AI runtime &amp; agent security

1stProtect is an AI runtime security platform that controls what autonomous AI agents are allowed to do.

A10 Networks

NDR

Flow-based anomaly detection+10

A10 Networks delivers secure, high-performance networking solutions that protect and scale critical applications across core, cloud, and edge environments

Agen.co

Runtime agent action governance+8

The same identity foundation, extended to the new workforce: AI agents. Identity-native governance for everything that acts on your systems.

Agentic Fabriq

Agent identity bindingLeast-privilege access controls+9

The secure hub for agent identity, governance, and visibility. Control what your agents can access and do, for every user.

Air Security

AIR secures every AI add-on before it becomes part of your enterprise. From discovery and continuous vetting to governance and runtime protection, AIR enables organizations to adopt AI safely.

Zero Trust Network Access as a serviceDevice posture based adaptive access+9

Akamai

SASE

10 products

We make life better for billions of people, trillions of times a day

Alice

AI application risk testingRuntime guardrail enforcement+3

Keeping communicative tech safe, secure, and reliable.

AppOmni

SSPM

Agentless SaaS configuration monitoring+11

AppOmni is positioned as a SaaS Security Posture Management (SSPM) platform, not a traditional multi-cloud CSPM vendor.

Archestra.AI

Private MCP server registry+5

Archestra.AI is an open source security and governance layer positioned between large language models, AI agents, and enterprise data systems.

Astrix Security

Non-Human Identity (NHI)

Discover AI agents and NHIsMaintain a single AI inventory+9

Discover, secure, and deploy AI agents responsibly across the enterprise

Atsign

Encryption & Key Management

Edge-to-edge encryption+9

Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns.

Aurva

Runtime monitoring for AI stack+9

Aurva provides a runtime security layer specifically designed for agentic AI architectures and LLM-driven workflows.

Autonomous Security

MCP traffic interception+10

We build security and governance for AI agents running on desktops.

Backslash Security

ASPM

AI asset discovery and inventory+8

The Security Platform for The New Agentic AI Fabric.

Barndoor is one platform for AI access, safety, and control.

Barrikade

access controlAI securityauthentication+5

Barrikade tests web apps and AI features that a customer owns, with the customer's permission, and reports confirmed findings with reproduction steps in plain English. Each confirmed finding is turned into a test that is replayed every hour, and deep exploration runs monthly and after major changes.

BeyondGuard

AI agent discovery and inventory+8

BeyondGuard is the control plane for enterprise AI security. Inspecting every prompt, enforcing every policy, and auditing every decision your AI makes. AI security you can prove.

Phishing-resistant passwordless MFADevice-bound universal passkeys+10

Beyond Identity

MFA

6 products

Beyond Identity provides passwordless, phishing-resistant MFA built around device-bound cryptographic keys and device-native biometrics.

Britive

CIEM

9 products

Britive provides dynamic Cloud Privileged Access Management (CPAM) and Cloud Infrastructure Entitlement Management (CIEM) with patented just-in-time (JIT) ephemeral access across AWS, multi-cloud, SaaS, hybrid, and on-prem

Dynamic just-in-time cloud accessRuntime privilege enforcement+10

Burgus Security

SAST

I could not verify that a distinct vendor named Burgus Security has a documented Application Security product from the provided results.

CalypsoAI (F5)

Runtime prompt injection blockingAI output policy enforcement+7

CalypsoAI, acquired by F5 in 2025 and rebranded as F5 AI Guardrails (formerly Inference Defend), delivers runtime security for AI models, agents, and applications.

Cantina

Cantina is the world's first truly agentic security platform: autonomous AI agents that don't just detect threats, but understand, respond, and adapt in real time.

Cequence Security

Complete API visibility and monitoringAPI security posture assessment+9

Cequence Security sells API Security as part of its Unified API Protection platform, focusing on runtime discovery, inventory, compliance checks, and attack detection for internal, external, third-party, managed, unmanaged,

Certiv

Endpoint runtime agent discovery+11

We're building the control layer for the agentic workforce.

CASBCisco SD-WAN integration+16

Cisco

SASE

14 products

Cisco Umbrella is a cloud-delivered DNS-layer and network security platform providing Secure Internet Access, Security Service Edge (SSE), and Cloud Access Security Broker (CASB) capabilities for hybrid workforces.

Cline

Human-in-the-loop approval for actions+10

Cline provides a secure, enterprise-grade execution environment for autonomous coding agents and LLM-driven development systems.

CloudSEK Research Pte. Ltd.

Threat Intelligence

Real-time threat intelligence monitoring+8

CloudSEK is a digital risk protection platform (DRPP) that utilizes AI to monitor the deep, dark, and open web for external threats.

Cranium

AI asset discovery and inventoryShadow AI detectionCloud and code scanning+4

Born from KPMG Studio, Cranium gives enterprise teams one place to discover, observe, govern, secure and prove every AI and agentic system they build, buy or rely on, so innovation never outruns trust.

Crowsnest

Natural-language policy authoring+9

Crowsnest is the behavioral validation layer for enterprise security.

Cyera

DSPM

Cyera is a pioneer in the data security space that empowers security leaders to discover their data attack surface, control the use of data, monitor, detect, and quickly remediate risk.

Darkhunt

runtime guardrailsGuardian Agent+15

Darkhunt is an AI security company. We supervise AI agents in production: every action checked, every decision logged, dangerous actions stopped before they run.

Darktrace

NDR

Continuously monitors network trafficDetects anomalous network behavior+10

Darktrace is a network detection and response vendor centered on self-learning behavioral analytics for north-south and east-west traffic.

DataKrypto

Continuous encryption for AI operations+8

DataKrypto provides deep-tech data protection specifically for LLM and AI workloads using Fully Homomorphic Encryption (FHE).

DeepKeep

Discovers AI modelsnotebooksdatasets+21

DeepKeep is a model agnostic AI security platform

Deliverance AI

Deliverance AI is positioned as a runtime security vendor for AI agents and large language model deployments.

Drata

Compliance Management

Building the Trust Layer Between Great Companies

Dynamo Ai

Software Supply Chain & SBOM

Dynamo AI specializes in the governance and security of Large Language Models (LLMs) and Generative AI agents.

Endor Labs

OSS dependency governance+11

Endor Labs is a software supply chain security platform focused on open source governance and CI/CD risk detection. The platform targets DevSecOps teams seeking to reduce alert fatigue while maintaining security posture.

Ericom Software

Enterprise Browser & Isolation

End-to-end encrypted traffic inspection+10

Protect devices, apps, networks and data with isolation-based security solutions.

Eve Security

Block high-risk agent actions+7

Eve Security is an early-stage protection layer for AI agents, focusing on real-time policy enforcement and behavioral guarding.

F5 Advanced WAF

API endpoint discovery and inventoryOWASP API Top 10 protection+9

We deliver and secure every app

Flint AI

Runtime prompt-injection detection+8

Flint AI is a local-first AgentOps CLI and platform focused on AI runtime and agent security, with controls aimed at pre-production testing and runtime policy enforcement for autonomous agents.

Fortanix DSM (Data Security Manager)

Encryption & Key Management

Centralized enterprise key managementSecure key generation and storage+10

Fortanix is a data-first security company and a pioneer in Confidential Computing.

ForteShield AI

A2A securityAI-CVSS scoringAI gateway+7

ForteShield AI is an AI security platform that red-teams LLMs, MCP servers, agents, and agent-to-agent chains with automated adversarial probes. It also provides a gateway that enforces CEL policies, OAuth 2.0 authentication, per-tool RBAC, and PII masking on AI calls. The product can be self-hosted or deployed in the customer's own cloud.

General Analysis

AI asset discovery & inventory+5

General Analysis is a security platform for organizations that run AI agents and large language model systems in production.

Geordie

Real-time contextual agent governance+9

Lighting the way to safe and scalable enterprise agent adoption

HOL

local-firstpolicy enforcement+2

HOL Guard is a local-first runtime control / open-source antivirus for AI agents. Apache-2.0. It enforces policy before a risky agent action runs on the machine. Product site: https://hol.org/guard

IntentGate

AI agent governanceaudit export+5

IntentGate is a platform for governing business authority over humans, AI agents, machine identities, partners and third parties. It sits in the execution path and evaluates each action against short-lived IntentGrants, policy, context and risk, returning decisions such as PERMIT, RESTRICT, REDACT, STEP-UP or DENY. It also records a hash-chained, signed proof linking each request, decision and result.

JetStream Security

AI visibility and discovery+11

JetStream Security is a security-first AI governance platform that fits the AI Runtime & Agent Security category by governing live agent and LLM activity with identity-bound controls, runtime policy enforcement, and MCP oversight.

Keycard Labs, Inc.

Keycard Labs provides an authentication and authorization framework specifically designed for AI agents and LLM-driven applications.

+11

Kyvvu

Path-aware action enforcement+3

Kyvvu provides an Agent Security Kernel, an in-process enforcement layer that checks every action an AI agent takes against the full path of the task so far.

Lakera (Check Point)

Block prompt injection in real time+8

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

Lorasis

evidence provenancehash-linked records+4

Lorasis is developing RTEP, a proposed Runtime Trust Enforcement Platform category that aims to verify the integrity of running workloads using independently verifiable evidence and to enforce policy based on that evidence. The current foundation collects runtime evidence on selected workflow paths and issues signed, hash-linked records for named evidence slices within a declared scope. Hardware-rooted attestation and deterministic enforcement are described as intended paths, not shipped capabilities.

Manifold Security

Agentless endpoint runtime visibilityBehavioral monitoring of agent actions+3

AI Detection and Response, purpose-built for the agentic enterprise.

Menlo Security

Enterprise Browser & Isolation

Cloud-based remote browser isolation+11

As a pioneer of browser security, Menlo Security delivers a solution with a comprehensive approach to enterprise browser security, protecting users where they work and securing applications from internet-borne attacks.

Metomic

DLP

Metomic is AI data security for enterprise SaaS, the control plane for sensitive data across every SaaS tool and every AI surface. We find it, fix it, and prove it.

Mimic

Backup & DR

Backup server continuity+8

Mimic is a security vendor whose backup and disaster recovery offering centers on automated recovery of business-critical applications and data into a clean environment within 24 hours.

Mindgard

Mindgard gives organizations the visibility and protection to discover, assess, and defend their AI systems and agents.

+10

minimako

agent monitoringcontext cleanuphealth score+3

MiniMako is a tool for developers and freelancers who run AI agents such as Claude Code, Codex, Cursor and VS Code. It monitors the files, commands and connections an agent uses in real time, and blocks dangerous actions before they run. It also tracks token usage and cleans up agent skills and context.

Mint Security

MCP gateway governanceAgent gateway least privilege+10

Mint Security is an AI agent security platform focused on runtime governance for agentic systems and MCP-connected tools.

Mitiga

Cloud Detection & Response (CDR)

Panoramic AwarenessAttack DecodingAttack Mitigation+1

Mitiga is a cloud detection and response vendor focused on detecting, investigating, and containing active threats across cloud, SaaS, identity, and AI environments.

Neo

Neo secures agentic software across the enterprise by providing real-time visibility, risk intelligence, attribution, and control over AI agents, AI-enabled applications, MCP servers, extensions, and other software.

NeuralTrust

Runtime agent protection+5

NeuralTrust is an AI security platform that discovers and protects autonomous AI agents, models, and tools across an enterprise.

Nokod Security

Agent discovery and ownership mapping+4

Nokod Security is a security vendor focused on runtime protection for AI agents and citizen-built automations, especially in no-code and low-code environments.

Noma Security

Runtime monitoring for AI agents+10

Noma Security is an AI security platform purpose-built for autonomous AI agents, LLMs, and RAG systems across enterprise environments.

Novee

Autonomous AI red teamingExploit path validationOWASP AI testing coverage+6

Novee is primarily an AI penetration-testing vendor, not a pure AI runtime control plane.

Oligo Security

CWPP

Runtime workload protectionReal-time exploitation detection+7

Oligo Security is primarily a runtime security vendor, not a native CSPM specialist.

Omada

IGA

Identity lifecycle management+11

Omada Identity provides full-featured Identity Governance and Administration (IGA) solutions, including on-premises and SaaS (Omada Identity Cloud) deployments for managing identity lifecycles, access requests, certifications,

Openlayer

6 products

Openlayer is the AI governance platform that helps enterprises discover, test, monitor, govern, and optimize AI systems across their entire lifecycle, from prototype to production.

Operant Networks

Operant is built by a world-class team with decades of experience in networking, machine communications, and cybersecurity.

P0 Security

CIEM

P0 Security provides a cloud identity security platform that focuses on eliminating standing privileges through JIT (Just-in-Time) access and least-privilege enforcement.

Palo Alto Networks

NGFW

18 products

Palo Alto Networks is the world's leading cybersecurity company delivering AI-powered platform-based security solutions for networks, cloud, identities, and security operations across enterprises globally.

Pillar Security provides an AI security platform designed to discover, govern, and secure AI agents across an organization.

AI Discovery & Posture+3

Pluto

Pluto protects every layer of the AI atmosphere: tools, supply chain, artifacts and runtime, so everyone can safely launch themselves into the AI space

Promptfoo

Dynamic adaptive scan generation+7

Promptfoo helps developers and enterprises build secure, reliable AI applications.

Prompt Security (SentinelOne)

Prompt Security delivers runtime GenAI security across employee AI tools, custom LLM applications and AI agents.

+11

QuilrAI

QuilrAI offers an autonomous decision engine designed to secure interactions between human users and AI agents.

+10

Realm Labs

Realm Labs provides an AI Trust and Security platform designed to monitor and secure LLM applications in production environments.

Reco

Runtime prompt and tool-call inspection+9

Reco is the leader in Agentic Ecosystem Security, securing everything around the agent, not just the prompt.

RedForest.ai

agent discoveryAI governance+3

Red Agent Firewall is a runtime security layer for autonomous AI agents. It verifies agent identity, inspects prompts, context and tool calls in real time, and applies policy before agents execute sensitive actions or access data. It also records audit trails of agent actions, policy enforcement and data access events.

Rein Security

Rein Security provides a runtime security platform for enterprise AI agents and AI-powered applications.

RiskMandate

agent behaviour policyAI agent governanceapproval workflow+5

RiskMandate writes Agent Behaviour Policies, which record what one AI agent can reach, what it has been authorised to do, and the gap between the two. The policies cover AI agents in Gmail, HR, payroll, CRM and meeting apps, and can be enforced with existing controls or with SHarness, an open-source secure harness the company maintains. The company writes the rules and states that it is never in the request path.

Salt Security

Enrich API intelligenceDetect API attackers earlyProactive API posture improvement+3

The world leader in Agentic Security

Sector8 AI

Sector8 places an independent decision gate between agents and real-world actions.

SecurEnds

IGA

Automated identity lifecycle management+11

Govern every identity across your enterprise. Automate user access reviews, enforce least privilege, and simplify compliance.

Securiti

Privacy & Consent

Static application security testing+11

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Semgrep is a developer-focused SAST platform that combines static analysis with multimodal AI reasoning to detect vulnerabilities in source code.

Silverfort

ITDR

Silverfort secures every dimension of identity. We break down the silos of identity infrastructure and point solutions to eliminate security gaps and blind spots once and for all. The result?

Skyrelis

Agent Identity ModelLeast-Privilege Scoping+6

Skyrelis is a specialized security platform providing a runtime policy layer for autonomous AI agents, ensuring safe production deployment.

Sonar

SAST

Source code vulnerability scanning+8

Sonar helps developers deliver high quality and secure software by analyzing code they write, AI-generated code, and code leveraged from third parties (like open source libraries).

SOVEREIGN AI by ARMOR

Governed AI request gatewayPrompt and response auditingCompany-controlled AI access+5

Sovereign AI is built by Armor.

SplxAI

SPLX helps global enterprises secure AI systems end-to-end, with scalable red teaming, real-time threat protection, and automated AI compliance and governance.

Email needs to earn the right to be trusted by millions of people and organizations with their most sensitive information. We see a future where everyone is confident that their private correspondence is genuinely secure.

Straiker

AI agent inventory discoveryMCP server and tool mapping+5

Straiker is an agentic AI security vendor whose AI-SPM offering centers on discovery and posture management for AI agents rather than general cloud posture.

Synopsys

SAST

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products.

Tego AI

Security built for the agentic era, by the people who built security for the cloud era.

Tenet Security

Agent-side action simulation+5

Tenet Security provides runtime protection for autonomous AI agents inside enterprises.

Tigera Calico

CNAPP

Container image assurance scanningRuntime threat defense for workloads+10

Secure your Kubernetes workloads. Govern your AI agents.

Trendium

Authenticated, role-based AI accessInline data loss preventionAgent identity+1

Trendium sells ContextGuard, a governance layer that sits between AI tools and enterprise data: users authenticate to it, role-based access decides which data sources an AI tool may reach, and requests are inspected and redacted

Trent AI

Continuous code and infra scanning+5

Trent AI builds an AI-native security platform for organizations building or operating autonomous AI agents.

TrojAI

AI asset discovery and inventoryAI bill of materials management+3

TrojAI is a Canadian AI security vendor focused on securing AI models, applications, and agents across build-time and runtime, with a separate emphasis on AI model testing and policy enforcement.

Turbot

CSPM

Enforce cloud guardrails in real timeDetect and remediate misconfigurations+6

Turbot offers an automated cloud governance and remediation platform that enforces real-time guardrails across AWS, Azure, and GCP.

Tyk

Tyk is an open-source API gateway and API management platform that, in the API Security scope, provides request authentication, authorization, traffic controls, and policy enforcement for REST, GraphQL, gRPC, TCP, and SOAP APIs.

+11

Unbound

Unbound provides a security and governance layer for AI coding assistants and autonomous agents.

Upstream Security

Runtime AI and API security+11

Upstream Security is primarily an automotive and physical-AI security vendor, but its AI runtime offering extends into agent and API enforcement through its Runtime AI and API Security platform.

Verno Labs

Adversarial testing for AI agents+4

We're building the offensive AI that the next decade of enterprise security will depend on, and putting it in the hands of the companies who can't afford to wait.

Vijil

Vijil is the trust infrastructure that enterprises need to use AI agents with reliability, security, and safety.

Vorlon

Maps live data flows across agentsAgentless API-based detection with UEBA+9

The Agentic Ecosystem Security Platform.

Vyper Security

runtime prompt injection blocking+11

Vyper Security is a vendor in the AI Runtime & Agent Security category that focuses on protecting production LLM and agent workflows during execution, where prompts, tool calls, and model outputs can be manipulated.

Willow

Agent identity and access controlRuntime guardrail enforcement+6

Willow builds the identity and access layer for AI agents at work.

Wing Security

SSPM

Agent-based security for agent-based risk. By With Wings.

WitnessAI

Blocks prompt injections at runtime+11

WitnessAI is an enterprise-grade AI security platform that focuses on runtime governance and network-level visibility for Large Language Models (LLMs) and shadow AI.

WSO2 API Manager

OAuth2 API access control+11

9 products

WSO2 API Manager is an open-source API management platform that, in the API Security category, centers on gateway-enforced authentication, authorization, throttling, threat protection, and traffic mediation for HTTP APIs and, in

Xage Security

OT & IoT Security

Layered multi-factor authentication+10

Xage Security is a zero-trust access vendor whose IAM offering centers on identity-based access for mixed IT, OT, and edge environments.

Xeris AI

Super AI Agent runtime governance+8

Xeris AI provides specialized security for Agentic AI and workflows utilizing the Model Context Protocol (MCP).

Xiid Corporation

Outbound-only AI runtime isolation+10

Xiid Corporation is a security vendor whose AI Runtime & Agent Security story centers on its Terniion architecture and SealedTunnel/SealedChannel controls for constraining AI and agent traffic at runtime.

Zenity

6 products

Zenity provides unified security and governance for AI agents and Low-Code/No-Code applications across the enterprise ecosystem.

Zentera Systems, Inc.

SASE