ASAI Security ResearchIndependent public-source research
Public reviewread only

Public-source research

Vendor evidence

Review what vendors say publicly, the exact quoted source text, the security requirement each statement may support, and what still needs verification.

Research library coverageCounts describe the research workflow, not vendor quality or product effectiveness.View details
Evidence records1280
Source checked863
Needs verification0
Source captured0
No supporting claim found411
Excluded from evidence6

Showing 1–19 of 19 evidence records

Clear all filters
Credo AIAI-feature discovery in business applicationsSource checkedLimited public support for this requirement

Credo AI claims a centralized inventory of agents, models, applications, and shadow AI with enterprise auto-discovery.

Centralized inventory of every AI system, including agents, models, apps, and shadow AI, with auto-discovery across your enterprise.
Credo AIControls for unapproved AI useSource checkedRelated public context only

Credo AI claims policy enforcement and production monitoring, with planned enforcement integrations for CI/CD, cloud access security broker (CASB), and application programming interface (API) gateways.

Planned enforcement integration with CI/CD, CASBs, and API gateways
Credo AISensitive-data protection for generative AINo supporting claim found

Credo AI materials reviewed did not provide a public claim for inline detection, redaction, or blocking of sensitive data in prompts, responses, files, retrieval, or memory.

No quoted source text is recorded for this claim.
Credo AIBrowser and business-application controlsNo supporting claim found

Credo AI materials reviewed did not provide a public claim for browser session controls over upload, download, copy, paste, sharing, or form submission.

No quoted source text is recorded for this claim.
Credo AIAI governance, risk, and complianceSource checkedStrong public support for this requirement

Credo AI claims regulatory policy packs, governance workflows, approval gates, automated evidence generation, and audit trails.

Pre-built policy packs for EU AI Act, NIST AI RMF, ISO 42001, and SOC 2 with automated governance workflows and audit-ready evidence.
Credo AIAI model and supply-chain securitySource checkedLimited public support for this requirement

Credo AI claims third-party model tracking, model and vendor lineage graphs, and model metadata in its agent governance inventory.

Model + vendor lineage graphs
Credo AIAI gateway, tool-connection, and runtime controlsSource checkedLimited public support for this requirement

Credo AI claims platform and Model Context Protocol (MCP) server governance while describing CI/CD, cloud access security broker (CASB), and application programming interface (API) gateway enforcement integration as planned.

Platform & MCP Server governance
Credo AIAction-taking agent monitoringSource checkedStrong public support for this requirement

Credo AI claims continuous evaluation of agent traces with escalation, monitoring, and alerts.

Continuous evaluation of agent traces to detect policy violations, drift, and unsafe behavior, with human-in-the-loop escalation.
Credo AIAgent-to-agent communication securitySource checkedLimited public support for this requirement

Credo AI claims dependency mapping across agents, models, tools, and data, plus agentic risk coverage for inter-agent risk.

Dependency graph mapping across agents, models, tools, and data
Credo AINon-human identity and service-account securityNo supporting claim found

Credo AI materials reviewed did not provide a public claim for service-account, workload-identity, application programming interface (API)-key, secret-rotation, or machine-credential lifecycle management.

No quoted source text is recorded for this claim.
Credo AIAI agent identity and permissionsSource checkedLimited public support for this requirement

Credo AI claims agent cards containing purpose, tools, data sources, and guardrails, with ownership and accountability in the Agent Registry.

Agent Registry with agent cards (purpose, tools, data sources, guardrails)
Credo AIAI coding-agent and workstation securityNo supporting claim found

Credo AI materials reviewed did not provide a public claim for controlling coding-agent commands, filesystem or network actions, skills, hooks, integrated development environment (IDE) extensions, packages, or workstation activity.

No quoted source text is recorded for this claim.
Credo AIAI cost and usage controlsNo supporting claim found

Credo AI materials reviewed did not provide a public claim for model or agent spend attribution, budgets, rate limits, chargeback, or anomalous token-cost controls.

No quoted source text is recorded for this claim.
Credo AILicensing modelSource checkedLimited public support for this requirement

Credo AI claims modular product packaging whose modules can operate independently.

Each module works independently but is more powerful together.
Credo AIApproved AI platform contextSource checkedStrong public support for this requirement

Credo AI claims integrations across cloud, agent, GRC, DevOps, and MLOps platforms, positioning it as a governance layer over enterprise AI systems.

AWS, Azure, GCP, Databricks, Snowflake