Enterprise AI security and governance software company Cranium AI has signed Telstra as a customer for its AI operational governance platform, designed to help organisations manage AI security, compliance and third party risk.
The Telstra deal lands after Cranium raised US$25 million in Series A funding on October 2025. Telstra Ventures led the round, with participation from KPMG LLP and SYN Ventures.
Cranium, a KPMG spin-out, providees AI vulnerability management across AI technologies, datasets, models and infrastructure - areas it argues traditional security tools miss.
Its “CodeSensor” generates bills of materials "with automated vulnerability assessments categorised by component type", linked to specific OWASP/OSV classifications for remediation.and automated vulnerability assessments mapped to OWASP and OSV classifications. Its “Arena Shield” provides automated penetration testing aligned to the OWASP Top 10 for LLMs and MITRE ATLAS.
For dealing with third party AI risk, its “AI Cards” provide component inventories, industry-standard vulnerability classifications, quantifiable compliance scoring, and governance. The company likens the "cards" to a "digital passport".




