Best AI Runtime & Agent Security Tools

1stProtect is an AI runtime security platform that controls what autonomous AI agents are allowed to do.

A10 Networks delivers secure, high-performance networking solutions that protect and scale critical applications across core, cloud, and edge environments

The same identity foundation, extended to the new workforce: AI agents. Identity-native governance for everything that acts on your systems.

The secure hub for agent identity, governance, and visibility. Control what your agents can access and do, for every user.

AIR secures every AI add-on before it becomes part of your enterprise. From discovery and continuous vetting to governance and runtime protection, AIR enables organizations to adopt AI safely.

We make life better for billions of people, trillions of times a day

Keeping communicative tech safe, secure, and reliable.

AppOmni is positioned as a SaaS Security Posture Management (SSPM) platform, not a traditional multi-cloud CSPM vendor.

Archestra.AI is an open source security and governance layer positioned between large language models, AI agents, and enterprise data systems.

Discover, secure, and deploy AI agents responsibly across the enterprise

Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns.

Aurva provides a runtime security layer specifically designed for agentic AI architectures and LLM-driven workflows.

We build security and governance for AI agents running on desktops.

The Security Platform for The New Agentic AI Fabric.

Barndoor is one platform for AI access, safety, and control.

Barrikade tests web apps and AI features that a customer owns, with the customer's permission, and reports confirmed findings with reproduction steps in plain English. Each confirmed finding is turned into a test that is replayed every hour, and deep exploration runs monthly and after major changes.

BeyondGuard is the control plane for enterprise AI security. Inspecting every prompt, enforcing every policy, and auditing every decision your AI makes. AI security you can prove.

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics.

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem

I could not verify that a distinct vendor named Burgus Security has a documented Application Security product from the provided results.

CalypsoAI, acquired by F5 in 2025 and rebranded as F5 AI Guardrails (formerly Inference Defend), delivers runtime security for AI models, agents, and applications.

Cantina is the world's first truly agentic security platform: autonomous AI agents that don't just detect threats, but understand, respond, and adapt in real time.

Cequence Security sells API Security as part of its Unified API Protection platform, focusing on runtime discovery, inventory, compliance checks, and attack detection for internal, external, third-party, managed, unmanaged,

We're building the control layer for the agentic workforce.

Cisco Umbrella is a cloud-delivered DNS-layer and network security platform providing Secure Internet Access, Security Service Edge (SSE), and Cloud Access Security Broker (CASB) capabilities for hybrid workforces.

Cline provides a secure, enterprise-grade execution environment for autonomous coding agents and LLM-driven development systems.

CloudSEK is a digital risk protection platform (DRPP) that utilizes AI to monitor the deep, dark, and open web for external threats.

Born from KPMG Studio, Cranium gives enterprise teams one place to discover, observe, govern, secure and prove every AI and agentic system they build, buy or rely on, so innovation never outruns trust.

Crowsnest is the behavioral validation layer for enterprise security.

Cyera is a pioneer in the data security space that empowers security leaders to discover their data attack surface, control the use of data, monitor, detect, and quickly remediate risk.

Darkhunt is an AI security company. We supervise AI agents in production: every action checked, every decision logged, dangerous actions stopped before they run.

Darktrace is a network detection and response vendor centered on self-learning behavioral analytics for north-south and east-west traffic.

DataKrypto provides deep-tech data protection specifically for LLM and AI workloads using Fully Homomorphic Encryption (FHE).

DeepKeep is a model agnostic AI security platform

Deliverance AI is positioned as a runtime security vendor for AI agents and large language model deployments.

Building the Trust Layer Between Great Companies

Dynamo AI specializes in the governance and security of Large Language Models (LLMs) and Generative AI agents.

Endor Labs is a software supply chain security platform focused on open source governance and CI/CD risk detection. The platform targets DevSecOps teams seeking to reduce alert fatigue while maintaining security posture.

Protect devices, apps, networks and data with isolation-based security solutions.

Eve Security is an early-stage protection layer for AI agents, focusing on real-time policy enforcement and behavioral guarding.

We deliver and secure every app

Flint AI is a local-first AgentOps CLI and platform focused on AI runtime and agent security, with controls aimed at pre-production testing and runtime policy enforcement for autonomous agents.

Fortanix is a data-first security company and a pioneer in Confidential Computing.

ForteShield AI is an AI security platform that red-teams LLMs, MCP servers, agents, and agent-to-agent chains with automated adversarial probes. It also provides a gateway that enforces CEL policies, OAuth 2.0 authentication, per-tool RBAC, and PII masking on AI calls. The product can be self-hosted or deployed in the customer's own cloud.

General Analysis is a security platform for organizations that run AI agents and large language model systems in production.

Lighting the way to safe and scalable enterprise agent adoption

HOL Guard is a local-first runtime control / open-source antivirus for AI agents. Apache-2.0. It enforces policy before a risky agent action runs on the machine. Product site: https://hol.org/guard

IntentGate is a platform for governing business authority over humans, AI agents, machine identities, partners and third parties. It sits in the execution path and evaluates each action against short-lived IntentGrants, policy, context and risk, returning decisions such as PERMIT, RESTRICT, REDACT, STEP-UP or DENY. It also records a hash-chained, signed proof linking each request, decision and result.

JetStream Security is a security-first AI governance platform that fits the AI Runtime & Agent Security category by governing live agent and LLM activity with identity-bound controls, runtime policy enforcement, and MCP oversight.

Keycard Labs provides an authentication and authorization framework specifically designed for AI agents and LLM-driven applications.

Kyvvu provides an Agent Security Kernel, an in-process enforcement layer that checks every action an AI agent takes against the full path of the task so far.

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

Lorasis is developing RTEP, a proposed Runtime Trust Enforcement Platform category that aims to verify the integrity of running workloads using independently verifiable evidence and to enforce policy based on that evidence. The current foundation collects runtime evidence on selected workflow paths and issues signed, hash-linked records for named evidence slices within a declared scope. Hardware-rooted attestation and deterministic enforcement are described as intended paths, not shipped capabilities.

AI Detection and Response, purpose-built for the agentic enterprise.

As a pioneer of browser security, Menlo Security delivers a solution with a comprehensive approach to enterprise browser security, protecting users where they work and securing applications from internet-borne attacks.

Metomic is AI data security for enterprise SaaS, the control plane for sensitive data across every SaaS tool and every AI surface. We find it, fix it, and prove it.

Mimic is a security vendor whose backup and disaster recovery offering centers on automated recovery of business-critical applications and data into a clean environment within 24 hours.

Mindgard gives organizations the visibility and protection to discover, assess, and defend their AI systems and agents.

MiniMako is a tool for developers and freelancers who run AI agents such as Claude Code, Codex, Cursor and VS Code. It monitors the files, commands and connections an agent uses in real time, and blocks dangerous actions before they run. It also tracks token usage and cleans up agent skills and context.

Mint Security is an AI agent security platform focused on runtime governance for agentic systems and MCP-connected tools.

Mitiga is a cloud detection and response vendor focused on detecting, investigating, and containing active threats across cloud, SaaS, identity, and AI environments.

Neo secures agentic software across the enterprise by providing real-time visibility, risk intelligence, attribution, and control over AI agents, AI-enabled applications, MCP servers, extensions, and other software.

NeuralTrust is an AI security platform that discovers and protects autonomous AI agents, models, and tools across an enterprise.

Nokod Security is a security vendor focused on runtime protection for AI agents and citizen-built automations, especially in no-code and low-code environments.

Noma Security is an AI security platform purpose-built for autonomous AI agents, LLMs, and RAG systems across enterprise environments.

Novee is primarily an AI penetration-testing vendor, not a pure AI runtime control plane.

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

Omada Identity provides full-featured Identity Governance and Administration (IGA) solutions, including on-premises and SaaS (Omada Identity Cloud) deployments for managing identity lifecycles, access requests, certifications,

Openlayer is the AI governance platform that helps enterprises discover, test, monitor, govern, and optimize AI systems across their entire lifecycle, from prototype to production.

Operant is built by a world-class team with decades of experience in networking, machine communications, and cybersecurity.

P0 Security provides a cloud identity security platform that focuses on eliminating standing privileges through JIT (Just-in-Time) access and least-privilege enforcement.

Palo Alto Networks is the world's leading cybersecurity company delivering AI-powered platform-based security solutions for networks, cloud, identities, and security operations across enterprises globally.

Pillar Security provides an AI security platform designed to discover, govern, and secure AI agents across an organization.

Pluto protects every layer of the AI atmosphere: tools, supply chain, artifacts and runtime, so everyone can safely launch themselves into the AI space

Promptfoo helps developers and enterprises build secure, reliable AI applications.

Prompt Security delivers runtime GenAI security across employee AI tools, custom LLM applications and AI agents.

QuilrAI offers an autonomous decision engine designed to secure interactions between human users and AI agents.

Realm Labs provides an AI Trust and Security platform designed to monitor and secure LLM applications in production environments.

Reco is the leader in Agentic Ecosystem Security, securing everything around the agent, not just the prompt.

Red Agent Firewall is a runtime security layer for autonomous AI agents. It verifies agent identity, inspects prompts, context and tool calls in real time, and applies policy before agents execute sensitive actions or access data. It also records audit trails of agent actions, policy enforcement and data access events.

Rein Security provides a runtime security platform for enterprise AI agents and AI-powered applications.

RiskMandate writes Agent Behaviour Policies, which record what one AI agent can reach, what it has been authorised to do, and the gap between the two. The policies cover AI agents in Gmail, HR, payroll, CRM and meeting apps, and can be enforced with existing controls or with SHarness, an open-source secure harness the company maintains. The company writes the rules and states that it is never in the request path.

The world leader in Agentic Security

Sector8 places an independent decision gate between agents and real-world actions.

Govern every identity across your enterprise. Automate user access reviews, enforce least privilege, and simplify compliance.

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Semgrep is a developer-focused SAST platform that combines static analysis with multimodal AI reasoning to detect vulnerabilities in source code.

Silverfort secures every dimension of identity. We break down the silos of identity infrastructure and point solutions to eliminate security gaps and blind spots once and for all. The result?

Skyrelis is a specialized security platform providing a runtime policy layer for autonomous AI agents, ensuring safe production deployment.

Sonar helps developers deliver high quality and secure software by analyzing code they write, AI-generated code, and code leveraged from third parties (like open source libraries).

Sovereign AI is built by Armor.

SPLX helps global enterprises secure AI systems end-to-end, with scalable red teaming, real-time threat protection, and automated AI compliance and governance.

Email needs to earn the right to be trusted by millions of people and organizations with their most sensitive information. We see a future where everyone is confident that their private correspondence is genuinely secure.

Straiker is an agentic AI security vendor whose AI-SPM offering centers on discovery and posture management for AI agents rather than general cloud posture.

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products.

Security built for the agentic era, by the people who built security for the cloud era.

Tenet Security provides runtime protection for autonomous AI agents inside enterprises.

Secure your Kubernetes workloads. Govern your AI agents.

Trendium sells ContextGuard, a governance layer that sits between AI tools and enterprise data: users authenticate to it, role-based access decides which data sources an AI tool may reach, and requests are inspected and redacted

Trent AI builds an AI-native security platform for organizations building or operating autonomous AI agents.

TrojAI is a Canadian AI security vendor focused on securing AI models, applications, and agents across build-time and runtime, with a separate emphasis on AI model testing and policy enforcement.

Turbot offers an automated cloud governance and remediation platform that enforces real-time guardrails across AWS, Azure, and GCP.

Tyk is an open-source API gateway and API management platform that, in the API Security scope, provides request authentication, authorization, traffic controls, and policy enforcement for REST, GraphQL, gRPC, TCP, and SOAP APIs.

Unbound provides a security and governance layer for AI coding assistants and autonomous agents.

Upstream Security is primarily an automotive and physical-AI security vendor, but its AI runtime offering extends into agent and API enforcement through its Runtime AI and API Security platform.

We're building the offensive AI that the next decade of enterprise security will depend on, and putting it in the hands of the companies who can't afford to wait.

Vijil is the trust infrastructure that enterprises need to use AI agents with reliability, security, and safety.

The Agentic Ecosystem Security Platform.

Vyper Security is a vendor in the AI Runtime & Agent Security category that focuses on protecting production LLM and agent workflows during execution, where prompts, tool calls, and model outputs can be manipulated.

Willow builds the identity and access layer for AI agents at work.

Agent-based security for agent-based risk. By With Wings.

WitnessAI is an enterprise-grade AI security platform that focuses on runtime governance and network-level visibility for Large Language Models (LLMs) and shadow AI.

WSO2 API Manager is an open-source API management platform that, in the API Security category, centers on gateway-enforced authentication, authorization, throttling, threat protection, and traffic mediation for HTTP APIs and, in

Xage Security is a zero-trust access vendor whose IAM offering centers on identity-based access for mixed IT, OT, and edge environments.

Xeris AI provides specialized security for Agentic AI and workflows utilizing the Model Context Protocol (MCP).

Xiid Corporation is a security vendor whose AI Runtime & Agent Security story centers on its Terniion architecture and SealedTunnel/SealedChannel controls for constraining AI and agent traffic at runtime.

Zenity provides unified security and governance for AI agents and Low-Code/No-Code applications across the enterprise ecosystem.

Zentera Systems offers a Zero Trust Network Access (ZTNA) and microsegmentation platform centered around its Virtual Chamber technology.