Vendor evidence

Astrix claims real-time inventory of agents, Model Context Protocol (MCP) servers, and NHIs with ownership, business context, policy-at-creation, automated attestation, activity trails, and lifecycle governance.

Astrix Agent Control Plane materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Astrix Agent Control Plane materials reviewed did not establish model artifact scanning, provenance, signing, dependency analysis, Model Context Protocol (MCP) component vetting, tamper detection, or model-registry release controls.

Astrix claims policy-driven runtime access enforcement for agents using precisely scoped, short-lived, just-in-time credentials and pre-approved connectivity.

Astrix claims secure agent provisioning with ownership, automated attestation, precisely scoped least privilege, short-lived credentials, just-in-time access, pre-approved policy, and per-agent audit trails.

Astrix Agent Control Plane materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Entro claims discovery, ownership, lineage, blast-radius mapping, approval workflow, lifecycle provisioning and offboarding, continuous policy, segregation of duties, compliance dashboards, and audit-ready reports for agents and NHIs.

Entro agent and non-human identity (NHI) security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Entro agent and non-human identity (NHI) security materials reviewed did not establish model artifact scanning, provenance, signing, model dependency analysis, tamper detection, or model-registry release controls.

Entro claims real-time identity policy across agents and NHIs, just-in-time scoped access, intent monitoring, anomaly detection, and Model Context Protocol (MCP) session auditing for prompts, servers, and agent contacts.

Entro claims automated agent and non-human identity (NHI) provisioning, accountable ownership, minimum permissions, approval routing, just-in-time access, time bounds, continuous policy, access change, and offboarding.

Entro claims Claude Code intent and Model Context Protocol (MCP) session auditing, endpoint discovery of local agents and Model Context Protocol (MCP) configurations, secret scanning across the SDLC, and identity context for vibe-coding access paths.

Aembit claims centralized agent access policy, cryptographically verifiable identity, per-request policy decisions, and audit logs tying agent identity, user identity, target server, credential, and resource access together.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not establish model artifact scanning, provenance, signing, dependency or Model Context Protocol (MCP) component analysis, tamper detection, or model-registry release controls.

Aembit claims an Model Context Protocol (MCP) Identity Gateway that validates workload identity, enforces per-request policy, approves or denies access, exchanges credentials, and logs agent-to-resource communications.

Aembit claims cryptographically verified blended agent and user identity, OAuth 2.1 authorization, secure token exchange, ephemeral just-in-time credentials, least privilege, immediate revocation, and full access attribution.

Aembit identity and access management (IAM) for Agentic AI materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Prompt Security claims enterprise AI and Model Context Protocol (MCP) discovery, risk scoring, policy enforcement, searchable interaction logs, role-based controls, compliance policy, drift monitoring, and human oversight for agentic systems.

Prompt Security claims automated preproduction and continuous red teaming for prompt injection, data exposure, privilege escalation, jailbreaks, unsafe agent behavior, drift, and other AI-specific risks with evidence and remediation guidance.