Work discovery & human delegation
Products that map organizational work — roles, duties, tasks, ownership — and govern the boundary at which a task is delegated from a human to an agent, including approval and accountability records.
AN EDITORIAL DIRECTORY · 160 PRODUCTS, PROJECTS & SERVICES
Find the layer
you need.
Explore 12 parts of AI governance. Understand what each offering addresses, inspect its evidence, and bring a better question to the next conversation.
Research snapshot September 6, 2026 · Published by DutyGraph · No paid placements
Understand the 12 categories
Agent building & orchestration
Frameworks and platforms for developing, executing and operating agents and agentic workflows. Listed here only with an explicit statement of which governance features (approvals, audit logs, permission scoping, versioning, isolation) are actually documented.
Agent discovery & inventory
Products that find AI systems and agents in an environment — sanctioned or not — and build an inventory with ownership attribution. Each entry must state what is actually detected and by what mechanism.
Agent identity & access
Products that issue and manage identities and credentials for agents and other non-human principals, and govern their entitlements — least privilege, access reviews, delegated authorization and identity lifecycle.
Runtime authorization & controls
Products that make and enforce policy decisions at the moment an agent acts — authorizing tool and API calls, mediating MCP and model traffic, requiring human approval, sandboxing execution, and revoking access.
Agent security & threat detection
Products focused on adversarial risk to and from agents: prompt injection, tool abuse, agent-mediated data exfiltration, malicious MCP servers, plus adversarial testing, detection and response.
AI risk & compliance management
Governance-of-record systems for an AI program: use-case inventories, risk assessments, policy and approval workflows, accountability assignment, regulatory framework mapping, and audit evidence collection.
Evaluation & testing
Products for measuring model and agent behaviour before and after deployment: dataset-based evals, safety evaluations, red teaming, simulation, benchmarking and regression testing.
Observability & traceability
Products that capture and expose the record of what an AI system did: traces and spans, tool-call and decision logs, provenance, monitoring, replay and incident investigation.
Data governance & privacy
Products that control what data AI systems and agents can reach and reveal: sensitive-data discovery and classification for AI, retrieval permission enforcement, redaction, lineage, consent and AI data leakage prevention.
Model lifecycle & governance
Products that govern models as controlled assets: registries, approval gates, model risk management and validation, deployment controls, versioning and lifecycle monitoring including drift.
Advisory & assurance services
Human-delivered engagements rather than software: AI governance consulting, implementation, algorithmic audit and assurance, conformity assessment and certification, and training or certification programs.
160 offerings shown
No entries match. Try a broader term or clear the filters.
Agent identity & access
1Password AI Agent Identity Kit
A developer kit layered on 1Password vaults and SDKs that gives a software agent a verifiable identity tied to a workload, issues short-lived agent tokens instead of shared API keys, scopes what the agent may access and links agent actions to audit trails. It sits within the broader 1Password Unified Access platform.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show an agent receiving a short-lived credential tied to its workload identity, using an approved secret without exposing it, and the audit trail linking the action to a user.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Aembit Workload IAM
A workload identity and access platform that attests the client environment of a workload or AI agent, evaluates a policy at request time, then injects short-lived credentials into the outbound API call so the workload never stores a secret. Discovery and inventory of existing non-human identities is not evidenced.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an AI agent obtaining a 15-minute credential through client attestation and policy evaluation, and show the access log for a denied request outside business hours.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
agentgateway
Open-source proxy that carries service, LLM-provider, MCP and agent-to-agent traffic in one data plane, letting platform teams route agent tool calls through a single enforcement and audit point. Project documentation covers MCP proxying and routing configuration; tool-level RBAC and token exchange are described mainly on vendor product pages.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an MCP server proxied through agentgateway with tool-level RBAC denying one specific tool call, and the audit record it produces.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
AgentOps
MIT-licensed monitoring platform for AI agents that records each program execution as a session and visualises a waterfall of LLM calls, action events, tool calls and errors, with prompt and completion inspection, event-type breakdowns, timings and LLM spend tracking. Self-hostable; no documented access control or retention.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the session waterfall for one agent execution, including tool calls, errors and the exact prompt and completion for a chosen LLM call.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
AGNTCY Identity
Apache-2.0 project from the Linux Foundation-hosted AGNTCY effort that issues and verifies identities for AI agents, MCP servers and multi-agent systems using verifiable credentials and badges, and can onboard existing identities from providers, A2A agent cards or W3C DIDs. Deployment and adoption maturity are unproven.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate issuing a verifiable badge to an MCP server and having a relying agent verify it, including how revocation and key storage work.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
AI Incident Database (AIID)
Open, community-contributed catalogue of real-world AI harms and near-harms maintained by the Responsible AI Collaborative, searchable on the web and queryable through a public read-only GraphQL endpoint, with taxonomies for classification. Records are curated press-based reports, so coverage is uneven and not an authoritative incident register.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me querying the GraphQL endpoint for incidents involving autonomous agents or LLM assistants and how you would use them in our AI risk taxonomy.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Akeyless SecretlessAI
Akeyless brokers AI agent connections through its Gateway so agents reach databases, SaaS, cloud services and legacy systems without receiving passwords, API keys or certificates; access is created on demand, scoped by policy, revoked afterwards and recorded in a central audit trail. Requires routing agent traffic through the Gateway.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate an MCP-based agent querying a production database through the Akeyless Gateway with no credential ever entering the agent's context, plus the audit record.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Amazon Bedrock AgentCore
AWS's set of composable services for running agents built with any framework, covering serverless execution with isolated sessions, persistent memory, a gateway that turns APIs into MCP tools, identity and credential management, and built-in observability. Documented governance is strongest on identity and authorization rather than approvals.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an AgentCore Gateway exposing two Lambda tools where the agent's inbound and outbound authorization is verified per request through AgentCore Identity.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Amazon Bedrock Guardrails
Configurable safeguard service inside Amazon Bedrock that evaluates user inputs and model responses against content filters, denied topics, sensitive information filters and word filters, including a prompt attack category. It can be applied at inference or via a standalone API, but does not authorize agent tool calls.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Bedrock guardrail blocking a prompt attack and masking PII for a Bedrock Agent, then show the same guardrail invoked through ApplyGuardrail for a non-Bedrock model.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
Amazon SageMaker Model Registry
AWS service for cataloguing production models as versioned model packages in model groups, with metadata, lineage, a staging construct, approval status and CI/CD deployment. Integrated SageMaker Model Cards add intended use, risk rating and evaluation records, versioned immutably on edit.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a model package moving through staging with approval status changes, and show the linked model card version history for the same model.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
AppOmni Agent Inventory
Capability of AppOmni's SaaS security platform that surfaces AI agents running inside connected SaaS tenants - such as Salesforce Agentforce, ServiceNow Now Assist and Microsoft 365 Copilot - including agents enabled without security review, with their declared tools, identities, permissions and over-privilege findings. Discovery depends on AppOmni's SaaS API connections.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate listing every Agentforce and Now Assist agent in our tenants, flagging which ones were enabled without approval and which hold write or destructive permissions.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Arcade
Actions runtime that brokers agent tool calls to SaaS systems, handling OAuth and user token storage and applying per-action authorization so an agent acts within both the user's and its own scope. Pre- and post-tool-call hooks allow blocking or redaction, though the hosted tool catalogue is vendor-maintained.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent calling a Gmail tool through Arcade where the user consents via OAuth, a pre-tool-call hook blocks a send action, and the audit log records the decision.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Arize AX
Commercial AI engineering platform that captures traces of agent runs including inputs, outputs, tools and costs, groups them into sessions, visualises agent trajectories, and runs online and offline evaluations with human annotation. Arize also maintains Phoenix, a local-first open-source tracing and evaluation package.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent trajectory visualisation for a failed multi-step run and the trace-level evaluation scores attached to it.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Asenion
AI governance, risk and security platform formed when Canada's Fairly AI acquired Sweden's anch.AI in June 2025 and rebranded as Asenion. It markets automated controls that continuously assess and test AI systems and agents against frameworks including the EU AI Act, ISO/IEC 42001 and NIST AI RMF.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate one automated control test running against a production agent, and show the tamper-resistant assurance record it produces.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Astrix Agent Control Plane
Astrix discovers AI agents, MCP servers, service accounts, OAuth apps, API keys and other non-human identities across cloud, SaaS, CI/CD and vaults, maps each to a human owner in an identity graph, and applies agent policies plus onboarding and offboarding actions. Enforcement depth outside integrated platforms is unclear.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the identity graph for one shadow agent — its NHIs, credentials, reachable resources and owner — then apply a policy that blocks it and offboard it.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Auth0 Auth for GenAI (Token Vault & delegated authorization)
Developer-facing authorization service from Auth0 that lets an AI agent call first-party and third-party APIs on behalf of an authenticated user using OAuth scopes, with Token Vault obtaining, storing and refreshing external API tokens. It governs user-delegated agent access, not enterprise-wide agent inventory.
commercial · unknown
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an agent obtaining a Google and Slack token from Token Vault after user consent, and show what happens when the agent requests a scope the user never granted.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Azure AI Content Safety Prompt Shields
Microsoft API in Azure AI Content Safety that analyses user prompts and supplied documents for adversarial instructions, returning attack-detected flags for direct user prompt attacks and indirect attacks embedded in external content. It is a detection endpoint that applications must act on rather than an enforcement gateway.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a shieldPrompt call flagging an indirect injection hidden in an uploaded document, and how the calling agent enforces a block based on that response.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
BABL AI audits and AI & Algorithm Auditor Certification
Boutique firm offering independent third-party AI audits and responsible AI consulting, plus a five-course AI and Algorithm Auditor Certification for practitioners ending in a capstone and exit exam. The firm states its audits follow assurance-engagement style practice but names no accrediting body for either the audits or the credential.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate how a BABL independent third-party audit engagement is scoped and what assurance wording appears in the final report you issue to a client's stakeholders.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
BigID AI Security & Governance
BigID's AI-oriented module inside its data security platform. It inventories AI models, agents, copilots, prompts, vector stores and pipelines, classifies the data feeding training, retrieval and inference, and maps lineage of that data. Claims come from vendor product pages; BigID's technical documentation is not publicly reachable.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate how BigID builds an AI asset inventory that links a vector database to the sensitive datasets embedded in it and the identities allowed to query it.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Boomi Agent Control Tower
Registry and monitoring console within Boomi Agentstudio where organisations register, tag, monitor and manage AI agents across providers - agents built in Boomi and third-party environments such as Amazon Bedrock - via configured provider connections. Agents appear because a provider account is connected, so unconnected environments remain invisible.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me registering an Amazon Bedrock provider account and then disabling one of its agents directly from Agent Control Tower, including the trust level and tags applied.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Braintrust
Developer platform for scoring AI application output: teams log traces from their app, curate datasets from human feedback, run experiments against scorers, then watch production logs. Documentation covers project-level access control and a customer-controlled data plane, but audit logging and retention behaviour are not described.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an experiment run comparing two prompt versions against a dataset built from human feedback, and who in my organization can view the underlying logs.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Britive ARC (Agentic Runtime Control)
Britive registers each AI agent as its own identity with a human owner and permitted access profiles, authenticates it via SPIFFE SVID, OIDC federation or API tokens on every request, and grants just-in-time privileges that are created and destroyed per task so no standing credential remains. Cloud-target coverage varies.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Register an agent with an owner and job function, then show a just-in-time credential created for one task and destroyed at task end, with the access record.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
BSI ISO/IEC 42001 certification
Third-party certification of an organisation's AI management system against ISO/IEC 42001, offered by BSI alongside pre-certification gap assessment and training. BSI states it holds UKAS, RvA and ANAB accreditation for this scheme. Certification covers management-system conformity, not the performance or safety of individual AI models.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the audit stages, sampling approach and evidence you require to certify an AI management system covering generative AI agents in production.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Camunda Agentic Orchestration
German process-orchestration vendor's capability for embedding AI agents into BPMN processes, exposing BPMN activities inside ad-hoc sub-processes as LLM-selectable tools while human tasks and deterministic rules stay in the same model. Fine-grained authorization exists at cluster level; audit logging for agent decisions is not documented.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a BPMN process where an AI agent selects tools inside an ad-hoc sub-process but a human task must complete before the payment activity runs.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Check Point AI Agent Security (formerly Lakera Guard)
Runtime protection for AI agents that inspects prompts, reference material, tool responses and tool descriptions for injections and manipulation, applies tool allow and deny lists, and flags actions outside an agent's mandate. Also builds an inventory of agents and connected MCP servers across supported agent platforms.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me Check Point AI Guardrails detecting an injection hidden in a tool response and blocking the resulting tool call, plus the agent inventory entry for that agent's MCP servers.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Checkmarx AI Inventory and AI-BOM
Capability inside Checkmarx One that inventories AI components by scanning source code and configuration files in connected repositories, cataloguing models, agents, MCP servers, AI libraries and SDKs on every commit, then emitting an AI-BOM and enforcing policy in pull requests and CI/CD. Scope is the software pipeline, not employee tool usage.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an AI-BOM generated from one of our repositories listing every detected model, agent and MCP server with the file and commit where it was found.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Cisco AI Defense AI BOM
Open-source scanner from Cisco's AI Defense team that inspects codebases, container images and cloud environments to produce an AI bill of materials listing models, agents, tools, MCP servers and clients, datasets, prompts, guardrails and secrets. Detection is static analysis plus catalog matching, with optional LLM-based enrichment.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate running the scanner against one of our Python repositories and a container image, and show the resulting AI-BOM entries for agents, tools and MCP servers.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Cisco MCP Scanner
Apache-2.0 Python tool from Cisco's AI Defense group that scans MCP servers, their tools, prompts and resources plus server source code, combining YARA rules, LLM-based analysis and Cisco's hosted inspection API, and audits dependencies and bundled binaries. Full detection depth depends on optional third-party services.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a scan of an untrusted MCP server package that flags a docstring-versus-implementation mismatch, and which findings required the Cisco AI Defense API.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
ClearML Model Registry
Model registry inside the open-source ClearML MLOps toolchain: models are logged automatically or manually from training tasks, catalogued per project with metadata and metrics columns, queryable by name, tag or metadata, with lineage and CI/CD triggers on registry events such as tagging or publishing.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an automatic model registration from a training task, then trigger a CI/CD pipeline when that model is tagged for production.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Collibra AI Command Center
Collibra's AI governance product, evolved from Collibra AI Governance, registering AI use cases, models, model versions and agents as governed assets with lifecycle stages, compliance assessment templates and a per-system trust score. Fits organisations already using Collibra for data governance.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an AI use case linked to its model versions, agents and datasets, plus how the trust score changes when documentation or lifecycle status degrades.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Confident AI
Hosted quality platform from the DeepEval maintainers. It captures each LLM call as a trace with inputs, outputs, tool calls, latency, token cost and metadata, converts flagged traces into evaluation datasets, and runs metric-based regression tests on pull requests. Governance controls are not documented.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me how a failing production trace becomes a dataset case that then blocks a pull request when the metric regresses.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
ContextForge AI Gateway (mcp-context-forge)
Apache-2.0 gateway, registry and proxy from IBM that federates MCP servers, A2A agents and REST or gRPC APIs behind one endpoint, adding authentication, rate limiting, input validation and OpenTelemetry tracing. It centralises tool discovery for MCP clients but does not itself provide threat detection or sandboxed execution.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me ContextForge federating two MCP servers plus a REST API behind one endpoint, with a user-scoped OAuth token and rate limit applied to one tool.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Coval
Simulation and evaluation platform for voice and chat agents. It generates large volumes of simulated callers with accents, interruptions, noise and policy traps, scores production calls in real time on resolution and safety, detects regressions after prompt or model changes, and routes failures to human reviewers.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a pre-launch simulation of a thousand callers against my voice agent, then show the production scoring that flags a regression after a prompt change.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Credo AI Platform
Governance workspace where an enterprise records AI use cases, models, agents and third-party AI vendors, runs questionnaire-driven reviews, and tracks control and risk libraries with task assignment. A Python/TypeScript SDK writes the same objects programmatically. Evidence reviewed covers workflow structure, not independent verification of governance outcomes.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me how a new agent use case moves from intake questionnaire through control review to a governance status a regulator-facing auditor could read.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
CrewAI
Open-source Python framework for orchestrating role-based agent crews, paired with CrewAI AMP, a hosted platform that deploys crews, exposes them via REST, streams events and shows execution traces. Human review is a framework-level pattern; platform documentation reviewed showed no approval console or audit-log feature.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a crew deployed on CrewAI AMP where a task requires human review before the next agent runs, and show the execution trace for that run.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
CrowdStrike AIDR Collectors
Telemetry-collection layer of CrowdStrike's AI Detection and Response product. Collectors capture AI activity from the Falcon sensor (browser extension plus network inspection of desktop AI apps and coding assistants), standalone browser extensions, application SDK calls, and supported API gateways. Browser collectors log detections in report-only mode for model responses.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate registering a Falcon endpoint collector and show which desktop AI applications and coding assistants network inspection surfaced that the browser extension missed.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
CSA STAR for AI
Cloud Security Alliance assurance program extending its STAR registry to AI services, with a Level 1 self-assessment against the AI Controls Matrix questionnaire, an automated validation option, and a Level 2 tier referencing third-party certification. Registry-based transparency for AI providers rather than a regulatory conformity assessment.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a completed AI-CAIQ submission for an agent platform and what the Valid-AI-ted scoring adds over a plain Level 1 self-assessment.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Cycode AI & ML Inventory and AIBOM
Application-security capability that discovers AI assets across the software development lifecycle - AI infrastructure, models, coding assistants, packages and associated secrets - by scanning connected repositories and pipeline systems, then producing an AI bill of materials for governance. Buyer is AppSec; it does not observe business users' AI tool usage.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate discovering which AI coding assistants and third-party models our developers introduced last quarter, and show the AIBOM entry with the repository and secret associations.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Cyera AI Guardian
Cyera's AI-focused extension of its data security posture platform. Its AI-SPM capability inventories AI models, applications, agents and knowledge bases including shadow AI, and links them to sensitive-data classifications produced by the underlying DSPM engine. Runtime protection is described at product level without public technical documentation.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the live inventory of AI agents and knowledge bases Cyera discovered in my cloud accounts and which sensitive data classifications each one touches.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Databricks Unity Gateway
Runtime governance layer inside the Databricks platform that routes and controls requests to models, agents, MCP services and AI tools using Unity Catalog privileges, service policies, rate limits and spend caps. Controls are strongest for assets governed by Unity Catalog rather than arbitrary external agent traffic.
commercial · unknown
Includes documentation or corroboration
- Ask for a demonstration
- Show me Unity Gateway restricting an agent to an approved subset of tools on an MCP service, with the service policy that blocks a request and the resulting inference log.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Datadog Agent Observability
Datadog's AI observability product, documented as span kinds for LLM, workflow, agent, tool, task, embedding and retrieval. LLM spans record model and provider, session ID, inputs and outputs, tool calls, results and definitions, token and cost metrics, metadata and errors, inside an enterprise platform with audit trail, SAML SSO and access control.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent span tree with tool calls and token cost metrics, and how retention plus RBAC apply to the captured prompt and response data.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Datawiza Agent Gateway
Identity-aware proxy positioned in front of MCP servers and APIs so that users and agents authenticate through an existing IdP before any tool call proceeds. Product material describes filtering tools/list discovery and gating tools/call invocation by policy; the fetched documentation site provides only high-level confirmation of that scope.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me Datawiza filtering the tools/list response for a low-privilege group and denying a tools/call write action after validating the Entra ID token claims.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Daytona
Sandbox infrastructure for executing AI-generated code, offering per-sandbox isolation with a dedicated kernel, filesystem and network stack plus API keys, limits, network limits and audit logs. Buyers should note the public repository states core development moved to a private codebase and the repo is unmaintained.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Daytona sandbox with network limits and audit logging enforced while an agent executes generated code, and clarify which components remain open source today.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
DeepEval
Open-source Python framework for testing LLM applications: it runs metric-based scoring on test cases and on captured agent trajectories, including individual LLM calls, tool use, retrieval and sub-agent handoffs. It executes locally in developer or CI environments and provides no access control or audit records itself.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a CI test run that scores my agent's full trajectory, including whether the right tools were called with the right arguments.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
Deeploy
Dutch platform that puts governance in the deployment path: models are registered from Git, MLflow, Databricks, Hugging Face or Azure registries, standardised assessments set a use-case risk score that selects applicable controls, role-based approvals gate deployment, and a gateway handles monitoring, guardrails and logging.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a deployment blocked until the required roles approve, with the risk score, selected control framework and gateway monitoring for the approved version.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
Deloitte Algorithm Assurance
Named specialist assurance offering from Deloitte member firms that reviews client algorithms and the controls around them: definition, identification, classification, assessment, code review, stress testing, and monitoring. Aimed at audit committees and risk functions. Pages describe activities and objectives without naming an assurance standard or reporting format.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate how you classify an inventory of production algorithms and what your third-party code review report on one high-risk model actually concludes.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
Deloitte Trustworthy AI
Deloitte US consulting practice organised around a Trustworthy AI framework, sold as named workstreams covering AI strategy, risk management and governance, regulatory support, model risk management, and AI audit and assurance. The public pages describe offerings and control activities but publish no methodology, deliverable list, or fee information.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the audit-ready evidence package your AI Risk Management and Governance engagement produces for a single high-impact agentic use case, from use-case tiering through monitoring KPIs.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Descope Agentic Identity Hub
An identity provider for AI agents and MCP servers that registers OAuth clients (including dynamic client registration), records agentic identities created by user consent or tenant grants, and issues short-lived scoped credentials with policy-based access to protected APIs and MCP resources. Aimed at application builders rather than workforce IT.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an autonomous agent registering via DCR, receiving a short-lived scoped token, and being denied an MCP tool call by an access policy — with the audit record.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Dify
Open-source platform for building agents, agentic workflows, chatbots and RAG pipelines that can draw on private data and ship as web apps or APIs, with LLMOps monitoring and third-party tracing integrations. Documentation reviewed showed no approval workflow, role-based access control or audit-log capability.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Dify agentic workflow published as an API, and explain exactly what record exists of each model and tool call it made.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Dioptra
US NIST-built test platform for assessing trustworthy characteristics of AI models, providing a REST API, web interface and Python client to design, run and track reproducible experiments including adversarial red-team scenarios. Intended to support the Measure function of the AI Risk Management Framework rather than to certify systems.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate reproducing an adversarial robustness experiment in Dioptra and exporting the tracked evidence for an internal AI risk review.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
DNV ISO/IEC 42001 certification and AI assurance
DNV offers third-party certification of AI management systems to ISO/IEC 42001 plus an AI vendor capability assessment delivered as an independent third-party audit of an organisation's ability to develop and operate trustworthy AI and data-driven solutions. Neither page names an accreditation body for the AI scheme.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the topic-by-topic findings structure of an AI vendor capability assessment and how it differs from an ISO/IEC 42001 certification audit.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Docker MCP Gateway
MIT-licensed gateway from Docker that acts as a proxy between MCP clients and MCP servers, running each catalogued local server in an isolated container with restricted privileges, network access and resources, injecting credentials centrally and applying per-profile tool allowlists. It provides no semantic inspection of prompts or tool arguments.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the MCP Gateway running two catalogue servers in isolated containers with a profile tool allowlist that hides one tool, plus the call trace for a blocked request.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
Domino AI Governance
Governance layer of the Domino enterprise data science platform: an MLflow-based model registry with project- and deployment-scoped views, custom model cards, version management, RBAC over registered models and stage transitions, plus documented review steps for validation, ethical review, audit trails and stakeholder sign-off.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me role-based control over stage transitions in the Domino model registry and the self-documenting evidence produced for a model review.
Research snapshot 2026-09-06 · Link to entry
Work discovery & human delegation
DutyGraph
Directory publisher · Advisor pilot · Governance examples are fictional; no live integration or customer outcome is implied.
Advisor-led workspace that maps a team's people, duties, tasks and software into a work record, then proposes agent delegation boundaries with a named accountable owner and review checkpoint. Intended for advisors and business sponsors. Currently an advisor pilot recruiting 5-10 companies; governance views are shown as a fictional sample.
commercial · preview
Includes documentation or corroboration
- Ask for a demonstration
- Show a participant-reviewed task card reaching the advisor queue, and demonstrate how an unresolved approval owner stays visible in the company graph.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
E2B
Apache-2.0 sandbox infrastructure that gives agents isolated cloud environments to execute model-generated code, process files and run tools, controlled from Python or JavaScript SDKs. Sandboxes bound where agent code runs, but E2B is an execution boundary rather than a policy decision point for tool authorization.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent running untrusted generated code in an E2B sandbox with filesystem and network limits, then show the same workload on a self-hosted E2B cluster.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Entro Security NHI & Agentic AI Platform
Entro inventories non-human identities, secrets and agentic AI deployments across cloud, code, CI/CD, on-prem and SaaS, links each agent to the NHIs, entitlements and secrets it uses and to a human owner, and monitors agent behaviour for anomalies through its NHIDR detection engine. Credential issuance is not part of the evidenced scope.
commercial · unknown
Marketing-supported research
- Ask for a demonstration
- Show me an agent's NHI lineage — creator, secrets used, entitlements, resources touched — and a live NHIDR alert for anomalous agent behaviour.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Enzai
UK-founded AI governance platform providing a system of record for AI systems, models, datasets and governance decisions, customisable intake by system type and risk level, assessment tracking against EU AI Act, ISO 42001 and NIST AI RMF, and dashboards summarising assessment results.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate a configurable intake for a high-risk system and how completed assessments roll up into the governance dashboard and shareable reports.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
Evidently
Apache-2.0 Python library plus self-hostable platform for evaluating and monitoring data and AI systems, including tabular data quality and drift tests with statistical methods, declarative test suites usable in CI/CD, and dashboards tracking metrics and test results over time for deployed models.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a drift test suite failing in CI for a production model's input data, and how the result appears on the monitoring dashboard over time.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
EY Responsible AI services
EY advisory offering combining a Responsible AI framework, a GenAI governance framework, and a Responsible AI Readiness Assessment that scores an organisation's readiness to manage AI risk and coming regulation across six categories, plus stakeholder training. Public pages give category names but not the underlying scoring model.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate the Responsible AI Readiness Assessment on one business unit and show the six-category scoring and the gap remediation plan it produces.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Fiddler
Monitoring platform spanning traditional ML models, LLM applications and multi-agent systems. For LLM applications customers publish prompts, prompt context, responses and retrieved source documents; Fiddler generates trust and safety metrics, embeddings with UMAP visualisation and drift detection to support alerting and root-cause analysis.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me drift and trust-and-safety metrics for a RAG application, including the retrieved source documents behind a flagged response.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
garak
Apache-licensed LLM vulnerability scanner maintained by NVIDIA. It fires static, dynamic and adaptive probes at a model or dialog system to test for jailbreaks, prompt injection, toxicity, data leakage and misinformation, logs each generation and detector verdict, and outputs a report with failure rates and hit logs.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a garak scan of my chatbot with the probe-by-probe failure rates and the hit log for successful jailbreaks.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Gemini Enterprise Agent Platform
Google Cloud's renamed Vertex AI agent stack, combining a managed agent runtime with sessions, a memory bank, example store and evaluation service, and support for ADK, LangGraph, LlamaIndex and A2A agents. Governance evidence centres on registration through the Gemini Enterprise app and built-in tracing rather than approval workflows.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate deploying an ADK agent to the managed runtime, registering it in Gemini Enterprise, and inspecting its traces in Cloud Trace.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Giskard Hub
French vendor pairing an open-source Python testing library with a delivered assessment service. Automated and expert-led testing probes conversational agents for prompt injection, data disclosure, sycophancy, hallucination and inappropriate refusals, returning a severity-ranked vulnerability report and a signed go/no-go deployment recommendation.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a full assessment report for my customer-facing agent, with vulnerabilities ranked by severity and the go/no-go deployment recommendation.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
GitGuardian NHI Governance
GitGuardian's module for non-human identity secrets: the ggscout collector inventories secrets and metadata from secrets managers, CI and infrastructure, tracks consumers, rotation dates and permissions, and flags stale or over-privileged credentials. It governs credentials used by machines and agents rather than issuing agent identities.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me every secret outside our vaults, who consumes it, when it was last rotated, and the semi-automated rotation workflow for an over-privileged NHI secret.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Google Cloud Agent Registry
Centralized catalog in Gemini Enterprise Agent Platform for registering and governing AI agents, MCP servers, skills and endpoints. Agents can be registered automatically from supported runtimes or manually for custom deployments, and consumers can search the catalog and authenticate to registered tools. It governs registered assets; unregistered agents are out of scope.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an ADK agent auto-registered from its runtime, then demonstrate searching the registry and binding it to an authenticated endpoint.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Google Cloud Model Armor
Google Cloud service that screens LLM prompts and responses for prompt injection, jailbreaks, unsafe content and sensitive data, optionally returning sanitised text. Integrations extend screening to Google-managed MCP server traffic and the Gemini Enterprise agent platform, while the Agent Gateway integration is documented as preview.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me Model Armor floor settings screening traffic to a Google-managed MCP server, blocking an injected prompt, and clarify which agent integrations are GA versus preview.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
GRACE Governance
Governance module of the Danish GRACE AI Platform: register AI projects and systems, define policies and controls, run AI assessments, report on control status and review compliance with audit trails and named role ownership. Sold as part of a wider platform, so standalone scope needs confirmation.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me how GRACE Governance is used without the rest of the GRACE platform, and what the control attestation and audit trail output looks like.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Harmonic Security
Browser-extension product that inventories employee AI usage by monitoring in-browser web traffic: which AI applications are used, whether the session uses a personal or corporate account, embedded AI features in sanctioned SaaS, and AI browsers. It also nudges or blocks sensitive prompt content. Coverage stops where the managed browser does.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a report distinguishing employees using ChatGPT on personal free accounts from those on our enterprise SSO tenant, and how the extension captured that distinction.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Helicone
Apache-2.0 gateway and observability service that proxies LLM requests and logs them for inspection, with model routing across many providers. Capture is request/response oriented rather than agent-span oriented, and the pages reviewed document no RBAC, retention or redaction controls despite claiming SOC 2 and GDPR compliance.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the logged request and response for a specific model call routed through the gateway, and what data I can export via the API.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
Holistic AI AI Audits
Independent AI audit engagements from Holistic AI covering bias, privacy, efficacy, robustness and explainability, plus regulation-specific assessments and a separate independent audit service for Digital Services Act due-diligence obligations. Audits produce reports and mitigation strategies; no accreditation or certification mark is claimed on the pages reviewed.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Show me an anonymised AI audit report structure and the specific tests you ran for bias and robustness on a deployed decisioning model.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Holistic AI Governance Platform
Enterprise platform that inventories AI systems, models, agents and pipelines, then rates each system across risk verticals such as bias, robustness, privacy and transparency on a traffic-light dashboard. Marketed for internal builds and procured AI. Risk ratings are vendor-defined scores, not audits or certifications.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate how a procured third-party model gets an inherent-risk rating and what evidence sits behind the red-amber-green score.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
HoneyHive
Agent observability and evaluation platform aimed at enterprises running production agents. Distributed tracing captures every step including tool calls, prompts, retries, loops and handoffs between sub-agents across long trajectories, with step-by-step replay, online evals on live traffic and annotation queues that turn expert review into datasets.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Replay a multi-day agent trajectory step by step, showing every tool call and sub-agent handoff plus the evaluation scores attached to it.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
IAPP Artificial Intelligence Governance Professional (AIGP)
Professional certification and matching online training from the IAPP that tests competency in AI development concepts, AI law and policy, and responsible AI governance and risk management. Individuals sit an exam against a published body of knowledge; the credential covers individual competency, not any organisation's AI system conformity.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the current AIGP body of knowledge and exam blueprint and how the training maps to EU AI Act obligations we must operationalise.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
IBM watsonx.governance
IBM's AI governance offering combining a tracked model and prompt-template inventory (AI Factsheets) with monitors for fairness, drift, model health and generative-AI output risks. Suited to enterprises already on watsonx; evidence reviewed covers monitoring and inventory mechanics, not regulatory outcomes.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate how a deployed model's factsheet, fairness and drift monitors, and alert thresholds appear in the shared model inventory for a risk reviewer.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Idira Secure AI Agents
The agentic module of Idira, Palo Alto Networks' identity security platform built on acquired CyberArk technology. It scans SaaS, cloud and developer environments for active agents, enriches them with ownership and permission context, brokers task-scoped access through an agent identity broker and logs agent actions for audit.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me agents discovered across our SaaS and cloud estate with owner and permission context, then a task-scoped grant issued and revoked by the agent identity broker.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Immuta
Data access governance platform that centralizes classification, policy authoring and query-time enforcement across warehouses and lakehouses, and can onboard RAG indexes and storage platforms as governed data sources. Its AI-specific evidence is limited to that onboarding capability; retrieval-time enforcement inside AI applications is not documented.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate onboarding a RAG index as an Immuta data source and enforcing a row-level policy so the AI application cannot retrieve restricted records.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
Infosys Topaz Responsible AI Suite
Infosys implementation and advisory suite of more than ten offerings arranged as Scan, Shield and Steer, including regulatory watchtower monitoring, maturity and risk assessments, a responsible AI audit offering, and a control centre for compliance telemetry. Delivered as consulting plus proprietary assets; component depth is not documented publicly.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate the Responsible AI Control Center on a live AI portfolio: which compliance signals it ingests and what a violation alert looks like end to end.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Inspect AI
MIT-licensed evaluation framework from the UK AI Security Institute for running model and agent evaluations. It executes dataset samples through solvers, supports tool calling, multi-turn dialog, multi-agent primitives and sandboxed execution in Docker or Kubernetes, and writes evaluation logs for analysis. No hosted service or access control.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate running one of the pre-built agentic evaluations against my model in a sandboxed environment and show the resulting evaluation log.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
JDLA C認証 (AI Governance Core Certification)
Japanese third-party certification scheme run by the Japan Deep Learning Association that reviews an organisation's AI governance structures and operations at legal-entity level, valid two years, with JDLA-accredited consulting firms supporting readiness separately from the review. It certifies governance arrangements, not individual AI tools or systems.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the C認証 review criteria and the evidence a Japanese subsidiary must submit to demonstrate AI inventory and risk assessment practices.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Knostic
Israeli vendor whose platform maps enterprise content into a policy-aware knowledge graph, tests what enterprise LLM assistants will reveal, and adjusts access so answers respect need-to-know. Evidence comes from vendor product pages rather than technical documentation, and enforcement examples centre on Microsoft 365 Copilot content.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate how Knostic detects that a Copilot answer exposed salary data to a user without need-to-know, and show the control change it applies.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Kong AI Gateway (with MCP Traffic Gateway)
Gateway layer from Kong that proxies LLM provider traffic and remote MCP traffic, exposes existing APIs as MCP tools, and applies authentication, access control and rate limiting plugins to those calls. Documentation emphasises traffic governance; semantic guardrails and agent threat detection are not covered on the fetched pages.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an internal REST API exposed as an MCP tool through Kong, protected by the AI MCP OAuth2 plugin, with a rate limit and traffic log for each tool call.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
KPMG AI Trust services
KPMG's multi-disciplinary AI governance service suite built on its Trusted AI framework, spanning AI risk assessment, AI systems inventory, governance and policy implementation, AI security and privacy, system cards, and an AI Assurance line offering model validation and independent attestation against defined frameworks such as SOC and HITRUST.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Show me an AI assurance and attestation engagement scope for an agentic workflow, including which framework you attest against and what the resulting report covers.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Laminar
Apache-2.0 OpenTelemetry-native platform for AI agents that traces LLM calls, tool use, custom functions and parallel sub-agents, presenting runs as transcripts rather than span trees. It records and replays runs in a debugger, builds evaluation datasets from production traces, and runs evals in CI. No documented access control.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Replay a recorded agent run in the debugger, swap the prompt, and show the side-by-side comparison plus the eval that would catch the regression in CI.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Langfuse
German open-source AI engineering platform whose traces record LLM and non-LLM calls, retrieval, embeddings and API calls, grouped into sessions for multi-turn conversations and agent graphs. Paid tiers add audit logs, fine-grained RBAC, SSO/SCIM, retention management, client-side masking and EU, US or JP data regions.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a session trace for a multi-turn agent conversation, then show the audit log of who accessed or changed that project.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
LangSmith
LangChain's hosted platform for tracing LLM and agent applications. Traces record what agents did in production and feed evaluation datasets, online evaluation rules and annotation queues. Enterprise plans add role-based access control with workspace roles and custom organization roles; audit logging is not documented.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a production trace for a failed agent run and demonstrate which workspace roles can view or edit that trace.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
LangSmith Deployment (LangGraph)
LangChain's runtime for running agents in production alongside the open-source LangGraph library. It provides durable execution, threads and runs, and middleware that pauses tool calls for human approval, edit or rejection. Governance beyond approvals and tracing is developer-configured rather than an administrative control surface.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent deployed on LangSmith Deployment pausing on a database-write tool call, and a reviewer editing the arguments before it resumes.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
LangWatch
Dutch open-source LLMOps platform that automatically tracks every LLM call, tool usage and user interaction as traces, spans and metadata, adds prompt versioning, dataset experiments and multi-turn agent testing against a simulated user. Self-hosted and enterprise editions document audit logs, RBAC and SSO/SCIM.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the full conversation trace for one agent session, then show the audit log entry for the user who changed the evaluation configuration.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
LlamaFirewall
Open-source guardrail framework from Meta that runs layered scanners around agent execution: PromptGuard 2 for jailbreak detection, Agent Alignment Checks that audit chain-of-thought for goal misalignment, and CodeShield static analysis of generated code. Meta describes the alignment auditor as still experimental.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me LlamaFirewall scanning an email agent's inputs with PromptGuard 2 and flagging an indirect injection through Agent Alignment Checks, including the experimental caveats.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Lumenova AI Platform
AI governance platform aimed at regulated industries that replaces manual risk reviews with workflow-driven assessments, evaluates models across a large metric set, and adds monitoring plus guardrails. Public evidence is largely vendor-authored, including a 2024 UK government assurance-technique listing.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me which of the 200+ model metrics are computed automatically for a deployed model and how results feed the risk assessment workflow.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Maxim AI
India-founded platform combining agent simulation, evaluation and production logging. Teams simulate multi-turn interactions across scenarios and personas, score runs with AI, programmatic or statistical evaluators plus human review pipelines, curate datasets from real interactions, and analyse production logs with distributed tracing.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a simulation run across several user personas with evaluator scores per version, and the production logs for the same agent.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Microsoft Agent 365
Admin control plane for AI agents in Microsoft 365. Its registry lists Microsoft, partner-built, org-published and user-shared agents available to a tenant, and a preview Shadow AI view detects unapproved local agents on managed devices using Defender for Endpoint, with extra usage metadata from Global Secure Access. Registry coverage is Microsoft-ecosystem centric.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate the Shadow AI page detecting an unapproved local agent on a Defender-enrolled device and show which governance action removes its access.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Microsoft Entra Agent ID
Microsoft's extension of Entra ID that creates dedicated directory identities for AI agents, built from reusable agent identity blueprints, so agents authenticate with their own credentials and are governed by Conditional Access, lifecycle and cleanup workflows. Evidence covers Microsoft-centric estates; cross-vendor agent coverage is not established.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me how you create an agent identity from a blueprint, bind it to a sponsor and owner, and enforce Conditional Access on that agent's token request.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Microsoft Foundry Agent Service
Managed Microsoft platform for building, deploying and scaling agents, offering prompt agents configured in a portal, hosted container agents from frameworks such as Agent Framework and LangGraph, and direct Responses API use. Each hosted agent receives a dedicated Microsoft Entra identity plus managed endpoint, scaling and observability.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a hosted agent deployed from a container that receives its own Entra identity, and the end-to-end trace of one of its runs.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Microsoft Purview Data Security Posture Management for AI
Microsoft's Purview module that reports on how organizational data is used by Copilot experiences, agents and third-party AI sites, surfaces oversharing risk, and applies ready-made data-loss policies to AI prompts. Coverage of non-Microsoft AI sites depends on device onboarding and a browser extension, so unmanaged endpoints stay invisible.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the Apps and agents dashboard listing every agent in my tenant, the sensitive data each one accessed, and which Purview policy protected it.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Mindgard
UK vendor running automated red-team tests against AI models, applications and agents. It profiles the target, enumerates attack surface, executes techniques from a maintained attack library via CLI or SDK, and reports exploitable findings with remediation guidance. Documentation covers testing mechanics rather than audit, retention or access controls.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an automated red-team run against my production agent, including which attack techniques were executed and the remediation guidance produced.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
MintMCP
Managed MCP gateway for enterprises that curates which MCP servers and tools each role may reach, issues per-agent credentials, and logs every tool call. An agent monitor captures file reads, command execution and tool calls so teams can write rules that block risky behaviour. Self-hosting requires vendor contact.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me two role-based MintMCP endpoints where a destructive tool is switched off for one role, plus the agent monitor rule that blocks a risky command.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
MLflow Model Registry
Open-source component of MLflow providing a central model store with named registered models, versions, aliases, tags and lineage back to the producing run, used by ML teams as the promotion and rollback backbone. It provides mechanics for staging, not policy, risk assessment or regulatory mapping.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate promoting a model version via alias with lineage back to its run, and show what audit information the registry retains after rollback.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
ModelOp Center
Model and AI lifecycle governance software that maintains a searchable inventory of ML models, generative AI, agents, vendor tools and embedded SaaS AI, routes intake through policy-driven workflows, and maps controls to regulations including SR 11-7, the EU AI Act, NIST AI RMF and ISO 42001.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me a policy-driven workflow blocking a non-compliant model promotion, with the control mapping and captured sign-off evidence.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Modulos AI Governance Platform
Governance platform organised around projects representing one AI system each, with frameworks, requirements, controls, evidence and reviews, plus a risk module that quantifies AI risk in monetary terms and a runtime inspection module for scheduled tests. Multi-framework mapping is vendor-maintained content, not a compliance guarantee.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate how one control satisfies EU AI Act and ISO 42001 requirements simultaneously and how the linked evidence and review trail is exported.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
n8n
German workflow automation tool, source-available and self-hostable, whose AI Agent node connects a chat model to tools so the agent chooses which to call. Governance is workspace-level rather than agent-level: role-based access control across instance and project scopes, with no documented per-action approval or agent audit trail.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an AI Agent workflow in a project where a Member role can execute but not edit it, and explain what record exists of each tool the agent called.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Naaia
French platform marketed as an AI management system aligned to ISO/IEC 42001 that qualifies an organisation's operator status and system risk level under the EU AI Act, then generates an operational action plan with a centralised registry of projects, systems, models and components.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me how operator status and EU AI Act risk level are qualified for one system and what the generated action plan and documentation pack contain.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
NannyML
Open-source Python library for post-deployment monitoring that estimates a model's performance when ground-truth labels are delayed or missing, using confidence-based estimation for classification and direct loss estimation for regression, and links univariate and multivariate drift alerts to performance impact.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate estimated versus realised ROC AUC on a tabular classifier with delayed labels, and show which drift alerts were linked to the performance change.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Netskope One AI Command Center
Module of Netskope One AI Security that discovers AI assets - corporate or personal, managed or shadow, cloud or on-premises - from the vendor's SSE/proxy vantage point and maps them to the identities, data stores and tools they connect to, adding risk correlation and response. Discovery leans on traffic and platform telemetry rather than code scanning.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the asset-to-identity-to-data-store map for a shadow AI application discovered from our traffic, including any MCP servers it reaches.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
NeuralTrust (TrustGate)
Barcelona-based platform combining an agent gateway (TrustGate) with runtime protection over the models, tools, MCP servers and data agents touch. Documented gateway behaviour includes per-user and per-tool RBAC, end-user identity forwarding across hops and cryptographic audit trails, with SaaS, hybrid and air-gapped deployment options.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me TrustGate forwarding end-user identity through two agent hops while denying a payments API tool for that user, plus the cryptographic audit record of each tool call.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Noma Security Platform
Platform that inventories agents, MCP servers, skills and models across endpoints, SaaS agent builders and homegrown AI stacks, maps each agent's permissions and data access, red teams them before production, and evaluates runtime actions to alert, block, mask data or route to a human. Claims rest on vendor pages.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me Noma discovering an unapproved MCP server on a developer laptop, mapping its blast radius, and then routing a risky agent action to a human for approval.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Nudge Security AI Agent Discovery
Research-preview capability of Nudge Security that inventories AI agents employees create on platforms such as Copilot Studio, Agentforce, Gemini, OpenAI, n8n, ServiceNow, Databricks, Workato and Tines, surfacing creator, permissions, connected data and MCP connections. Nudge's discovery approach centres on corporate email signals and OAuth grants.
commercial · preview
Marketing-supported research
- Ask for a demonstration
- Demonstrate discovering an n8n or Copilot Studio agent an employee built last week, showing the creator, its OAuth grants, and any unauthenticated MCP connection.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
NVIDIA NeMo Guardrails
Open-source Python toolkit that intercepts LLM application inputs, outputs and custom action calls, applying configurable rails written in YAML and Colang to block or modify content. The guardrail catalogue includes jailbreak detection, PII handling and agentic security checks; the repository labels the release beta and not production-recommended.
open_source · preview
Includes documentation or corroboration
- Ask for a demonstration
- Show me NeMo Guardrails applying an execution rail around a tool-calling action plus jailbreak detection, and explain the beta production caveat in the repository.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Oasis Agentic Access Management (AAM)
Oasis places an access layer between AI agents and SaaS, cloud, on-prem and data systems: it converts each agent request into a structured intent, evaluates it against policy with optional human escalation, and provisions ephemeral least-privilege session identities with prompt-level audit trails. Enforcement depends on agents routing through Oasis.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate an agent request converted into structured intent, denied by policy, then approved with human-in-the-loop and executed under a just-in-time session identity.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Obsidian Security Shadow AI
Module of Obsidian's SaaS security platform that builds a continuously updated inventory of AI tools and agents by combining a managed browser extension, API integrations into SaaS tenants, and mapping of agent-to-MCP connections. Aimed at security teams; agent coverage depends on which SaaS tenants and endpoints are instrumented.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me an agent discovered only by your browser extension that never appeared in the SaaS platform's own API-reported agent list, with its creator, permissions, and MCP connections.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Okta for AI Agents
Okta's agent-focused offering that discovers known and shadow AI agents, registers them as identities in Universal Directory with a human owner, and brokers short-lived credentials plus secret vaulting for agent access. Discovery evidence in its posture-management documentation is limited to specific connected agent platforms.
commercial · unknown
Includes documentation or corroboration
- Ask for a demonstration
- Show me an unmanaged Salesforce Agentforce agent discovered via OAuth consent grants, then register it in Universal Directory with an owner and issue it a short-lived credential.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
OneTrust AI Governance
AI-specific module of OneTrust's privacy and governance suite: central inventory of AI systems, models, datasets, agents and vendors with use-case intake and approval workflows, risk tiering, impact assessments and policy-driven controls intended to produce audit-ready records for security and governance teams.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the AI use-case intake and approval workflow end to end, and which evidence OneTrust captures automatically versus manually.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
OpenFGA
Apache-2.0 relationship-based authorization engine whose documentation models agents as first-class principals with narrowly scoped, revocable, optionally time-limited grants, including MCP tool-level checks and permission-filtered retrieval. It answers authorization questions but does not intercept traffic, so an application or gateway must call it.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an OpenFGA model where an agent receives a task-scoped grant to two MCP tools with a turn limit, then revoke the agent without touching the user's permissions.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
OpenLLMetry
Apache-2.0 set of OpenTelemetry extensions from Traceloop that instrument GenAI applications non-intrusively in Python, TypeScript or Go and export traces either to Traceloop or to an existing observability backend. It is instrumentation plumbing: no access control, retention or evaluation features are part of the library.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate exporting GenAI traces from my agent to my own OpenTelemetry backend, showing the workflow, task, agent and tool annotations.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
OpenSSF Model Signing (OMS) / model-transparency
OpenSSF-backed specification with an Apache-2.0 library and CLI that signs and verifies machine learning model artifacts using Sigstore, self-signed certificates, public keys or PKCS#11 devices, producing signature bundles that let consumers check model integrity and provenance before deployment or reuse.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate signing a multi-gigabyte model with Sigstore and verifying the signature in a deployment pipeline gate, including what the bundle attests to.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Operant Semantic Firewall
Inline enforcement layer that inspects prompts, plans, tool calls, generated commands and data payloads before execution and returns an allow, block or redact decision, with a companion MCP gateway applying least-privilege controls and trust zones. Evidence comes from vendor product pages rather than reference documentation.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the Semantic Firewall blocking a shell command produced by an injected instruction and redacting a bulk data read, with the policy that produced each decision.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
Opik
Apache-2.0 platform from Comet that records every LLM call, tool invocation and agent step as traces, monitors cost, latency, error rates and feedback scores, scores incoming traces with online rules, and converts problem traces into test cases. The full backend can be self-hosted; RBAC and audit logs are not documented.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a self-hosted deployment where every tool invocation in an agent run is logged and automatically scored by an online evaluation rule.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
ORCAA Algorithmic Audit
ORCAA sells algorithmic audits that assess risks of a specific algorithmic use case using its Ethical Matrix framework, plus quantitative bias testing for regulatory compliance such as New York City Local Law 144 bias audits, AI governance consultation, and metric 'cockpit' design. Deliverables are reports, not certifications.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Show me how the Ethical Matrix is populated for one hiring algorithm and what a Local Law 144 bias audit report you issued contains.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Orkes Conductor
Commercial platform built on the Conductor durable orchestration engine. Conductor Agents are authored in code or imported from frameworks, compiled into versioned workflow definitions, and composed with branching, schedules, human approval and cancellation, with each LLM call and tool invocation visible in the UI and API.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Conductor Agent deployed at a pinned version, invoked from a production workflow, with each LLM call and tool invocation visible in the execution view.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Palo Alto Networks AI Access Security
SASE-delivered product that identifies which generative AI applications employees are using by matching network traffic against a maintained dictionary of GenAI apps grouped into predefined use cases, then applying access-control and DLP policy. It discovers app usage, not internally built agents or AI components in code.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate the Insights dashboard showing the top GenAI apps by user and use case in our traffic, and how a new app appears once it is added to the app dictionary.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Patronus AI
Vendor offering managed evaluators plus simulation environments for agent testing: hosted judges score hallucination and unsafe output, red-teaming algorithms probe for weaknesses, and simulated digital workflows exercise long-horizon agent tasks. Public pages document scoring and simulation but not audit records, retention or access control.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a simulated multi-step workflow run where my agent is scored for hallucination and unsafe output, and show what evaluation evidence I can export.
Research snapshot 2026-09-06 · Link to entry
Runtime authorization & controls
Permit MCP Gateway
Enforcement proxy placed between MCP clients such as Cursor or Claude Desktop and upstream MCP servers. It authenticates the human behind an agent, checks each tool call against fine-grained policy, records allow and deny decisions, and requires no change to existing MCP servers. Policy authoring depends on Permit's control plane.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Cursor session where a write-capable MCP tool is denied by policy while a read tool succeeds, then show the audit entry naming the agent and the authorizing human.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Pillar Security
Israeli platform covering the AI agent lifecycle: cataloguing agents, models, prompts, MCP servers and coding agents through agentless integrations, then applying runtime guardrails that monitor prompts, tool calls and commands for prompt injection, tool poisoning and data exfiltration. Product claims come from vendor pages, not reference docs.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me Pillar validating that an agent's tool call matches its declared schema, flagging a permission-scope deviation, and blocking a poisoned instruction in an agent-to-agent handoff.
Research snapshot 2026-09-06 · Link to entry
Work discovery & human delegation
Planview Agent Resource Management
Extension of Planview's portfolio resource model that treats AI agents as resources alongside people, so leaders can plan and allocate blended human and agent capacity across strategic work, track associated cost, and tie each agent action back to an accountable human decision-maker. It is planning and accountability tooling, not an agent runtime.
commercial · announced
Includes documentation or corroboration
- Ask for a demonstration
- Show me a portfolio view where agent and human capacity are planned together, with the cost of agent work and the named human accountable for each agent's assignments.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Presidio
MIT-licensed SDK, originally from Microsoft and now transitioning to community ownership, that detects PII in text, images and structured data using recognizers, regex, rules and checksums, then anonymizes it with configurable operators. It is a developer library with no policy console, access control, lineage or audit features.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a custom recognizer added to Presidio that detects our internal customer ID format and anonymizes it in a prompt before an LLM call.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Prisma AIRS AI Runtime Security
Palo Alto Networks security service that scans prompts and model responses via API or network enforcement to detect prompt injection, sensitive data leakage and malicious content, with agent-focused detections such as MCP threat detection, tool chaining attack analysis and privilege misuse. Delivered as a managed enterprise service.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me Prisma AIRS scanning an agent request through the AI Runtime API, flagging a tool chaining attack and a prompt injection, and the security profile that blocked it.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Private AI
Canadian vendor providing a container-deployable API that identifies and removes personal identifiers from text before it reaches a model, with optional synthetic replacement and consistent markers. It is a detection and de-identification layer only: no access control, lineage, consent or audit features appear in its API reference.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate the de-identify call redacting 20 PII classes from a prompt and then re-identifying the response, with entity relationships preserved.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Project Moonshot
Apache-2.0 LLM evaluation toolkit from Singapore's AI Verify Foundation that combines benchmark testing across safety and performance metrics with manual and automated red-teaming, offers guided workflows for IMDA's starter kit for LLM app testing, and produces shareable scoring reports usable in CI pipelines.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me running IMDA's starter-kit benchmarks plus an automated red-team attack module against our chatbot and the scoring report it produces.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Promptfoo
Open-source evaluation and red-teaming tool that generates adversarial inputs from configurable plugins, runs them against an LLM application, and grades outputs with deterministic and model-graded metrics in CI. The paid enterprise editions add RBAC and team scoping; audit logging and retention are not documented.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an end-to-end red-team scan of my deployed agent, including which plugins ran and how findings are scoped to a team.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Protecto
India- and US-based vendor offering deterministic tokenization for sensitive values used in LLM prompts and AI pipelines, with policy-controlled unmasking that requires an explicit request and sufficient caller permissions. Documentation covers tokenization mechanics; discovery, lineage, consent and audit logging are not described.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate masking a support ticket before it goes to an LLM, then an unmask request being denied because the active policy does not permit it.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
PwC Responsible AI Toolkit
PwC advisory offering delivered as customisable frameworks, tools and processes for enterprise AI governance: role and responsibility design across three lines of defence, regulatory monitoring, policy development, bias and fairness assessment, and a free entry-level Responsible AI Diagnostic. Pages do not disclose tooling detail or pricing.
service · generally available
Marketing-supported research
- Ask for a demonstration
- Show me how the Responsible AI Diagnostic output maps to a concrete governance remediation roadmap with three-lines-of-defence ownership.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
PyRIT
MIT-licensed Python framework from Microsoft for probing generative AI systems for risk. It is aimed at security engineers running automated adversarial testing campaigns rather than at governance teams, and the repository provides no multi-user controls, evidence retention or reporting workflow of its own.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an automated PyRIT attack run against my deployed model endpoint and show what artefacts the run leaves behind.
Research snapshot 2026-09-06 · Link to entry
Evaluation & testing
Ragas
Open-source Python evaluation library for LLM and RAG applications. It runs LLM-based and deterministic metrics over datasets, generates synthetic test sets, and tracks results across experiments so changes can be compared. It is a local library with no hosted control plane, access control or audit trail.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a Ragas experiment comparing two retrieval configurations on a generated test set, with per-metric scores and reasons.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
Resaro Approved Intelligence
Independent AI assurance firm running testing, evaluation, validation and verification workflows in the client's own environment via its Approved Intelligence Platform, producing structured deployment evidence and continuous post-deployment evaluation for civil and defence uses. Marketed as evidence for deployment decisions rather than as certification against a standard.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a TEVV run in our environment for one mission-critical model and show the evidence pack a deployment authority receives.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Saidot
Finnish AI governance platform that links registered systems, models, agents and datasets to an expert-curated graph of risks, controls and policy requirements, so recommendations and risk inheritance propagate to connected assets. Curated content speeds setup but reflects the vendor's interpretation of obligations.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate risk inheritance: register a system on a new foundation model and show which risks, controls and policy requirements are auto-recommended and why.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
SailPoint Agent Identity Security
Part of SailPoint Identity Security Cloud, this module aggregates AI agents from AWS, Azure, GCP, Salesforce and Copilot Studio, onboards each as a registered identity with business and access context, and surfaces shadow AI usage. It complements SailPoint's separate machine identity module for service accounts, bots and RPAs.
commercial · unknown
Marketing-supported research
- Ask for a demonstration
- Show me every AI agent aggregated from Copilot Studio and Salesforce, each registered with an owner and access context, plus the shadow AI usage report.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Securiti Gencore AI
Securiti's pipeline product for building enterprise AI systems on governed data. It catalogs unstructured sources, redacts or masks sensitive values inside AI pipelines, loads permission-aware embeddings into vector databases, and tracks lineage from source file to embedding. Detailed technical documentation was not publicly reachable during review.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me a Gencore AI pipeline where a retrieval answer changes because the requesting user lacks entitlements on the underlying SharePoint file.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
ServiceNow AI Control Tower
ServiceNow application that inventories AI agents, models and MCP servers as configuration items tied to the CMDB, with persona-based views for AI stewards, owners and risk/compliance users, and lifecycle plus risk and compliance oversight for platform customers already using ServiceNow.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate how a discovered third-party AI agent becomes a CMDB configuration item with owner, lineage and a risk assessment task for the AI steward.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Skyflow LLM Privacy Vault
Skyflow's pattern for isolating sensitive values in a data privacy vault so prompts, training sets and RAG content carry tokens instead of raw identifiers, with role-based re-identification for authorized processes. It governs sensitive fields rather than discovering data estate-wide, and requires application changes to adopt.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a RAG flow where the vault de-identifies customer records before embedding and only a privileged role can re-identify the values in the answer.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Snyk Agent Scan (formerly MCP-Scan)
Apache-2.0 command line scanner that discovers locally installed agent components — harnesses, MCP servers, skills — and checks tools, prompts and resources for prompt injection, tool poisoning, cross-origin escalation and tool changes, with a proxy mode that inspects live MCP traffic. Some checks call Snyk's hosted API.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate scanning our developers' MCP configurations and show what a tool-poisoning and rug-pull finding looks like, plus which checks require the hosted API.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
SPIRE (SPIFFE Runtime Environment)
A CNCF graduated open-source toolchain that attests running workloads and issues them short-lived SPIFFE identities (X.509 and JWT SVIDs) through the Workload API, enabling mutual TLS and authentication to secret stores, databases and cloud services. It provides identity plumbing, not agent inventory or governance workflows.
open_source · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a Kubernetes workload attesting to SPIRE, receiving a rotating X.509 SVID, and using it for mTLS to another service across a federated trust domain.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
SPLX AI Asset Management
AI-BOM and inventory module of the SPLX platform, now part of Zscaler. It connects to cloud platforms, code repositories and ML/AI platforms to detect LLMs in use, scan repositories to map agents, tools and MCP servers in AI workflows, and run risk assessments on discovered agents. Detection is scan-based, not user-traffic based.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me the agentic workflow map produced from scanning one of our repositories, including each agent, its tools, and the MCP servers it connects to.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Straiker Defend AI
Runtime security product for AI agents that inspects prompts, reasoning steps and tool calls across coding assistants, productivity copilots and custom agents, blocking direct and indirect injection, destructive actions such as file deletion, and data exfiltration. Vendor pages also describe shutting down rogue agents and connections.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me Defend AI blocking an indirect injection delivered in an email to a productivity copilot and stopping a coding agent from deleting files, then show the rogue-agent shutdown action.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Teleport Machine & Workload Identity
Teleport issues short-lived certificates, JWTs and SPIFFE-compatible identities to bots, CI jobs, workloads and AI agents via its tbot agent, then enforces role-based access and records every command an agent runs against SSH hosts, Kubernetes clusters, databases and MCP servers. Agent use cases are positioned around design partnerships.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show an AI agent issued its own Teleport identity, restricted to read-only Kubernetes access by RBAC, with the full session recording of its commands.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
Temporal
Durable execution platform used to run stateful agent loops that call models and tools, wait on human decisions for days, and resume exactly where they stopped after failures. It supplies reliability primitives and full execution history rather than AI-specific policy, review consoles or data controls.
hybrid · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate an agent workflow that pauses for multi-day human approval via a Signal, survives a worker crash, and replays its full execution history.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Token Security NHI & AI Agent Security Platform
Token Security continuously discovers AI agents and non-human identities across on-prem, hybrid and cloud estates, correlates agents, humans, secrets, permissions and data in an identity graph, enforces ownership and governs agents from creation through retirement, decommissioning orphaned identities. Credential issuance is not evidenced.
commercial · unknown
Marketing-supported research
- Ask for a demonstration
- Show me a custom GPT agent discovered in our tenant, its owner and blast radius in the identity graph, and the workflow that decommissions it when the owner leaves.
Research snapshot 2026-09-06 · Link to entry
Data governance & privacy
Tonic Textual
Tonic.ai's de-identification product for unstructured text. It scans files and strings with named-entity models, then redacts or replaces sensitive values with consistent synthetic substitutes for use in LLM prompts, RAG corpora and training sets, with guided review. Governance features beyond RBAC and SSO are not documented.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a guided redaction project that de-identifies a folder of PDFs, then the SDK call that redacts a live prompt with the same entity configuration.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
trail
German AI governance tool centred on a live AI registry of use cases, systems, agents, models and third-party vendors, with guided EU AI Act risk and role classification, curated framework templates, control implementation tracking and reusable assessments and evidence across linked assets.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me how EU AI Act role and risk classification is derived for one system and how a completed assessment is reused on a dependent asset.
Research snapshot 2026-09-06 · Link to entry
AI risk & compliance management
Trustible AI Governance Platform
Purpose-built system of record for AI intake: teams capture use cases, models, agents and vendors, get risk-based triage, run risk and impact assessments, track mitigations and incidents, and map to regulatory frameworks with curated risk taxonomies. Framework mappings are vendor-curated interpretations, not regulator-endorsed.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me the intake-to-approval path for a high-risk use case, including which curated framework mappings and audit evidence it produces.
Research snapshot 2026-09-06 · Link to entry
Advisory & assurance services
TÜV SÜD ISO/IEC 42001 certification
TÜV SÜD audits and certifies AI management systems against ISO/IEC 42001, including risk-focused assessments of bias, privacy and security controls and optional integrated audits combining several management-system standards. The pages reviewed name no accreditation body for the AI scheme, so accreditation status could not be confirmed.
service · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate how an integrated ISO/IEC 42001 and ISO/IEC 27001 audit is planned for one AI platform, and what nonconformities you have typically raised on AI risk assessment.
Research snapshot 2026-09-06 · Link to entry
Agent building & orchestration
UiPath Maestro
UiPath's cloud orchestration layer that coordinates AI agents, RPA robots and people in BPMN, Flow or case-management models, with DMN decision tables. Governance is process-centric: role-based access, versioning and auditing of process and decision changes, rather than per-tool-call approval policy for agents.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a Maestro BPMN process where an agent step hands an exception to a person, and show the versioned, audited history of the decision table change.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Valence SaaS and AI Discovery
Part of Valence's SaaS security platform: it inventories sanctioned and unsanctioned SaaS and AI applications, and continuously identifies OAuth tokens, API keys, connected apps and service accounts linking business SaaS tenants to third-party AI tools. Detection is API-based against connected SaaS tenants, so unconnected apps stay invisible.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Demonstrate how you surface an OAuth grant that connects an employee's unsanctioned AI tool to our Google Workspace tenant, including the scopes granted and the granting identity.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
ValidMind
Model risk management and AI governance platform pairing a Python library that runs tests and generates model documentation with a review platform for validators, covering statistical, ML, LLM and agentic records with inventory, versioning and approval workflows aimed at regulated financial institutions.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate the developer-to-validator handoff: library-generated documentation and test results entering a validation workflow with approvals and version control.
Research snapshot 2026-09-06 · Link to entry
Work discovery & human delegation
Velatir
European platform that inserts human approval into AI agent workflows: agents submit an operation via API, SDK or an MCP server integration, policies assess it, and low-risk requests auto-approve while higher-risk ones route to named human reviewers who approve, reject or request changes, with an audit trail. Reviewer coverage depends on integration work.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me an agent tool call blocked at the MCP approval gate, the policy that routed it to a human, and the audit record of the reviewer's decision and reason.
Research snapshot 2026-09-06 · Link to entry
Work discovery & human delegation
Verint Agent Factory
Orchestration environment in Verint's CX platform for building and running a mixed workforce of human and AI agents: prebuilt and custom AI agents are connected to customer-experience workflows with explicit routing to humans when judgment is needed, plus centralized prompt and model governance. Scope is contact-centre work, not general enterprise task delegation.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate a CX workflow where an AI agent hands off to a human agent, and show how the handoff condition and the governing prompt policy are configured.
Research snapshot 2026-09-06 · Link to entry
Agent identity & access
Veza AI Agent Security
Veza's access graph labels non-human accounts across its integrations, shows their effective permissions, supports right-sizing and periodic review, and its agent-focused release maps unmanaged AI agents and service accounts to human owners and enumerates the tools an agent may invoke. Agent capabilities were described as early access.
commercial · preview
Marketing-supported research
- Ask for a demonstration
- Show me every tool and action an AI agent is authorized to invoke in a connected app, with the suggested human owner and a review campaign to revoke unused entitlements.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
W&B Registry
Weights & Biases registry that curates versioned artifacts — models and datasets — into organisation-level collections with aliases, lineage tracking and access control, giving ML teams a single record of what is in production. Governance here means access and provenance, not risk or regulatory workflow.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me how a model artifact is linked into a production collection, who can access it, and how lineage lets us reproduce that exact version.
Research snapshot 2026-09-06 · Link to entry
Observability & traceability
W&B Weave
Weights & Biases product for tracking LLM calls and application logic with automatic tracing and cost tracking, scorer-based evaluation and comparison tools, plus pre- and post-response safeguards. Platform controls include role-based access at team or project level, SSO via OIDC, SCIM provisioning and scoped service accounts.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me a traced LLM application with cost tracking, and demonstrate restricting project access to a named team using SSO-provisioned users.
Research snapshot 2026-09-06 · Link to entry
Agent discovery & inventory
Workday Agent System of Record
Workday functional area for cataloguing and administering an organisation's AI agents - Workday's own and third-party - with dedicated security domains for agent management, agent compliance and agent reporting. It is a registry and administration layer configured per tenant; evidence reviewed does not show detection of agents outside what is registered.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Demonstrate registering a third-party agent in ASOR and show the agent reporting and agent compliance views an auditor would rely on.
Research snapshot 2026-09-06 · Link to entry
Model lifecycle & governance
Yields Model Risk Management
Belgian model risk management software providing a configurable inventory of models, AI systems, agents, use cases, vendors and data sources with risk tiers, a workflow engine for validation and change control, automated validation reporting and monitoring, targeted at financial institutions with formal MRM functions.
commercial · generally available
Marketing-supported research
- Ask for a demonstration
- Show me an automated validation report generated from the inventory record, including versioning history and the audit trail for a model change.
Research snapshot 2026-09-06 · Link to entry
Agent security & threat detection
Zenity AI Detection and Response (AIDR)
Runtime security layer for AI agents that analyses full execution sequences, including chained tool calls, retrievals and agent-to-agent handoffs, to detect direct and indirect prompt injection, unauthorised tool invocations and sensitive data leaving through agent activity, with inline blocking. Evidence is drawn from vendor platform pages.
commercial · generally available
Includes documentation or corroboration
- Ask for a demonstration
- Show me AIDR detecting a slow-building indirect injection across several turns, blocking the unauthorised tool call it triggers, and the agent-to-agent handoff record.
Research snapshot 2026-09-06 · Link to entry
Understand the work.
Then choose the tool.
DutyGraph helps advisors connect people, duties, tasks, and proposed AI delegation. Explore our pilot and the work behind an agent request.
Join the advisor-led pilot →How to use this research
This directory imports a source-linked research snapshot supplied on September 6, 2026. Each offering has a separate evidence profile. Support labels distinguish provider documentation, marketing claims, independent corroboration, and unanswered questions. We have not independently tested these products.
Categories overlap; filters include secondary categories. Commercial software, open-source projects, hybrid offerings and advisory services are labeled separately. Coverage is not exhaustive and English-language research underrepresents some regions.
DutyGraph publishes this directory and labels its own entry. Alphabetical listing does not imply ranking, partnership, Telarus supplier status, a live integration, or certification. Confirm current availability and licensing with each provider. Research candidates awaiting review are not published.
Suggest a correction · Download entries · Download evidence · Download categories