“The proliferation of multiple AI vendors, including open-source models, necessitates a third-party security solution because it is unrealistic to expect all vendors to provide a consistent level of security.”