Agent discovery & inventory
Capability of AppOmni's SaaS security platform that surfaces AI agents running inside connected SaaS tenants - such as Salesforce Agentforce, ServiceNow Now Assist and Microsoft 365 Copilot - including agents enabled without security review, with their declared tools, identities, permissions and over-privilege findings. Discovery depends on AppOmni's SaaS API connections.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent discovery & inventory · Agent security & threat detection · Agent identity & access
Useful conversation with: CISO, SaaS security engineer, GRC lead.
Demonstrate listing every Agentforce and Now Assist agent in our tenants, flagging which ones were enabled without approval and which hold write or destructive permissions.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Surfaces AI agents running in SaaS environments including Salesforce Agentforce, ServiceNow Now Assist and Microsoft 365 Copilot, including agents enabled without security review or internal approval.
Limit: Product page; does not state the API mechanism per platform or how completely each platform exposes agent metadata.
Vendor claim
Surfaces the tools and descriptions declared for each agent along with identities, permissions and privilege, and flags agents with excessive privileges.
Limit: Vendor notes visibility 'starts with what's known and documented', implying reliance on declared metadata rather than observed behaviour.
Documented by provider
AppOmni announced AgentGuard on 19 November 2025, extending the platform from agent discovery and posture to real-time prompt-injection prevention and DLP enforcement for ServiceNow Now Assist agents.
Limit: Runtime protection announced for ServiceNow only; other platforms are discovery/posture scope in this evidence.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction