Vendor evidence

Entro agent and non-human identity (NHI) security materials reviewed did not establish model artifact scanning, provenance, signing, model dependency analysis, tamper detection, or model-registry release controls.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not establish model artifact scanning, provenance, signing, dependency or Model Context Protocol (MCP) component analysis, tamper detection, or model-registry release controls.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Harmonic platform materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Harmonic platform materials reviewed did not establish model artifact scanning, provenance, signing, dependency analysis, Model Context Protocol (MCP) component risk scoring, tamper detection, or model-registry release controls.

Cyberhaven AI Security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Nightfall Model Context Protocol (MCP) and agent security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Island AI Services materials reviewed did not provide a public customer-facing product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Island AI Services materials reviewed did not establish model artifact scanning, provenance, signing, dependency or Model Context Protocol (MCP) component analysis, tamper detection, or model-registry release controls.

LayerX Interaction Security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

LayerX Interaction Security materials reviewed did not establish model artifact scanning, provenance, signing, dependency or Model Context Protocol (MCP) component analysis, tamper detection, or model-registry release controls.

Tenable AI Exposure and AI-SPM materials reviewed did not provide a public customer-facing product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Knostic and AgentMesh materials reviewed did not provide a public product claim for automated adversarial testing of customer models or agents, repeatable attack suites, or release-gate red teaming.

Onyx AI materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Onyx AI materials reviewed did not establish model artifact scanning, provenance, signing, dependency or Model Context Protocol (MCP) component analysis, tamper detection, or model-registry release controls.

Onyx AI materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Cato AI Security and AIM materials reviewed did not provide a public customer-facing product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

JetStream SAIG materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Grip AI and software as a service (SaaS) security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.