Lema AI is an AI security company founded in 2023 that builds tools for third-party vendor risk. Its main product, the Agentic Risk Engineer, is described as the first platform of its kind in third-party risk management (TPRM). Rather than relying on checkbox questionnaires, it investigates vendor risk in the manner of a security researcher: automatically analysing vendor artefacts, gathering publicly available intelligence, and monitoring the actual interfaces between vendors and their customers. The aim is to surface risks that paperwork misses - misclassified vulnerabilities, shadow AI tools used without approval, unauthorised access grants and fourth-party sub-processor sprawl.
The company was founded by elite vulnerability researchers with backgrounds in threat hunting rather than compliance and audit. Its stated mission is to move TPRM from a compliance exercise towards genuine risk engineering. Technical work spans agentic AI, vulnerability research, threat intelligence and attack surface monitoring, in a team described as small and research-driven. The company cites industry data that 48% of breaches occur through third-party vendors.
Lema AI is backed by Team8, Salesforce Ventures and F2 Venture Capital, and counts Fortune 500 companies among its customers. The company operates in the cybersecurity, TPRM and enterprise B2B software verticals.
