ASAI Security ResearchIndependent public-source research
Public reviewread only

Public-source research

Vendor evidence

Review what vendors say publicly, the exact quoted source text, the security requirement each statement may support, and what still needs verification.

Research library coverageCounts describe the research workflow, not vendor quality or product effectiveness.View details
Evidence records1280
Source checked863
Needs verification0
Source captured0
No supporting claim found411
Excluded from evidence6

Showing 1–19 of 19 evidence records

Clear all filters
Astrix Security / CiscoAI governance, risk, and complianceSource checkedStrong public support for this requirement

Astrix claims real-time inventory of agents, Model Context Protocol (MCP) servers, and NHIs with ownership, business context, policy-at-creation, automated attestation, activity trails, and lifecycle governance.

Apply policy as agents are deployed to establish clear ownership and automate attestation.
Related framework references (5)
Astrix Security / CiscoAI assurance and adversarial testingNo supporting claim found

Astrix Agent Control Plane materials reviewed did not provide a public product claim for automated adversarial testing, repeatable attack suites, model or agent red teaming, or release-gate evaluation.

No quoted source text is recorded for this claim.
Related framework references (5)
Astrix Security / CiscoAI model and supply-chain securityNo supporting claim found

Astrix Agent Control Plane materials reviewed did not establish model artifact scanning, provenance, signing, dependency analysis, Model Context Protocol (MCP) component vetting, tamper detection, or model-registry release controls.

No quoted source text is recorded for this claim.
Related framework references (5)
Astrix Security / CiscoAI gateway, tool-connection, and runtime controlsSource checkedLimited public support for this requirement

Astrix claims policy-driven runtime access enforcement for agents using precisely scoped, short-lived, just-in-time credentials and pre-approved connectivity.

Every agent and workload gets policy-driven, short-lived credentials delivered with precisely scoped and just-in-time access.
Related framework references (5)
Astrix Security / CiscoAI agent identity and permissionsSource checkedStrong public support for this requirement

Astrix claims secure agent provisioning with ownership, automated attestation, precisely scoped least privilege, short-lived credentials, just-in-time access, pre-approved policy, and per-agent audit trails.

Provision secure-by-design AI agents with short-lived credentials, just-in-time, precisely scoped access, and policy at creation.
Related framework references (5)
Astrix Security / CiscoAI coding-agent and workstation securityNo supporting claim found

Astrix Agent Control Plane materials reviewed did not establish governance of coding-agent commands, developer-workstation files or networks, integrated development environment (IDE) extensions, skills, hooks, secrets, or package actions.

No quoted source text is recorded for this claim.
Related framework references (5)
Astrix Security / CiscoAI cost and usage controlsNo supporting claim found

Astrix Security platform materials reviewed did not provide a public product claim for AI usage-cost attribution, token or spend metrics, budgets, chargeback, or cost-aware model routing.

No quoted source text is recorded for this claim.
Related framework references (5)
Astrix Security / CiscoUnapproved AI use discoverySource checkedLimited public support for this requirement

Astrix claims automated discovery of all AI agents, including shadow and unregistered agents.

Automated discovery of all agents—custom, third-party, or home-grown—including shadow, unregistered agents.
Related framework references (5)
Astrix Security / CiscoControls for unapproved AI useSource checkedStrong public support for this requirement

Astrix claims it identifies and remediates AI agents and NHIs with excessive privileges, vulnerable configurations, abnormal activity, and policy violations.

Identify and remediate AI agents and NHIs with excessive privileges, vulnerable configurations, abnormal activity, and policy violations.
Related framework references (5)
Astrix Security / CiscoSensitive-data protection for generative AISource checkedLimited public support for this requirement

Astrix publishes a customer quote stating it helps reduce data exfiltration risk, remediate third-party integration risks, and move toward least privilege.

“Astrix helps us us reduce the risk of data exfiltration, remediate third-party integration risks and go down to a least-privileged model.”
Related framework references (5)
Astrix Security / CiscoAction-taking agent monitoringSource checkedStrong public support for this requirement

Astrix Security claims it detects and responds to threats such as compromised credentials and out-of-scope agent actions.

Detect and respond to threats such as compromised credentials and out-of-scope agent actions.
Related framework references (5)
Astrix Security / CiscoAgent-to-agent communication securitySource checkedLimited public support for this requirement

Astrix claims detection and response for out-of-scope AI-agent actions, abnormal activity, and compromised credentials.

abnormal activity, and policy violations
Related framework references (5)
Astrix Security / CiscoNon-human identity and service-account securitySource checkedStrong public support for this requirement

Astrix Security claims it discovers, secures, and manages AI agents and NHIs and remediates excessive privileges and vulnerable configurations.

Identify and remediate AI agents and NHIs with excessive privileges, vulnerable configurations, abnormal activity, and policy violations.
Related framework references (5)