports that some of Protectt.ai's own AI security staff will move into AIShield, which points toward consolidation, but the number is not final.
Mimani's stated goal, per The Head and Tale, is "India's first full-stack AI security platform" covering "AI for Security, Security for AI and Sovereign AI Security." He said AI "is moving from pilots into production across banking and regulated enterprises." On money, he told Inc42 that "the current structure is a combination of cash and ESOPs" and that "there will be cash, a secondary component and future investments as required."
What Happened the Last Time a Platform Bought an AI Guardrail Vendor
Two of the 2025 AI guardrail deals went the same way: the acquirer folded the guardrail product into its own platform. F5 agreed on September 11, 2025 to buy CalypsoAI for $180 million and said its capabilities would be integrated into the F5 Application Delivery and Security Platform. When Check Point agreed to buy Lakera, CSO Online reported that the technology would be embedded into Check Point's Infinity architecture, starting with CloudGuard WAF and GenAI Protect. (We track Lakera and HiddenLayer as standalone tools for that reason.)
AIShield's case is different in one useful way. Protectt.ai is keeping AIShield as a separate legal entity with its own management, and Inc42 says it can raise outside funding. A separate company is more likely to keep a separate product than a business unit folded into a platform SKU.
The steel-man for staying put is reasonable. Inside Bosch, AIShield was a small unit of a services arm that had over 23,000 associates in 2022. A dedicated owner that, per Inc42, wants to hire PhD researchers and grow the team about fourfold could ship faster than the old structure did. Protectt.ai already sells to the regulated banks that AIShield wants to reach in Asia. If the roadmap holds, you get more investment.
The risk runs the other way for customers outside India. Protectt.ai's center of gravity is Indian BFSI and mobile apps. The stated new priority is "sovereign AI security" and Asian expansion, per Analytics India Magazine. A UK bank running AIGuardian air-gapped, or a European manufacturer that bought AISpectra because Bosch stood behind it, is now a small account at a Series A company whose growth plan points elsewhere. We covered the same pattern when Cohere moved to acquire AISLE and when Upwind bought Aegis, and when Hex-Rays agreed to buy HexAI, where air-gapped support was the open question. In each case the security buyer had to find out who would support the product in year two.
What Your Contract Probably Says
Your AIShield paper was most likely signed with a Bosch entity, and that is the first thing to check. The legacy site's footer names Bosch Global Software Technologies Private Limited; the new company is AI Shield Private Limited. If your order form names BGSW, a transfer to the new entity is an assignment, and many enterprise agreements require your consent or at least notice for that. If it already names the new entity, assume Bosch's minority stake carries no obligation to you unless your contract says otherwise.
Three clauses matter more than usual here. A change-of-control or assignment clause decides whether you can exit now without penalty. Our survey of AI vendor exit clauses found windows from 0 to 90 days for getting data out, so find yours before you need it. A support and staffing commitment matters because the team is small and being restructured. And the deployment terms matter if you run on-prem or air-gapped: the new site still promises both, but when a vendor merges overlapping products, the hardest variant to support is the likeliest to be cut.
Regulated buyers have one more step. If you are an EU financial entity, a new owner for an ICT provider is a DORA third-party risk question, which we walked through for HCLSoftware's purchase of Robotiq.ai. AIShield's runtime firewall sits in the inference path of your AI applications, so it is likely in scope.
What to Do About It
This Week:
- Pull your AIShield order form and master agreement and write down the contracting entity, the assignment clause and the change-of-control clause. If the counterparty is a Bosch entity, ask your account manager in writing whether the contract will be assigned to AI Shield Private Limited and on what date.
- Ask whether the deal has closed. Analytics India Magazine and Inc42 disagree; your notice obligations depend on the answer.
- Name your support contacts and check they are still employed by AIShield. With 12 to 15 people and a restructuring underway, this is a quick and useful test.
This Month:
- Request a written roadmap statement covering AISpectra and AIGuardian by name, the on-prem and air-gapped builds, and what happens to Protectt.ai's own Model Scanner, Runtime Protection and AI Red Teaming products. If the answer is "we will converge," ask which codebase wins and what your migration costs.
- Ask where your data will be processed and supported from after the deal. "Sovereign AI security" is the stated direction; get it written down for your jurisdiction.
- If AIGuardian sits in a production inference path, document a bypass or fallback guardrail so a support gap does not become an outage.
Before Renewal:
- Price one alternative for red teaming and one for runtime guardrails so you negotiate with a real number on the table.
- Ask for a change-of-control exit right and a named support SLA in the renewal, since this deal shows ownership can change mid-term.
The Bottom Line
Bosch has not said why it is giving up control of a unit it unveiled at CES in January 2022. The question for an AIShield customer is whether the product you bought for on-prem model scanning and a UK-bank-grade firewall stays a priority for an owner whose business is mobile app fraud in India. Protectt.ai has told the press what it wants to build. It has not yet told customers what it will keep.
Get the contracting entity and the support names on paper this week.
Continue Reading
- Cohere Signs Letter of Intent to Acquire AISLE for Cybersecurity
- Upwind Acquires Aegis to Expand Into AI Agent Security
- Five AI Vendors Give Customers 0 to 90 Days to Get Data Out
- Hex-Rays to Buy HexAI, Six-Person Startup, for Reported $30M-$35M
- HCL to Acquire Robotiq.ai for €9M to Expand Agentic Automation
- Cohere Says Alibaba's Qwen3.8 Tried to Upload a File to Beijing