What Pi is
Pi is an agentic product security platform that builds an institutional security memory to autonomously triage, remediate, and prevent recurring vulnerability classes across the SDLC. The vendor site is www.pi.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Pi covers
Pi is in the catalog for these capabilities. Categories: SAST and Agentic Development Security.
How to evaluate Pi in a security program
Use Pi as a stack candidate, not as diligence evidence. The oneNorma score for Pi is 5/10 (percentile 46). If the real gap is in SAST and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.pi.security publishes. Contrast it with pentesting and Security Cloud & Compliance.