Public-source research
Vendor evidence
Review what vendors say publicly, the exact quoted source text, the security requirement each statement may support, and what still needs verification.
Research library coverageCounts describe the research workflow, not vendor quality or product effectiveness.View details
Evidence records1280
Source checked863
Needs verification0
Source captured0
No supporting claim found411
Excluded from evidence6
Aurascape claims unified discovery, inventory, policy, compliance, human and agent governance, audit conversations, identity and intent context, approved registries, and cross-channel data lineage for employee AI and built agents.
One platform that covers both sides of enterprise AI agent risk.
Related framework references (5)
Varonis Atlas claims AI inventory, risk classification, policy enforcement, lineage graphs, structured assessments, framework codification, evidence and remediation status, audit trails, and compliance-ready reporting across the AI lifecycle.
Define and enforce AI usage policy across the organization and classify AI systems by risk level and business impact.
Related framework references (5)
Operant claims a centralized AI and Model Context Protocol (MCP) registry, security graph, threat mappings, agent and tool governance, audit artifacts, regulatory-control mappings, endpoint inventory, and real-time policy across the AI surface.
Establish a centralized governance framework for managing AI agents and tools across the enterprise.
Related framework references (5)
Tenable One AI Exposure claims continuous AI discovery, risk-aware inventory, owner and access context, acceptable-use policy, compliance support, exposure prioritization, remediation, and agent isolation across applications, infrastructure, identities, agents, and data.
Enforce AI acceptable-use policies and support compliance with emerging industry standards, including the NIST CSF and EU AI Act.
Related framework references (5)
Knostic claims need-to-know policy capture, knowledge classification, oversharing discovery, policy tuning, control validation, traceable decisions, audit reporting, and consistent enforcement across enterprise large language models (LLMs) and agents.
Explicitly captures and manages per-user, per-topic need-to-know policies.
Related framework references (5)
Onyx AI claims a approved self-hosted enterprise AI platform with organization and group sharing, permissions, usage analytics, model controls, auditability, and governed access to enterprise knowledge and actions.
Give your team an approved AI platform that actually works, so they stop pasting company data into ChatGPT.
Related framework references (5)
Cato AI Security claims discovery and inventory of managed, local, and shadow agents, centralized runtime visibility, security posture, compliance-risk remediation, and corporate policy across users, agents, applications, models, and tools.
Gain visibility into which agents exist, what data sources and tools they can access, and how they behave at runtime.
Related framework references (5)
JetStream SAIG claims AI estate discovery, approved design control, accountable ownership, runtime governance, drift detection, audit-ready evidence, policy boundaries, and cost accountability across humans, agents, NHIs, models, tools, Model Context Protocol (MCP), software as a service (SaaS), and cloud.
Every AI action is attributed to accountable owners and kept inside approved boundaries.
Related framework references (5)
Singulr claims policy authoring, ownership, risk thresholds, compliance scoring, lifecycle risk records, dataset licensing validation, agent topology and drift, and closed-loop governance across clouds, software as a service (SaaS), agents, models, data, and tools.
Define enforceable intent, ownership, and risk thresholds across AI systems and agents.
Related framework references (5)
Grip claims centralized discovery and governance for AI applications, tenants, users, agents, Model Context Protocol (MCP) servers, prompts, activity, application programming interface (API) keys, integrations, permissions, posture, policy violations, remediation, and compliance workflows.
Transforms that data into actionable insights across discovery, posture management, AI governance, and threat detection.
Related framework references (5)
Reco claims continuous inventory, ownership and permission mapping, policy enforcement, audit visibility, posture assessment, and governance for approved and shadow AI agents across software as a service (SaaS) environments.
The platform automatically inventories every AI agent operating across your connected SaaS applications.
Related framework references (5)
Zenity claims continuous discovery, inventory, ownership, configuration, permission, dependency, behavior, policy, posture, graph, incident, and audit governance across software as a service (SaaS)-managed, home-grown, and device-based AI agents.
Security teams gain clear visibility into agent ownership, configurations, permissions, dependencies, and runtime behavior.
Related framework references (5)
Token Security claims lifecycle governance for AI agents with continuous discovery, ownership, intent, access, policy, compliance validation, audit trails, behavioral monitoring, and automated remediation from creation through retirement.
Token Security unifies Visibility, Control, and Governance into a single platform purpose-built for AI agents and non-human identities.
Related framework references (5)
Iterate.ai claims centralized policy, observability, compliance controls, audit trails, data classification, retention, cost governance, and usage visibility across employees, applications, business agents, coding agents, models, and providers.
Monitor and govern models and agents with policy enforcement, audit trails, and cost controls.
Related framework references (5)
Credo AI claims regulatory policy packs, governance workflows, approval gates, automated evidence generation, and audit trails.
Pre-built policy packs for EU AI Act, NIST AI RMF, ISO 42001, and SOC 2 with automated governance workflows and audit-ready evidence.
Related framework references (5)
Holistic AI claims audit-ready reporting mapped to EU AI Act, ISO 42001, and NIST AI RMF requirements.
Export audit ready reports for any framework instantly
Related framework references (5)
Mindgard claims audit-ready reports and finding mappings to OWASP, MITRE, NIST, and AIUC-1.
Generate evidence, remediation guidance, and audit-ready reports mapped to OWASP, MITRE, NIST, and AIUC-1.
Related framework references (5)
Enkrypt AI claims policy-to-control mapping with owners, scope, approvals, version history, exceptions, and audit exports.
Approvals, change diffs, rollback, exceptions/waivers
Related framework references (5)
Akto claims forensic audit trails for AI prompts, responses, violations, and skill calls mapped to major AI frameworks.
Logs every prompt, response, violation and skill call as a forensic audit trail
Related framework references (5)
Okta claims automated agent governance workflows, lifecycle access reviews, revocation, and full audit trails.
automated governance workflows
Related framework references (5)