Vendor evidence

Microsoft Purview AI protection materials reviewed did not provide a clear Model Context Protocol (MCP), agent-to-agent (A2A), or agent-to-agent security control claim.

Microsoft Purview AI protection materials reviewed did not provide a clear non-human identity or service-account lifecycle security claim.

Cisco AI Defense materials reviewed did not provide a public claim for governing coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Wiz AI-SPM materials reviewed did not provide a public product claim for automated adversarial testing, model or agent red teaming, repeatable attack suites, or release-gate evaluation.

Microsoft Purview materials reviewed did not provide a public product claim for automated adversarial testing, agent or model red teaming, repeatable attack suites, or release-gate evaluation.

Microsoft Purview materials reviewed did not provide a public product claim for model artifact scanning, provenance, signing, tamper analysis, dependency inventory, or registry release controls.

Microsoft Purview materials reviewed did not provide a public product claim for governing coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Check Point AI Agent Security and Lakera Guard materials reviewed did not provide a public customer-facing product claim for automated adversarial testing, repeatable attack suites, or release-gate red teaming.

Check Point AI Agent Security and Lakera Guard materials reviewed did not establish controls specifically for coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, hooks, secrets, or package actions.

Pangea AI Guard and Prompt Guard materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Pangea AI Guard materials reviewed did not provide a public product claim for model artifact scanning, provenance, signing, dependency inventory, tamper analysis, or registry release controls.

Pangea AI Guard materials reviewed did not establish agent identity registration, distinct agent credentials, delegated authorization, ownership, rotation, revocation, or agent access-review lifecycle.

Pangea AI Guard materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

F5 AI Guardrails and AI Red Team materials reviewed did not establish model artifact scanning, provenance, signing, dependency inventory, tamper analysis, or model-registry release controls.

F5 AI Guardrails and AI Red Team materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Oasis Agentic Access Management materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Astrix Agent Control Plane materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

Astrix Agent Control Plane materials reviewed did not establish model artifact scanning, provenance, signing, dependency analysis, Model Context Protocol (MCP) component vetting, tamper detection, or model-registry release controls.

Astrix Agent Control Plane materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

Entro agent and non-human identity (NHI) security materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.