Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.
AI agent directory
410 agents · dataset updated 27 Oct 2026 · How we verify listings
Showing 410 of 410 agents
Agents
Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
ACTICO Compliance Solutions AI agents (KI-Agenten for AML, customer and payment screening)
ACTICO (ACTICO GmbH)
Germany
Rules-based AML, customer screening, payment screening and market-abuse software for banks and insurers in which AI agents do the research, analysis and documentation work (for example adverse-media checks on screening hits) inside the platform's governance, with the compliance analyst making the final decision.
Adaptive Security Agentic Email Security and Phish Triage
Adaptive Security (TeamGuard AI Inc.)
United States
API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ.
Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy)
Swipergy (Swipergy GmbH)
Germany
German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
AiPrise AI agents (AML Agent, Website Agent and Document Agent)
AiPrise (AiPrise, Inc.)
United States
KYC/KYB and compliance platform whose AI agents review AML screening hits (sanctions, PEP, adverse media) and recommend a decision under the customer's AML policy, check business websites for legitimacy and risk with ongoing monitoring, and review documents, with an analyst confirming the outcome.
AISLE (autonomous vulnerability discovery, triage and verified-fix agents)
AISLE (Aisle s.r.o. / Aisle Inc.)
Czech Republic
Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026.
AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.
Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes.
Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests)
Amnify (Amnify GmbH)
Germany
German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.
Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents)
Anomali (Anomali, Inc.)
United States
Intelligence-native agentic SOC layer: ThreatStream Next-Gen and the Anomali Data Lake ship with autonomous triage, scoring and investigation steps, Tier 1/2 triage agents, a stack-ranked decision queue and automated Priority Intelligence Requirement monitoring, with analysts setting how much autonomy the agents get.
Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.
US SaaS-security product whose Marlin AI engine autonomously correlates posture, identity and threat signals across SaaS and AI apps, opens investigations without a prompt, and delivers expert-guided remediation steps so teams can cut investigation and resolution time.
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace)
Archer (Archer Technologies LLC)
United States
Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
Archlet Spark AI agents (Setup, Auction, Scenario, Summary and Proposal Analysis agents for sourcing)
Archlet (Archlet AG)
Switzerland
Zurich sourcing and eAuction platform whose Spark agents build RFx questionnaires, bid sheets and cost formulas, analyse an RFQ and auto-generate the right auction setup, turn plain-language rules into award scenarios, summarise supplier bids and score proposals. Supplier invitations, reminders and data validation are automated around them.
Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents)
Arctic Wolf (Arctic Wolf Networks)
United States
Agent-led managed SOC on the Aurora Superintelligence Platform: a 'Swarm of Experts' of oversight, authoritative and process agents runs triage, investigation, response, threat hunting, threat intel and detection engineering, with Arctic Wolf's human experts in the loop for novel cases and critical decisions.
Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest)
Ares Cyber (Ares Cyber S.r.l.)
Italy
Rome security-testing platform that runs SAST, SCA, IaC/secrets, DAST, vulnerability assessment and penetration testing as one pipeline, in which AI agents autonomously chain vulnerabilities and safely run exploits to prove which findings are exploitable, available as SaaS, self-hosted or an air-gapped appliance.
German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.
Atomicwork IGA Agent (agentic access provisioning on Atomicwork's AI Workforce)
Atomicwork (Atomicwork Inc.)
United States
AI coworker on Atomicwork's agentic ITSM/ESM platform that handles access requests end to end: it reviews context, applies policy, routes approvals to the right owners in Slack or Teams, provisions and deprovisions access and enforces just-in-time access, acting without human intervention unless policy requires it. Listed tools include Okta, Azure AD, Google Workspace, JumpCloud and Microsoft Intune.
Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off.
Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue.
Auditoria AI agents (AP Helpdesk, AP Invoices, AP Accruals, AP Vendor Watch, AP Statement Reconciliation, AR Collections, AR Remittances)
Auditoria (Auditoria.AI)
United States
AI agents that run accounts payable and receivable work inside finance's own ERP and inboxes: they answer vendor emails, capture and code invoices, chase accruals, monitor supplier bank, tax ID and sanctions data, reconcile vendor statements, and run collections and remittance matching within policy guardrails.
Agentic process automation platform for building goal-driven AI agents that use the Process Reasoning Engine to reason, bring in a human where needed and orchestrate bots, APIs, documents and other agents, with built-in governance and guardrails.
Contract lifecycle platform whose Avo AI turns each contract type into a governed agent (NDA, Vendor, Procurement and KYC Agents) that drafts, negotiates, approves and analyses within your playbooks, with every action scored and logged.
AWS Continuum for penetration testing (formerly AWS Security Agent)
Amazon Web Services
United States
AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour.
Japanese back-office suite (AP, expenses, invoicing, corporate cards, receivables) built around AI agents. The agents collect and digitise supplier invoices, draft and pre-check payment requests, create journal entries and run the accounting double-check, approve expense claims against company rules, and analyse cost increases.
Barracuda Integrated Email Protection agentic threat investigation and clawback (BarracudaONE)
Barracuda Networks (Barracuda Networks, Inc.)
United States
API-based email security for Microsoft 365 and Google Workspace in which AI agents triage threat activity, correlate cross-domain BarracudaONE signals and run real-time, tenant-wide clawback of malicious messages after delivery without SOC intervention, with Bailey AI explaining every verdict and action.
Beam AI self-learning agents (finance and operations agent suites)
Beam AI (Beam Technologies GmbH)
Germany
Agentic automation platform that turns SOPs into self-learning production agents, with prebuilt finance agents for invoice reconciliation, accounts receivable and financial compliance and reporting.
Italian AI-native offensive platform product: Arcangelo continuously maps internal and external attack surfaces, then runs adaptive multi-stage agentic penetration tests that plan and pivot like an attacker, with potentially intrusive exploitation kept human-approved and auditable.
Behavox Digital Employees (AI agents for compliance surveillance alert review)
Behavox (Behavox Limited)
United Kingdom
AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
BILL AI agents (W-9 Agent, Reconciliation Agent and other touchless AP agents)
BILL (BILL Holdings, Inc.)
United States
AI agents inside the BILL finance platform for small and midsize businesses: the W-9 Agent requests, follows up on, collects and pre-validates vendor W-9s (names and TINs), and the Reconciliation Agent codes and reconciles receipts, with the customer's team approving the final data.
Bind agentic contract workspace (drafting and negotiation agent with automated renewals and workflows)
Bind (Aatos Legal Technology Oy)
Finland
Helsinki agentic contract workspace for in-house legal, sales and procurement teams: an agent drafts contracts from emails, call notes or deal terms using the team's templates, reads each counterparty redline against the playbook and past deals and writes the counter, remembers what was conceded in earlier rounds, and runs renewal reminders, assignments and post-signature filing on its own.
Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP.
Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach.
BlackLine Verity AI agents (Verity Prepare multi-agent reconciliation, Verity Accruals and other close agents)
BlackLine (BlackLine, Inc.)
United States
Suite of specialised AI agents in BlackLine's financial close platform; Verity Prepare (GA July 2026) is a multi-agent system that ingests supporting documents, matches transactions, isolates anomalies, explains variances and assembles audit-ready reconciliation packages for human approval, and Verity Accruals automates the accruals process.
Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
Blackpoint Cyber (Blackpoint Holdings, LLC)
United States
AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026.
Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision.
Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing.
Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged.
Bricklayer AI security agents (agentic platform for the AI security workforce)
Bricklayer AI (Bricklayer AI Inc.)
United States
Agentic cybersecurity platform that deploys, coordinates and governs teams of role-based and tool-specialist AI agents to triage alerts, investigate incidents, run threat-intelligence and threat-hunting work and track vulnerability remediation inside analyst-approved procedures, with every agent action auditable.
BRYTER Hybrid Agents (AI plus rule-based workflow agents for DORA, DPA and NDA contract review)
BRYTER (BRYTER GmbH)
Germany
Legal and compliance agents that combine AI document review with BRYTER's rule-based workflow engine to run specific tasks end to end, such as reviewing contracts against DORA, reviewing DPAs and NDAs against a playbook, and generating the amendment agreements or reports.
C1 Autonomous Worker and C1 Agents (identity governance AI agent, formerly ConductorOne)
C1 (ConductorOne, Inc. d/b/a C1)
United States
Governed AI agent on C1's identity platform that carries out identity work end to end from a plain-language request (revoking stale admin grants, building access reviews, assembling audit evidence on who reached production, finding orphaned entitlement owners), acting only within the operator's own permissions and logging every action.
Cakewalk Agent Cake (AI agent for SaaS access provisioning, deprovisioning and conversational access requests)
Cakewalk (Cakewalk Technology GmbH)
Germany
Berlin identity-governance vendor's AI agent: once access is approved under the customer's policies, Agent Cake provisions seats in supported apps on the admin's behalf, removes all accounts during offboarding, and lets employees request access conversationally in Slack, inside a platform that discovers apps and AI agents beyond SSO.
Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review.
Castellum.AI Arbiter AI agents (alert resolution, transaction and fraud monitoring agents)
Castellum.AI
United States
AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision.
Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized.
Healthcare third-party risk agent in Censinet RiskOps that reviews vendor questionnaire responses and supporting documents (such as SOC 2 and penetration-test reports), captures integration details from requests, identifies findings and drafts assessment reports and corrective action plans for the risk assessor to validate.
Check Point Agentic Exposure Validation (AEV, AI agents that prove external exploitability)
Check Point Software Technologies
Israel
Part of Check Point Exposure Management, launched May 28, 2026. AI agents reason like attackers across an organisation's external attack surface, correlating exposures, leaked credentials, CVE and live exploit research with existing protection coverage, then safely prove, pivot on, or discard each finding, so teams get evidence of what is actually exploitable.
Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan)
Check Point Software Technologies
Israel
Check Point's API-based, prevention-first email and collaboration security (Harmony Email & Collaboration, formerly Avanan) for Microsoft 365, Gmail, Teams, Slack and file-sharing apps. Check Point says autonomous AI agents investigate threats, correlate activity into campaigns, prioritise incidents and orchestrate remediation. Check Point Infinity Platform for Government (which includes Harmony Email) is FedRAMP Moderate and GovRAMP Authorized at platform level; Check Point Harmony is TX-RAMP Level 2 — none of those registry rows name the AI agents.
Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel.
CITSmart GRC.S (GRC + SecOps platform with AI agents that check deadlines and execute response actions)
Central IT (CITSmart)
Brazil
Brazilian GRC-plus-security-operations platform from Central IT: alerts from proxy, DNS, XDR, e-mail and identity tools are correlated and prioritised by AI, AI agents check deadlines, priorities and owners for each compliance or security demand, and AI agents execute checks and response actions in the environment (Cognitive Workflow), with LGPD, ISO 27001, NIST, CIS Controls 8 and ISO 42001 mapped out of the box.
Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments.
CLEAR Investigate (agentic AI investigations for government, risk and fraud teams)
Thomson Reuters
Canada
Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators.
ClearContract contract agents (intake, review and deadline-monitoring agents that file, risk-check and watch incoming contracts)
ClearContract (ClearContract ApS)
Denmark
Contract-management platform from Aarhus-based ClearContract ApS built around AI agents that work in the background. Contracts arriving by email are picked up by an intake agent that files them, extracts key terms and assigns the counterparty; a review agent checks each one against the company's own checklist, flags risks with clause citations and creates tasks; agents also watch renewals and deadlines. Nothing is signed, sent or committed without human approval.
French accounts-receivable platform that connects to a company's ERP or billing tool and runs cash collection itself. It finds the right contacts and follows up from day one after the due date by email, SMS, voice and WhatsApp. It reads and classifies every customer reply (promise to pay, dispute, payment difficulty), pauses or escalates disputes, proposes payment plans and reconciles payments.
CleverChain AI agents (VERA autonomous due diligence and LUMA screening)
CleverChain (CleverChain Ltd)
United Kingdom
KYB, KYC, AML and third-party due-diligence platform where the VERA agent runs end-to-end investigations (ownership chain, business activity, sanctions and adverse media) into a cited, policy-mapped report, and LUMA handles AML screening and ongoing monitoring, with analysts approving high-risk decisions.
Clio Work agentic mode (goal-based multi-step legal work with Vincent)
Clio (Themis Solutions Inc.)
Canada
Legal AI workspace for law firms whose agentic mode takes a single goal-based prompt (for example 'find everything that could kill this deal before signing'), picks the legal skills it needs and runs the multi-step work itself, showing live reasoning traces that the lawyer can interrupt or redirect.
Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents)
Cloudgeni (Cloudgeni AS)
Norway
Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy.
CloudPeek agentic security operations platform (automatic triage, agent-run investigations and approval-gated response)
CloudPeek (CloudPeek Limited)
United Kingdom
UK agentic SOC platform that sits on top of existing SIEM, cloud, endpoint and threat-intelligence tools: it automatically triages every new alert, runs AI-agent follow-up investigations across connected tools, writes the incident summary and can act within per-workflow authority levels (advise, approve, act), including in on-premises or fully air-gapped deployments.
Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows.
German legal agent that detects contract type, jurisdiction and parties, applies the company's playbook to every clause, flags deviations with page-cited reasoning and produces playbook-compliant redlines in Word, Outlook and Teams.
German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval.
Agentic legal AI from Thomson Reuters that plans and executes multi-step legal work (research, document analysis, drafting and verification) grounded in Westlaw and Practical Law, including a Drafting Agent in Word that reviews agreements against playbooks.
Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes.
CodeWall autonomous attack agents (continuous external adversarial testing)
CodeWall (CodeWall Ltd)
United Kingdom
UK offensive-security product that deploys autonomous attack agents starting from the outside with no credentials or source code: specialist agents investigate in parallel, share discoveries on a persistent investigation graph, prove exploitable paths across applications, identities and data, and retest within authorised scope as the environment changes.
Command Zero Agent Zero (autonomous security analyst)
Command Zero (Command Zero, Inc.)
United States
Autonomous and AI-assisted SOC investigation platform from Austin, Texas. Its LLM agent, Agent Zero, investigates alerts end to end across identity, endpoint, cloud, email and SaaS, auto-closes routine cases with documented reasoning, and escalates the rest with a replayable chain of evidence for analysts to confirm or override.
Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.
AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions.
Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires.
Compri AI workforce for procurement and supply chain (sourcing, RFQ, supplier compliance and PO-follow-up agents)
Compri (COMPRI S.R.L., Milan)
Italy
Italian procurement platform for manufacturers that runs as a workforce of 30+ specialised AI agents in five teams. The agents capture and route purchase requests, run RFQs and chase supplier replies, onboard and risk-score suppliers and keep certificates current, and send POs, check order confirmations and update the ERP, acting within approval thresholds the customer sets.
An AI agent that runs as a GitHub Action, takes vulnerabilities found by Contrast's IAST (Assess) and SAST, writes code fixes using runtime context, runs your build and tests, and opens pull requests for developers to review.
Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.
Corma AI agents (browser-based identity lifecycle, provisioning and access automation)
Corma (Corma SAS)
France
French identity and SaaS-management product whose custom AI agents automate joiner-mover-leaver provisioning, offboarding and other identity actions in web apps even when no API, SCIM or SAML is available, using a browser-based agent that interprets the admin UI and executes the workflow steps.
Cortea Audit Quality Agents (AI agents for external audit file review, sample testing and disclosure checks)
Cortea (AI Audit Systems GmbH)
Germany
Berlin-based AI quality layer for audit firms. Its agents review audit files end to end, cross-checking figures, disclosures and assertions across financial statements, audit reports and working papers, run substantive sample testing against the auditor's criteria and work through IFRS/UK GAAP/Companies Act disclosure checklists, documenting findings for auditor and partner sign-off.
Cortena AI agents for accounts payable (invoice capture, line-level coding, entity routing, booking and payment-run preparation)
Cortena (Cortena B.V.)
Netherlands
Amsterdam accounts-payable platform whose agents pick up new invoices from mailboxes, drives and Peppol, route each to the right entity, code every line to account, VAT code and cost centre using the customer's rules and booking history, check it against the supplier contract and post booking-ready entries to DATEV, Exact Online or Twinfield, with payment runs prepared after VAT-ID and IBAN checks.
Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals.
CounterShadow AMI (Autonomous Machine Intelligence) – autonomous SOC triage, investigation and response
CounterShadow (CounterShadow Ltd)
United Kingdom
UK autonomous SOC product: AMI plans and runs investigation of every SIEM/EDR alert across connected tools without playbooks, returns a true/false-positive verdict with severity and logged evidence in about eight minutes, and can isolate hosts, block IPs or disable accounts under approvals the customer configures.
Covasant TPRM (agentic third-party risk management)
Covasant (Covasant Technologies Private Limited, Hyderabad)
India
Third-party risk product from Hyderabad-headquartered Covasant. Purpose-built AI agents onboard vendors through due-diligence workflows, chase vendors who are slow to respond, keep watching news, sanctions and financial data, and, when risk thresholds break, open remediation workflows, track vendor responses, escalate unresolved issues and produce DORA, SOX and NIST reporting packages.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents)
Crest (Crest Veda TechWorks Private Limited)
India
New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments.
Crogl sovereign AI SOC (autonomous alert investigation, threat hunting and evidence-gated auto-remediation)
Crogl (Crogl, Inc.)
United States
Self-hosted AI SOC whose agents pick up alerts from SIEM, SOAR and ticketing queues, investigate each one end to end across the customer's own tools, hunt threats and investigate advisories, and only trigger SOAR playbooks once an evidence gate is passed, with a full audit trail for the analyst's decision.
Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows.
Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes.
CybeDefend Cybe AutoFix (AI code security agent that opens tested fix pull requests)
CybeDefend (CybeDefend SAS)
France
French AI code security platform (SAST, SCA, IaC, container and secret scanning) whose Cybe AutoFix agent reads the code graph, rewrites vulnerable lines or picks the safest dependency upgrade, tests the change in isolation and opens a bot-signed, CI-gated pull request for a human to merge.
Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails.
Cycode's AppSec AI agents that assess the exploitability of findings, generate fixes, analyse change impact and query the risk graph inside the Cycode platform.
Cygnet.One AI Accounts Payable agents (invoice validation, GST/ITC checks, approve/hold/escalate recommendations and ERP posting)
Cygnet.One (Cygnet Infotech Pvt. Ltd.)
India
Ahmedabad tax-technology and IT firm whose agentic accounts-payable platform has AI agents ingest invoices, extract line and tax fields, cross-check vendor master, PO/GRN, GST/ITC and bank-detail changes against policy rules, recommend approve/hold/escalate/reject with reasons, and post approved invoices to the ERP while finance teams keep exception handling and final authority.
Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring.
Cytix agentic pentesting and automatic change approvals (change-driven software security)
Cytix (Cytix Ltd)
United Kingdom
Manchester software-change security platform that risk-scores every code change, automatically approves changes that fall within the customer's own policy and escalates the rest, then sends sandboxed AI pentest agents against high-risk changes and logs every decision and tool call as an audit-ready change record.
Agentic SOC platform that autonomously triages, investigates and responds across the full alert lifecycle, grading every verdict by its evidence and deferring to a human when uncertain.
Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams.
Data Adhikaar DPDPA agents (ten-agent compliance fabric)
Data Adhikaar (Qodequay Technologies Pvt. Ltd.)
India
India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades.
AI agent in Datadog Cloud SIEM that autonomously investigates security signals and returns evidence-backed Benign or Suspicious verdicts.
AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval.
Dataleon Léon (AI agent for KYB/KYC file review with multi-agent verification, screening and follow-ups)
Dataleon (Dataleon SAS)
France
French KYB/KYC compliance platform whose agent Léon pre-audits pending customer files, has KYC and KYB 'workers' review them and recommend the next step from the firm's past decisions, and launches specialised agents in parallel for identity verification, sanctions/PEP screening and customer follow-ups, with analysts making the final decision.
Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off.
DataVisor Vera and Vera Code (agentic AI for fraud and AML strategy, tuning, alert summaries and SAR drafting)
DataVisor (DataVisor, Inc.)
United States
AI teammate for fraud and AML teams on the DataVisor platform. From a plain-language request, Vera orchestrates agents that author detection rules, features and lists, tune strategies against production telemetry, summarise alerts and draft FinCEN-aligned SAR narratives; changes are proposal-only and a human approves before anything reaches production. Vera Code turns requirements into tested, documented configurations.
Decanos AI Agents (Triage, Investigate, Hunt, Response and Compliance agents for autonomous security operations)
Decanos (Decanos GmbH)
Germany
Berlin security platform whose specialist AI agents triage alerts, assemble investigations, run continuous threat hunts, execute containment and update compliance reporting across connected tools such as CrowdStrike, Splunk, Elastic, SentinelOne, Microsoft Sentinel and Wiz, with autonomy levels, escalation thresholds and approval gates set per agent and per action type.
Deep Fathom Compliance Readiness Platform (agentic CMMC / NIST SP 800-171 readiness)
Deep Fathom, Inc.
United States
CMMC and NIST SP 800-171 readiness platform for US defence contractors where AI agents interpret obligations, plan and advance routine readiness work, continuously map the CMMC boundary and collect evidence, with human review gates on consequential decisions.
Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight.
depthfirst autonomous security agents (code, supply chain, secrets and agentic pentesting)
depthfirst (DepthFirst AI, Inc.)
United States
San Francisco application-security platform whose autonomous AI agents trace business logic and data flows to find exploitable code vulnerabilities, check dependency reachability and secrets, review pull requests with proposed fixes, and run agentic pentests against running applications, re-running each attack after a fix merges to confirm it is closed.
Cognition’s autonomous coding agent. Listed here only for documented Snyk MCP/CLI scanning and SonarQube/Snyk/Checkmarx IDE plugins — not as a dedicated security product.
dexIQ AI bookkeeping agents (inbox, accounts payable, receivables, bank reconciliation and month-end agents for Xero)
dexIQ (Dexterous AI Pty Ltd, Australia)
Australia
Australian agentic bookkeeping platform: a team of specialist AI agents reads the finance inbox, extracts, validates (ABN against the ABR, GST arithmetic, duplicates, bank-detail changes) and codes supplier invoices, matches bank lines, prepares receivables follow-ups and posts approved bills to Xero. Humans approve by default; an autopilot mode lets high-confidence bills post and high-confidence matches clear on their own within set limits, and it never releases payments itself.
Agents in Docusign IAM that review agreements against company standards and playbooks, suggest edits, request approvals, monitor contracts for risks and obligations, and can be built as custom agents in Agent Studio and used as steps in Workflow Builder.
Doppel agentic social engineering defense (Email Security, Phishing Triage and agentic takedowns)
Doppel (Doppel Inc.)
United States
Social engineering defense platform where AI agents triage employee-reported phishing, remove malicious mail automatically, tune email detection policies and trace phishing back to its sending infrastructure and links to execute takedowns, alongside brand-impersonation takedowns across web, social, ads and app stores.
Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail.
Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.
AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst.
Ghent-based close-automation platform whose accounting agents check every ERP posting against policy (capex, VAT and controlling agents), match bank lines to the ledger, propose, book and reverse accruals, prepare recurring close tasks and post correcting journal entries to NetSuite after one-click review.
Edgescan Atomic (agentic autonomous penetration testing in the Edgescan platform)
Edgescan (BCC Risk Advisory Limited)
Ireland
Autonomous penetration testing built into the Dublin-based Edgescan platform, launched October 7, 2026. A team of narrow AI agents plans, adapts, chains vulnerabilities and validates real impact on web applications, using Edgescan's existing asset context and findings, while a deterministic 'Harness' enforces scope, permissions, approvals and allowed actions. Findings land alongside Edgescan's DAST, PTaaS and ASM results.
European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked.
Elucidate Eli (autonomous compliance agent for screening, monitoring and investigation)
Elucidate (Elucidate GmbH)
Germany
An autonomous financial-crime compliance agent on Elucidate's risk-intelligence platform for banks and payment institutions. It screens and monitors transactions across SWIFT and ISO 20022, triages adverse media, traces hidden ownership and layering, investigates alerts to disposition and drafts CDD reports.
Embat TellMe (AI agent for corporate treasury, reconciliation and accounting)
Embat (Embat Technologies, S.L.)
Spain
Treasury platform agent that runs routine finance work in the background, including transaction categorisation and enrichment, forecast-to-actual reconciliation, bank-to-invoice matching, GL postings and PSP-to-sales-order matching. Every action is logged and reversible, and it presents judgement calls with context for one-click approve, modify or reject.
Pre-built AppSec agents that read Endor findings against your source, write SAST fixes or file exceptions, pick safe dependency upgrades and open PRs, and answer malware-exposure and CI/CD posture questions inside your coding agents.
episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence)
episki (episki, llc)
United States
A GRC platform built around agents that draft policies, answer inbound security questionnaires, review vendors' SOC 2 and CAIQ responses, map controls, assess risks and write deterministic evidence-collection recipes. Every plan, step-run and sensitive action goes through human approvals and safety floors. Pricing is published.
Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation.
Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps.
Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports.
Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates.
Expenzing FinCat (autonomous AP scrutiny, expense processing and fraud-control agents)
Expenzing (Nexstep Infotech Pvt. Ltd.)
India
Indian spend-management vendor's AI suite (launched Sep 2, 2026). An autonomous AP Scrutinizer runs 20+ vendor-compliance, arithmetic and anomaly checks on every invoice and confidence-scores it for straight-through processing or human review. Fraud Control Agents scan expense receipts for doctored or fake documents.
Factory’s Droid coding agents. Listed here only because Factory’s own pages document Snyk Studio integration for scan/fix/verify inside Droid workflows.
AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review.
feld.ai KI-Agenten (invoice-intake-to-booking and freight-invoice audit agents)
feld.ai (feld.ai GmbH)
Austria
Austrian document-agent platform whose AI agents take incoming invoices (PDF, e-invoice, Swiss QR bill) through capture, master-data matching, mandatory-field and PO/delivery-note checks to a booking proposal in the ERP, passing clear cases straight through and sending only exceptions, with the reason and source location, to a person.
Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes.
EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full.
Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator.
Filigran XTM One (CTEM AI agents and autonomous attack chaining for OpenCTI and OpenAEV)
Filigran (Filigran SAS)
France
Agentic AI layer for Filigran's open-source threat-intelligence (OpenCTI) and exposure-validation (OpenAEV) platforms: pre-built agents turn threat intelligence into hunting packages, detection rules and attack scenarios, and an autonomous attack-chaining orchestrator plans, runs and adapts an AI penetration test against an authorized environment, with optional human approval for sensitive actions.
Finto AI accounting agents (invoice-to-journal-entry agents for enterprise finance teams)
Finto (Finto GmbH)
Germany
AI agents that take incoming supplier invoices from the inbox to verified journal entries: capturing any format (PDF, scan, XML, ZUGFeRD), validating, coding accounts, handling accruals and three-way matches, and communicating with vendors, with a vendor-claimed 90% no-touch rate.
Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age.
Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed.
Supervised AI agents for enterprise in-house legal teams that run high-volume contracting work end-to-end (drafting, playbook review and redlining of counterparty paper, NDAs, infosec forms), with lawyers approving high-risk steps.
Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs)
Fleuret (FLEURET AI SAS)
France
Paris-based agentic pentesting platform in which the Émile orchestrator coordinates 12-60 specialist attack agents (auth bypass, IDOR, injection chains, business logic, privilege escalation) against web apps and APIs, reports only findings proven with a replayable proof of concept, and re-tests fixes, with EU-sovereign hosting.
FloQast Transform AI agents (accounting close agents built from finished work, plus prebuilt agents)
FloQast (FloQast, Inc.)
United States
Close-management platform whose Transform AI agents run accounting workflows end to end (reconciliations, journal entries, close tasks); Transform can rebuild a finished close into a governed, documented agent tested against approved numbers, and each agent needs accountant sign-off before it runs.
Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed.
FluxForce Agentic OS (28 financial-crime and compliance agents, incl. Rhea Ledger KYC/AML Analyst)
FluxForce (FluxForce AI Pvt. Ltd.)
India
An 'Agentic OS' of 28 named AI agents in three squads covering fraud, KYC/AML, sanctions screening, STR/SAR drafting, audit trails and model risk for banks, fintechs and insurers. Each agent works in shadow mode first, then within autonomy bands and a per-agent kill switch that the institution sets.
Financial-crime platform from Riyadh-based MOZN whose built-in agentic AI triages AML alerts, summarises cases, recommends dispositions, auto-closes low-risk or duplicate cases and drafts SARs, alongside a Fraud Investigation Agent; humans keep consequential decisions.
Cloud-delivered SOC platform (SIEM, SOAR, UEBA, ITDR, threat intelligence and case management in one SaaS) whose agentic AI investigates and correlates alerts across assets and identities, then recommends or executes response actions under analyst oversight.
Freeday KYC digital employee (AI agents for KYC document collection, verification and screening)
Freeday (Freeday B.V.)
Netherlands
Rotterdam 'digital employee' platform whose KYC agents request, validate and classify customer documents in real time, guide customers through verification by voice or chat, run sanctions, adverse-media and PEP checks before onboarding completes, and close routine KYC checks without manual review, routing exceptions to analysts with pre-extracted data and logging every decision for supervisors.
Japanese accounting-firm agents from freee: prebuilt bookkeeping, rule-maintenance, monthly-check and tax-return-check agents that run client workflows autonomously and return only exceptions to staff, plus freee Agent Hub, a no-code builder for scheduled custom accounting agents.
Freshservice Freddy AI Agent and Freddy AI Agent Studio (IT and HR service agents)
Freshworks (Freshworks Inc.)
United States
AI agents in Freshworks' Freshservice ITSM that resolve employee IT and HR requests end-to-end (access provisioning, password resets, device setup, onboarding, leave queries) across Teams, Slack, Microsoft 365 Copilot and the portal, with an Agent Studio to build and govern pre-built and custom agents.
Gambit Cyber Vizier AI and KnightGuard AI agents (agentic CTEM and security workflow automation)
Gambit Cyber (Gambit Cyber B.V.)
Netherlands
Netherlands-headquartered continuous threat exposure management (CTEM) platform, KnightGuard, whose Vizier AI layer uses coordinated AI agents (CTI analyst, SOC analyst, red and blue team, ITOps) to monitor the attack surface, turn threat intel into deployable detections, validate them and orchestrate response.
Legal AI agents that draft, review, redline and negotiate agreements against company rules, playbooks and negotiation guardrails, with published self-serve plans.
Generally available agentic AML module for banks: a central orchestrator coordinates specialised agents that gather data, analyse transactions and customer behaviour, review prior alerts and deliver a decision-ready Level 1 alert recommendation with documented rationale, with analysts making every final decision.
An agentic orchestration platform for procurement and supply chain that coordinates domain-trained agents across sourcing, category management, contract lifecycle, supplier risk and compliance, and procure-to-pay, including obligation-management, clause-risk, supplier risk assessment, fraud/anomaly detection and invoice n-way matching agents.
GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)
GetTeddy (Teddy Technologies GmbH)
Germany
Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person.
LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL), plus agentic autofix (generally available 15 Oct 2026), where an alert is assigned to Copilot, which investigates, validates a fix and opens a pull request. Part of GitHub Code Security / Advanced Security.
GitHub Copilot’s coding agent. Listed here only for the official workflow that assigns Dependabot security alerts to Copilot (or other agents) to open a draft fix PR.
GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow.
AI agent in Google Security Operations that autonomously investigates SIEM alerts and returns a verdict, confidence score, timeline and next steps.
Gradient Labs KYB Agent (business-verification agent for financial services)
Gradient Labs (Gradient Labs Limited)
United Kingdom
London AI-agent company for financial services whose KYB Agent, in production, checks each business-verification document against the customer's internal policy, requests anything missing from the customer, and verifies the business before routing it to onboarding; it runs alongside Gradient Labs' disputes, lending/collections and customer-service agents.
Gu1 compliance and fraud AI agents (Onboarding, Screening, KYT, Case and Reporting agents)
Gu1 (operated by Gueno USA LLC)
Argentina
Buenos Aires-headquartered compliance and fraud platform for Latin American fintechs and banks in which 25+ specialised AI agents run KYC/KYB onboarding, sanctions/PEP screening, real-time transaction monitoring, alert triage with an auditable case file, and regulator-format SAR/STR drafting, while a human decides and signs.
On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management.
Halo AI Agents (service management with FedRAMP GRC module)
Halo (Halo Service Solutions Limited)
United Kingdom
ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate.
HarkX Agentic AI SOC platform (multi-agent triage, threat hunting, investigation and automated response)
HarkX (HarkX Technologies Global Private Limited)
India
Bengaluru-built AI-native SOC platform in which specialised AI agents correlate and score alerts, run scheduled threat hunts, investigate cases and execute containment and automated response actions across SIEM, EDR/XDR, cloud and SOAR tools, with multi-tenant support for MSSPs.
Purpose-built legal AI agents that split large legal tasks, work in parallel and return cited, review-ready output for law firms and in-house teams.
Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop.
Agentic AI triage and auto-fix for SAST findings in HCL AppScan: an LLM pass reviews each finding's accuracy and severity, filters false positives, and a deterministic codemod framework writes fixes in repos and pull requests.
Hivebuy KI-Agenten (Intake, Recommendation, Savings, Invoice, Compliance and Accounting agents for indirect procurement)
Hivebuy (Hivebuy GmbH)
Germany
Berlin-based purchase-to-pay platform for mid-sized companies whose AI agents turn free-text, PDF or email requests into complete purchase requisitions, pick preferred suppliers and cheapest compliant offers, process invoices with automatic 3-way matching, check deviations and escalate, and assign cost centres and GL accounts before ERP/DATEV export.
Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes.
Finnish human-risk platform whose Respond module automatically investigates every employee-reported email, groups related reports into one campaign incident, suppresses safe and duplicate reports, and removes confirmed malicious messages from all affected inboxes without waiting for an analyst.
AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval.
Hybridity compliance execution platform agents (policy-to-control registry, scheduled evidence and batch contract checks)
Hybridity (Hybridity AB)
Sweden
Swedish compliance execution platform for regulated firms that turns a company's own policies into a requirement registry, checks it against DORA, NIS 2, GDPR or customer demands, and hands routine work to agents (contracts checked in batches, evidence collected on schedule, updates computed when a rule changes), with a person approving every result.
Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning.
AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.
IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate.
Icertis Vera agents (Redline, Risk Review, Playbook Creation, Composer, Fulfillment and Insights agents)
Icertis (Icertis, Inc.)
United States
Contract AI agents in the Icertis contract intelligence platform that review third-party paper against a playbook, score risk Red/Amber/Green with plain-language explanations, generate playbook-aligned redlines in Microsoft Word, create playbooks and track obligations.
Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance.
Amsterdam-built autonomous SOC platform whose Virtus agents triage every alert through a 7-stage pipeline, return a verdict with confidence and evidence, and hand cases to an investigation agent, with sovereign/on-prem AI options.
IndiSec DPDPA compliance agents (Veda AI privacy analyst)
IndiSec (Indisec Edge Private Limited)
India
India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate.
INETCO BullzAI Investigate (agentic AI fraud investigation agents)
INETCO (INETCO Systems Limited)
Canada
Payment-fraud prevention platform for banks, processors and payment service providers whose agentic AI fraud agents collate transaction data, triage alerts, prioritise high-risk cases and give explainable risk scores and recommendations, running on a proprietary small language model that can be deployed on-premise.
CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized.
Intrepid Fox AI KYB agents (business onboarding, periodic review and transaction-monitoring follow-up)
Intrepid Fox (Intrepid Fox Project Limited)
United Kingdom
AI-native KYB platform for banks, EMIs, PSPs and fintechs in which embedded AI agents check business-onboarding documents in real time, ask the applicant follow-up questions, pull data from official company registers and compile an audit-ready report for the compliance officer's decision.
On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings.
CLM platform with Ironclad Agent, a conversational front door that routes requests to specialized agents (Intake, Contract Review, Playbook, Renewal, Search, Analytics, Workflow Designer and others) working inside live contracting workflows with human-in-the-loop review.
Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent)
Ironscales
United States
API-based email security for Microsoft 365 and Google Workspace that runs three AI agents: a Phishing SOC Agent for L2-style forensic investigation of suspicious emails, a Red Teaming Agent that models attacks aimed at your organisation and hardens detection, and a Phishing Simulation Agent. Plans include agentic autonomous remediation.
Ivalua IVA and IVA Studio (single source-to-pay AI agent with skills and sub-agents)
Ivalua (Ivalua SAS)
France
IVA is a single procurement agent with full access to the Ivalua source-to-pay platform: it can set up and launch sourcing events, redline contracts with approved language, validate invoices against contract terms, and react to supplier-risk events by finding affected contracts and proposing a mitigation plan, inheriting the invoking user's permissions with every action logged.
Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks.
German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval.
Indian autonomous DevSecOps agent that scans each commit, generates a secure patch and opens a human-approved pull request.
Kapittx AI agents for accounts receivable (AI Collection Agent and AI Cash Application agent)
Kapittx (Pune, India)
India
Indian accounts-receivable platform whose AI agents run collections and cash application. The AI Collection Agent sends reminders, reads and classifies every customer reply by payment intent, records promise-to-pay dates, sends automated responses and creates and assigns dispute tasks; the cash-application agent matches remittances to invoices and bank deposits and posts cash to the ERP in real time.
Keelvar Kai and autonomous sourcing agents (Sourcing, RFI and Optimal Close agents)
Keelvar (Keelvar Systems Ltd)
Ireland
Procurement sourcing platform whose AI orchestrator, Kai, takes plain-language requests and hands them to specialised agents that run sourcing events end to end (intake, supplier selection, event creation, multi-round bidding and award) under rules the procurement team sets.
Keepnet Incident Responder AI agent (phishing incident response and agentic security awareness)
Keepnet Labs (Keepnet Labs Ltd.)
United Kingdom
Human risk management platform whose AI agent reviews user-reported emails, opens investigations and proposes next steps in Incident Responder, with every action held in a human approval queue; the same agent builds and runs phishing simulations and awareness training. Per-user pricing is published.
Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports.
Agent platform with security integrations: AWS's agentic IDE and autonomous agent, with Kiro Powers for Snyk, Aikido, SonarQube and Sonatype scanning.
Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes).
Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent.
Kolleno AI agents (Maestro AI and order-to-cash agents for collections, cash application and credit risk)
Kolleno (Kolleno Limited)
United Kingdom
Order-to-cash platform whose AI agents chase invoices, reconcile and match payments and monitor credit risk within the customer's credit policy. Maestro AI routes work to task-specific agents, and each agent's autonomy can be set to insights, copilot drafting or independent execution, with every action logged and restricted actions sent to existing sign-off flows.
Agentic AI embedded in Kyriba's treasury and payments platform that queries live treasury data, analyses variances, tracks and reconciles payments, runs reusable Skills (operations checks, data validations, ISO 20022 address audits, compliance reviews) and prepares and executes actions such as money-market investments and stablecoin payments only with explicit approval.
Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations.
AI agent in Lisse's LeCHECK contract-review service (Microsoft Word add-in, from Aug 21, 2026). It runs the steps of a legal professional's contract review in order (risk check, proposed clause edits, comments, format check), and the reviewer applies its suggestions with a click.
Agentic AI platform with pre-built 'AI Colleagues' that auto-resolve employee IT, HR, finance and procurement back-office requests through 200+ enterprise connectors.
Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks.
Specialised AI agents for in-house legal teams that build review playbooks, handle intake requests, translate contracts and triage low-risk agreements, under attorney control.
Swiss legal AI workspace whose Legal Agent triages incoming contracts, reviews them against company playbooks, routes deviations above set limits to the business, Legal or Finance, and takes contracts from template draft through approvals and negotiation to signature.
Legiscope GDPR AI agents (RoPA, processor/DPA review, DPIA, incident and rights-request workflows)
Legiscope (Legiscope UAB)
Lithuania
Vilnius-registered 'agentic compliance' GDPR platform whose AI agents write and keep the Article 30 register current as the business changes, find and assess every processor's DPA against Article 28, prepare DPIAs, draft breach-notification decisions and turn data-subject requests into deadline-tracked case records, routing judgement calls to the privacy team.
Agent at the core of Legora's legal AI platform that plans, executes, reviews and delivers multi-step legal work with autonomous tool use and firm-specific skills.
Ranger is Levelpath's autonomous source-to-pay platform in which AI agents run sourcing events, generate RFPs and qualify suppliers, scan contract repositories and flag risks, continuously monitor operational and compliance signals across suppliers, and match invoices to orders and receipts, with configurable autonomy and logged actions.
LexisNexis's legal AI platform: Protégé Work presents a plan and then executes skills and workflows (contract comparison, playbook-based review, due diligence, compliance review), and purpose-built drafting agents produce review-ready contracts, motions and briefs grounded in LexisNexis content.
Agentic ERP for multi-entity finance teams: executive agents (Bill, Contract, Accrual) do accounting work, audit agents check their output and instructions against written accounting and approval policies, and materiality-based approval controls decide what needs a controller or CFO.
Lio multi-agent procurement workforce (Lio OS agents for direct and indirect procurement)
Lio (Lio Technologies; Lio Technologies GmbH)
United States
Multi-agent system for enterprise direct and indirect procurement. Lio's agents take over the operational procurement work that companies usually give to shared-service centres or BPOs (matching, chasing suppliers and handling exceptions end to end, including edge cases). They also support strategic work such as should-cost models, negotiation preparation and contract and supplier lifecycle management.
Japanese legal AX platform, available since Oct 2, 2026, where AI agents take incoming legal requests, collect missing facts from the requester, organise the issues and prepare a draft response that follows the company's own past decisions. Low-risk matters that meet company-set conditions can go ahead in the business unit without a legal check.
Litera's legal AI agent for law firms: it reviews and redlines contracts against the firm's playbook, applies changes across closing sets and chains Litera's deterministic engines (comparison and others) as skills at workflow milestones.
AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity.
Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions.
Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations.
AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision.
ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents)
ManageEngine (Zoho Corporation)
India
Prebuilt AI agents in ManageEngine Endpoint Central that triage EDR events (MITRE ATT&CK mapping, prioritized next steps), investigate device problems and diagnose failed patches, plus Agent Studio for custom endpoint agents.
ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents)
ManageEngine (Zoho Corporation)
India
AI agents inside ManageEngine's Log360 Cloud SIEM: an Investigation Agent that runs multi-stage alert investigations and writes an investigation report, prebuilt Alert Correlation and User Activity Review agents, and a no-code Agent Studio for custom SOC agents.
ManageEngine ServiceDesk Plus Zia Agents (L1 service desk, Entra ID user manager, PIR and KB agents, Agent Studio)
ManageEngine (Zoho Corporation)
India
AI agents in ManageEngine ServiceDesk Plus (Enterprise edition) that pick up and resolve L1 tickets, manage Microsoft Entra ID users, draft post-incident reviews and publish KB articles, with a no-code Agent Studio and a multi-agent orchestrator. ManageEngine is Zoho Corp's IT-management division. ServiceDesk Plus Cloud is TX-RAMP Level 1; that registry row names the cloud help-desk product, not the Zia agents.
Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent)
Material Security
United States
Cloud workspace security for Google Workspace and Microsoft 365 with an AI agent that triages, clusters and remediates user-reported phishing across the organisation, plus an OAuth Remediation Agent that investigates third-party app and AI-agent grants and can revoke tokens on its own. Per-user pricing is published.
Agentic SecOps platform whose governed AI agents investigate every alert across the security tools a company already runs, hunt threats, improve detections and trigger authorised response actions, without ingesting data into a new lake; teams set policies, permissions and approval gates.
UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes.
Accounts payable platform that uses agentic AI to capture and code invoices, decide matches, routing and approvals, approve payments for trusted vendors, check for fraud (including AI-generated receipts) and answer supplier invoice and payment emails automatically.
Mercanis AI procurement agents (Offer Comparison, Contract AI, Onboarding and 3-Way Matching agents)
Mercanis (CdC3 GmbH)
Germany
Berlin-based procurement platform (intake, sourcing, supplier management, contracts) with embedded AI agents. The agents compare and normalise supplier offers, score contract terms against past agreements, run supplier onboarding with document and risk checks, and reconcile 3-way matches, flagging only true exceptions.
Metis Legenda AML (AI agent for KYC due diligence and transaction monitoring)
Metis (Metis S.r.l.)
Italy
Milan AML product in which an AI agent runs Italian 'adeguata verifica' (customer due diligence) end to end: it analyses each onboarding document for relevance and extracts the data, traces beneficial owners through chains of shell companies using private documents and public databases, screens PEP, EU/UN sanctions and internal watchlists, proposes a reasoned risk classification and logs every step in a traceable report; a companion agent analyses transactions to surface real behavioural anomalies and cut false positives.
Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation.
Security Copilot agent in Microsoft Defender that autonomously triages user-reported phishing, resolves false positives and explains each verdict.
Middesk Agents (KYB investigation agents for OFAC false positives, ownership, address and merchant risk)
Middesk (Middesk, Inc.)
United States
Business-identity platform whose specialised AI agents investigate and resolve KYB review work (OFAC false positives, address discrepancies, beneficial-ownership verification, litigation matches, operating-status checks and merchant-risk monitoring) across 400+ data sources, returning evidence-backed, audit-ready decisions through one API.
Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams.
No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs.
Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents)
Mindlapse (Mindlapse SAS)
France
French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human.
Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles.
MNTSQ AI Agent (contract review, drafting and matter-management agent in MNTSQ CLM)
MNTSQ (MNTSQ, Ltd. / MNTSQ株式会社)
Japan
Legal AI agent built into the Japanese MNTSQ CLM. It agrees a review policy with the lawyer from the deal background, then reviews the contract against a playbook co-developed with Nagashima Ohno & Tsunematsu, redlines and comments directly in Microsoft Word, and drafts matter-management comments.
AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team.
Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates.
Enterprise AI assistant platform that automates employee support and business operations workflows across IT, HR and related systems.
Muinmos AI agents (orchestrated KYC, KYB, screening, client classification and perpetual-KYC agents)
Muinmos (Muinmos ApS)
Denmark
Client onboarding and lifecycle-management platform for investment firms, banks, crypto and payment firms that runs KYC, KYB, screening, client classification, suitability and risk assessment through specialised AI agents coordinated by an orchestration agent, with event-driven perpetual-KYC monitoring.
Workflow automation platform where agents are first-class: you describe an agent, n8n drafts its instructions and tools, and agents with triggers and memory call 500+ integrations and existing workflows, alone or as coordinated multi-agent systems. It can be self-hosted.
Agentic exposure-operations platform whose AI Exposure Eliminators continuously discover exposures across identity, attack surface, control gaps and vulnerabilities, investigate which attack paths are actually exploitable given existing controls, pick the neutralization path (config hardening, control deployment or patch) for one-click approval, route the work and verify from the sensor that the fix holds.
Napier AI Continuum responsible agents (screening alert triage and auto-clearing)
Napier AI (Napier Technologies Limited)
United Kingdom
Configurable AI agents in London-based Napier AI's Continuum financial-crime platform. In Client Screening and Transaction Screening, compliance teams build and tailor 'responsible agents' in a no-code sandbox and choose how much autonomy to hand over, from flagging sanctions, PEP and adverse-media matches for review to clearing known patterns automatically before they reach a queue, with every agent action explained and captured in the audit trail.
Nasdaq Verafin Agentic AI Workforce (Agentic Sanctions, AML, EDD and Fraud Analysts)
Nasdaq Verafin (Verafin, a Nasdaq company)
Canada
A suite of role-based agentic AI analysts for bank and credit-union financial-crime teams. They triage and disposition sanctions, money-laundering and fraud alerts and prepare EDD recommendations. Institutions can switch on auto-dispositioning, run them inside the Verafin platform or overlay them on third-party systems.
NEC Procurement Negotiation AI Agent Service (NEC 調達交渉AIエージェントサービス: autonomous delivery-date and quantity negotiation with suppliers)
NEC (NEC Corporation / 日本電気株式会社)
Japan
Service from NEC for manufacturers' procurement teams. An AI agent built on NEC's own automated-negotiation AI finds the purchase orders whose delivery dates or quantities need adjusting and works out proposed terms. It then negotiates those terms with suppliers itself, interactively, and connects to ERP and other existing systems. Offered since December 2025.
Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release.
NICE Actimize Xceed AI Agents (fraud and AML alert triage and investigation agents)
NICE Actimize (a business of NICE Ltd.)
Israel
AI agents inside NICE Actimize's Xceed AI FRAML platform (combined fraud prevention and AML compliance for financial institutions, with an offering for credit unions and community banks). The agents automate alert categorisation and triage, dismiss false positives and summarise cases, and 'Converse and Suggest' agents plus a CoPilot suggest investigative paths in natural language, with analysts in the loop who keep control of decisions.
EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept.
Italian agent for mid-sized companies and NIS2 entities without an in-house SOC: after verifying domain control it continuously discovers assets and assesses network, web apps and APIs, correlates findings with EPSS and CISA KEV, confirms exploitability with automated validation pentests, ranks risks by business impact and prepares NIS2, DORA and ISO 27001 reports; the team decides what to fix.
noze DataGovern (on-premise compliance agents for NIS2, GDPR and the AI Act)
noze (noze S.r.l.)
Italy
Italian on-premise platform whose AI agents read company documents and procedures, map them to NIS2, GDPR, AI Act, CRA and DORA obligations, flag gaps and risks with the source linked, and pre-fill registers, evidence and one remediation plan; a person approves every proposal and each confirmed gap becomes an owned task.
NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response)
NTT DOCOMO BUSINESS (NTTドコモビジネス株式会社, formerly NTT Communications)
Japan
Japanese managed AI SOC service in which NTT DOCOMO BUSINESS's own AI Agent periodically reviews Microsoft Sentinel incidents, correlates endpoint, network and authentication logs and writes an analysis report back, and Sentinel's managed SOAR playbooks then respond to the alerts automatically, with NTT security experts on call.
AI agent inside the Nuix Neo investigative analytics platform for legal, regulatory, investigations and compliance-monitoring matters: it picks and calls Neo tools on its own to answer plain-language questions across a case, links every answer to source items, tags items and writes findings back to the case, and records each step for audit.
Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent)
Nullify (Nullify Holdings Pty Ltd)
Australia
Australian 'autonomous system of agents' for product security that covers code, secrets, API pentesting and exploit validation. It proves findings with reproducible evidence, scores them against the customer's assets, writes merge-ready fix PRs routed to code owners, and runs remediation campaigns through Jira and Slack until merge, with the customer keeping final merge approval.
Close-management and accounting platform whose agents turn source records (leases, commission plans, card spend, payables) into subledgers, propose the accounting treatment for approval, build schedules and derive journal entries automatically.
NXT AP (SAP-native vertical AI agent for autonomous accounts-payable invoice processing)
NXT4AP (nxt4ap Pte Ltd, Singapore)
Singapore
Singapore-registered vendor of NXT AP, which it calls a vertical AI agent for SAP accounts payable. Running inside SAP, it receives PDF, hybrid and structured e-invoices, identifies suppliers, POs and goods receipts, matches and validates lines, bank details, tax and duplicates, proposes coding for non-PO invoices, routes approvals and exceptions, and creates and posts the SAP documents, resuming automatically once an exception is resolved.
Omnea agentic operating system for procurement (Intake, Review, Approval, Doc Review, Performance and Mitigation agents)
Omnea (Omnea Limited)
United Kingdom
A procurement orchestration platform in which agents run intake, review, approvals, document review, supplier performance and risk mitigation from request to renewal, with autonomous sourcing, PO automation, AP and TPRM/continuous supplier monitoring modules, each agent with configurable human oversight and a full audit trail.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI)
OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)
India
Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.
Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel)
Ontinue (Ontinue AG)
Switzerland
Zurich-headquartered managed detection and response provider for Microsoft Defender and Sentinel whose ION MXDR service uses a team of AI agents to run autonomous Tier 2-level incident investigations (aggregate telemetry, form and test hypotheses) before handing a step-by-step summary to an Ontinue Cyber Defender.
AI identity agent in Opal that reviews access requests, investigates context and approves, denies or escalates with recorded reasoning.
OpenHands Vulnerability Fixer (agent platform with security integrations)
All Hands AI (OpenHands)
United States
Agent platform with security integrations, not a dedicated AppSec scanner: OpenHands' open-source Vulnerability Fixer runs Trivy scans or ingests Snyk, Veracode or Checkmarx reports, then has OpenHands agents write and test fixes and open GitHub PRs.
Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection)
Optivalue.ai (Optivalue.ai SAS)
France
French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Oracle Nexus for financial crime investigations (Nexus Case Flow and Nexus Reach agents)
Oracle (Oracle Financial Services)
United States
Oracle's financial-crime case management with agentic AI that pre-investigates AML, fraud, sanctions and KYC cases unprompted, gathers evidence and entity context, runs adverse-media scans and drafts investigation narratives for human review.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Orcha AI agents for finance (Accounts Payable, Receivables, Approvals, Close & Reconciliation and more)
Orcha (Orcha GmbH)
Germany
Berlin 'agentic ERP' whose finance agents capture, validate, GL-code, 3-way-match and post vendor invoices (with VAT checks, fraud/anomaly and sanctions screening), handle receivables, approvals and daily bank/intercompany/VAT reconciliation inside DATEV, SAP, Dynamics or Xero, escalating low-confidence decisions to a person.
Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails.
Oscilar Agent Hub (AML, sanctions, fraud and onboarding agents)
Oscilar (Oscilar, Inc.)
United States
Risk-decisioning platform with 30+ orchestrated agents on a shared risk memory, including AML L1 review, sanctions screening dispositions, adverse media, EDD dossier, SAR narrative, fraud L1 review, fraud-network and KYB review agents, where every recommendation is confirmed by a human analyst.
PartSpace PartsAgent (autonomous technical-procurement agent for drawing parts)
PartSpace (PartSpace GmbH)
Germany
Procurement agent for manufacturers. It works on CAD, PLM, ERP, supplier and pricing data to plan and run technical purchasing from need analysis to order: bundling demand, finding suppliers, preparing RFQs, comparing quotes and placing orders. Teams can give it natural-language commands.
Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you.
Spend-management AI agents that enforce spend policy, collect and match receipts, chase approvals, code transactions for month-end close and handle procurement, travel and payment requests.
Peakflo AI agents (agentic AP/AR workflows with AI browser, voice and WhatsApp agents)
Peakflo (Peakflo Pte. Ltd.)
Singapore
Singapore-based finance back-office platform (procure-to-pay, invoice-to-cash, expenses) built on agentic workflows. AI browser agents log in to web apps and portals to act, voice agents make collection and follow-up calls, and WhatsApp agents work alongside them, all under configurable workflow templates.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Penetrify AI penetration testing agent (automated web app and API pentests)
Penetrify (Algofy, s.r.o.)
Czech Republic
Self-serve automated pentesting from Brno in which an AI agent maps a web app's attack surface, forms hypotheses, chains findings into multi-step attack scenarios (auth bypass, broken access control, exposed secrets) and writes up only what it can demonstrate, with published monthly plans and EU/GDPR data processing.
Pennylane Autopilot (autonomous bookkeeping and pre-review for accounting firms and SMEs)
Pennylane (Pennylane SAS)
France
French accounting platform's Autopilot runs activated bookkeeping workflows end to end (document requests and reminders, document processing, bank reconciliation, VAT preparation) and pre-reviews year-end diligence with documented conclusions, while accountants supervise exceptions from a control centre.
Pentera AI-powered exposure validation (automated pentesting with AI-guided attack execution)
Pentera (Pentera Security Ltd.)
Israel
Security-validation platform that continuously runs automated, production-safe pentests across internal networks, the external attack surface, cloud and identity, web apps and APIs. AI guides attack execution in real time (adapting techniques, generating payloads, chaining exploits) while Pentera's deterministic engine keeps every action controlled and auditable; users can approve or stop execution within guardrails, and Pentera Resolve turns validated findings into automated remediation workflows.
Phacet AI agents for finance (40+ agents for AP 3-way matching, supplier-billing control, bank reconciliation and close)
Phacet (SPX Software, France)
France
French finance-operations platform with 40+ ready-to-use AI agents (plus a builder) for accounts payable, receivables, treasury, accounting, internal controls and close. Agents pull invoices from email, extract and normalise data, run 3-way matching and price-list controls against the ERP, reconcile bank flows and can trigger actions in the accounting system on schedules, routing exceptions and edge cases to people.
Belgian human-risk platform with a suite of AI agents that run the phishing training programme (orchestration, simulation, brand, supplier and deepfake simulation agents), triage every reported email with a verdict and a drafted reply, and check clicked links in an isolated environment in real time. New content needs admin approval and every action is logged.
UK AI code-security agent platform with reachability-validated scanning, PR scanning, IDE/agent integrations and an agent that writes risk-tiered fix PRs.
Pilot AI Accountant (autonomous bookkeeping agent: categorisation, reconciliation and monthly close)
Pilot (Pilot.com, Inc.)
United States
Bookkeeping agent from US back-office provider Pilot. It connects to a company's bank and card accounts and tools such as Stripe and Gusto, then categorises transactions, identifies vendors, reconciles accounts, closes the books each month and produces P&L, balance sheet and cash-flow statements, flagging only unusual items such as duplicate charges or new vendors for review. The AI-only Essentials plan is $99 a month; higher plans add human bookkeepers.
Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models.
Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge.
Point Predictive Predictor Agents (agentic forensic fraud reviews for lenders)
Point Predictive
United States
Specialist fraud agents for auto lenders, banks, credit unions and finance companies, launched Oct 16, 2026. They review consortium loan applications in real time for fraud rings and produce agentic forensic fraud reviews of loan files in seconds. Plain-language portfolio and dealer-risk questions run over Point Predictive's lending-fraud consortium.
Priam AVA (autonomous L1 alert triage and investigation agent with evidence-backed verdicts)
Priam Cyber AI (Priam Cyber AI Ltd)
United Kingdom
London-based agentic SOC product: AVA investigates every alert from SIEM/EDR/XDR sources by testing malicious and benign hypotheses against the customer's environment and closes it with a defensible verdict (true positive, false positive or inconclusive with the missing evidence named), producing an audit-ready investigation report for enterprise SOCs and MSSP/MDR teams.
AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals.
Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control.
Procol Supplier Ops Agent (supplier onboarding, due-diligence and compliance, scoring and risk agents)
Procol (Procol Tech Private Limited)
India
A coordinated set of procurement-side AI agents that run supplier onboarding from invite to approval. They validate tax IDs, licences and certificates, run continuous AML, sanctions and debarment screening, track contract expiry and compliance deviations with audit trails, and score suppliers on cost, quality, delivery and compliance.
Procure Ai autonomous sourcing and negotiation agents (tail-spend tenders, autonomous negotiations, intake and SOW agents)
Procure Ai (ProcureAi Ltd)
United Kingdom
London-registered agentic procurement automation platform whose agents run tactical and tail-spend sourcing events on autopilot, finding suppliers, collecting bids and analysing proposals, and negotiate commercial terms with suppliers autonomously within a negotiation playbook the buyer configures, alongside chat-based intake and SOW-generation agents.
Agentic AI layer inside Proofpoint's platform. The Satori Abuse Mailbox Agent classifies every user-reported email that needs manual review (phish, malware, spam or clean) and can trigger configured quarantine or tagging workflows. A DLP Triage Agent does the same for data-loss alerts, with guardrails, chat explanations and audit logs.
Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents)
Prophet Security
United States
Agentic AI SOC platform whose agents investigate every alert end to end, respond through scoped Agent Actions autonomously or with sign-off, hunt threats and tune detections.
QAD ChampionAI Champions (background agents for accounts payable, procurement follow-up and sourcing in manufacturing)
QAD | Redzone (QAD Inc.)
United States
ChampionAI "Champions" from US manufacturing-software vendor QAD | Redzone are persona-based agents that run continuously in the background of a workflow. The Accounts Payable Champion (generally available since Sep 22, 2026) captures invoices from email, supplier portals and EDI, matches them to PO and goods receipt, clears in-tolerance invoices toward payment and routes only exceptions to people. The Procurement Champion chases suppliers and keeps POs and the ERP in sync; the Sourcing Champion creates RFQs, follows up suppliers and prepares award packs.
Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts.
Agentic pull-request review platform (formerly CodiumAI) that flags bugs, security issues and rule violations with organisational context. A general code reviewer, not a dedicated SAST scanner.
Qualys Cyber Risk Agents in Enterprise TruRisk Management (Agent Val, Sara, Insta, Nyra, Sid)
Qualys (Qualys, Inc.)
United States
Agent marketplace inside Qualys Enterprise TruRisk Management where teams 'hire' AI agents that detect new exposures without scanning, safely validate exploitability, re-rank risk by active threat campaigns and run confidence-gated patch and patchless remediation with rollback and re-validation.
RaonSecure OneSOAR (AI autonomous security control tower) and OneHacker (AI pentester) from the ONE AI agentic platform
RaonSecure (라온시큐어)
South Korea
Seoul security and authentication vendor's agentic AI products: OneSOAR runs security operations from natural-language commands, automates account changes for joiners, movers and leavers, and on detecting anomalous behaviour immediately executes autonomous defence such as account lock, session termination, MFA step-up and admin alerts; OneHacker runs continuous, autonomous AI penetration tests from Pentest-Graph scenarios with white-hacker verification.
Singapore-based RegASK monitors regulatory change in 160+ markets for life sciences and consumer products companies, and its AI agents assess impact on products and markets, assign follow-up tasks and execute subsequent actions in configurable workflows, with expert review and a recorded outcome for each run.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
UK agentic MDR platform on Google Security Operations with specialist AI agents for detection engineering, triage, response and self-healing, under human oversight.
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
US agentic development platform whose Security Agent reviews a project's full codebase (threat model plus Semgrep/HoundDog static analysis), Level 3 AI pentest black-box tests the running Preview, and accepted findings can be sent to Agent for parallel remediation with a follow-up rescan — listed as an agent platform with security integrations, not a dedicated AppSec scanner.
A third-party risk platform run by a coordinated team of AI agents. They discover and classify vendors from identity, procurement and IT systems, collect and analyse vendor documentation and questionnaires against external attack-surface intelligence, chase vendors for missing evidence and remediation, and orchestrate approvals with humans in control.
Ridge Security RidgeGen (agentic AI red teaming) and RidgeBot
Ridge Security (Ridge Security, Inc.)
United States
Offensive-security vendor from Milpitas, California. Its on-premises, model-agnostic RidgeGen agent does agentic AI red teaming: it reasons through multi-step attack chains to find business-logic and non-CVE risks, verifies every finding with reproducible exploit evidence, gives fix guidance and re-runs to confirm fixes. It sits alongside RidgeBot automated pentesting.
Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers.
Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents.
AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor.
AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment.
Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding.
Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata).
Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments.
Prebuilt SAP AI agents that execute multistep finance, HR, procurement and service tasks across SAP and non-SAP systems, coordinated by role-based Joule Assistants, with custom agents built in Joule Studio and governed in SAP AI Agent Hub.
Fraud and AML platform with named agents that disposition screening alerts, run enhanced due diligence and business verification, analyse networks, draft SAR narratives, tune monitoring rules and build dispute packages.
Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.
AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles.
Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.
An AI SOC analyst built into the Securonix Unified Defense SIEM that triages, correlates and enriches alerts, writes investigation summaries and prepares cases, coordinated by the Agentic Mesh of specialized agents under human approval.
Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation.
Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
SEQUENTA KI-Kontierungsagent (AI invoice-coding agent with DATEV export)
SEQUENTA (Sequenta UG (haftungsbeschränkt))
Germany
Berlin bookkeeping agent for German SMEs and the self-employed that collects incoming invoices by upload, email or e-invoice, extracts the data, applies hard-coded German VAT rules (§13b reverse charge, low-value-asset limits, intra-EU acquisitions), researches unclear receipts on its own and produces complete booking entries (account, contra account, BU key, text) for DATEV-EXTF export, flagging uncertain items.
Serrala AI agents (governed AP, AR and payments agents in the Serrala Finance Platform)
Serrala (Serrala Group GmbH)
Germany
Purpose-built finance agents inside the Serrala Finance Platform that interpret context, decide the next best action within defined policies and execute AP, AR and payments tasks across systems (for example resolving AP price variances and matching and allocating unmatched incoming payments), with human-in-the-loop oversight and an auditable record of every action.
Generative AI assistance across the ServiceNow platform for IT, employee and customer workflows.
Shufti Transaction Trust Monitoring (agentic FRAML engine)
Shufti (Shufti Pro Limited)
United Kingdom
Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing.
Sidetrade Aimie Agents and Customer Agents (order-to-cash AI agents and Agent Builder Studio)
Sidetrade (Sidetrade SA)
France
Order-to-cash (accounts receivable) platform with prebuilt Aimie Agents that run collections, cash application, dispute and credit-risk work, including autonomous outbound calling. Customer Agents built in Agent Builder Studio automate company-specific O2C processes under policy controls and human oversight.
AI agent for enhanced due diligence (EDD) on high-risk customers: it gathers internal and external data, unifies KYC/KYB data, sanctions, adverse media and ownership/associate risk, flags risk factors and mitigants, recommends next steps and drafts a fully cited risk narrative for regulatory review, while the analyst makes the final decision.
Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening.
Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems.
An autonomous AI agent for on-demand, ongoing penetration testing that adapts its testing logic in real time and focuses findings on each customer's business context, developed with LRQA's pentesting methodology.
Featured
Developer-first application security platform. Snyk Agent Fix validates AI-suggested fixes for Snyk Code findings, and the Evo Agentic AppSec agents (scanning, dependency firewall, security review, remediation and secrets) run Snyk's engines as tools. Several of these agents are still in preview.
SOCRadar AI Agents (specialist threat-intelligence, attack-surface, digital-risk and alarm-triage agents)
SOCRadar (SOCRadar Cyber Intelligence Inc.)
United States
Roster of specialist agents inside the SOCRadar threat-intelligence platform: customers deploy agents, set each one's skills, scope and access, and green-light sensitive steps. Agents cover threat-actor and ransomware intelligence, detection-rule writing, IoC enrichment, identity/credential exposure, vulnerability analysis, brand and dark-web monitoring, phishing-domain hunting, external attack surface and Shodan recon, and alarm triage that records verdicts and asks before changing an alarm's status.
Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions.
Sonrai WALLy (cloud privileged access management agent)
Sonrai Security (Sonrai Security Inc.)
United States
Cloud PAM agent that works with Sonrai's Cloud Permissions Firewall across AWS and GCP. WALLy flags identities carrying privilege risk (overpermissioned roles, external accounts with IAM access, unused permissions), prioritises the fixes that cut the most risk, writes remediation policies (quarantine zombie identities, block third-party access, enforce just-in-time access, remove dangerous privileges) and stages them for a human to review and approve before deployment, then confirms the risk is closed.
Soource agentic procurement (supplier scouting, qualification, RFQ and follow-up agents)
Soource (Soource Srl, Bolzano)
Italy
Italian procurement platform that runs a network of AI agents on a company's own supplier data plus verified external sources. The agents scout and contact suppliers, send qualification questionnaires and check certificates, dispatch RFIs/RFQs, chase replies, compare responses and keep supplier records updated, while buyers keep approvals and decisions.
Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions.
Sopra Steria IAN – Investigation Agent Network (agentic AML alert investigation)
Sopra Steria (Sopra Steria SE, Hamburg)
Germany
Agentic AI product from Sopra Steria's German company for anti-financial-crime teams: it takes transaction-monitoring alerts and runs the first-level investigation itself (gathering case information from approved sources, analysing facts and patterns in the alert's context, documenting results, sources and reasoning) and prepares a recommended action, while the final case decision stays with the analyst.
Sourcery AI code review and security scanning (PR review bot with merge-blocking security checks, auto-approval of low-risk PRs and nightly codebase scans)
Sourcery (Sourcery.AI Limited)
United Kingdom
London AI code reviewer for GitHub and GitLab that reviews every pull request within minutes, flags security issues and suggests commit-ready fixes, fails the check on high-severity security findings so merging can be blocked, auto-approves low-risk PRs with no blocking findings, and scans whole repositories every night for vulnerable code, exposed secrets, misconfigured infrastructure and vulnerable dependencies.
Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide.
AI agents for transactional lawyers and legal teams: Associate plans and executes multi-document drafting and review projects, and Autonomous Contract Management (GA Oct 2026) runs intake, first-pass review, approvals and redline review.
Spharaka Sphere (agentic AI SOC platform with autonomous investigation and policy-bounded response)
Spharaka Networks (Spharaka Networks Private Limited)
India
Indian-built agentic SOC platform (SIEM, SOAR, UEBA, XDR and threat hunting in one) where AI agents triage and investigate every alert to a conclusion and execute containment inside a customer-defined policy envelope, staging higher-impact actions for a named approver.
AI analyst agents for financial-crime compliance that run KYC and KYB onboarding reviews, disposition sanctions, PEP and adverse-media alerts, perform enhanced due diligence and rescreenings, and draft SAR/UAR filings with audit-ready decision logs.
AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word.
Autonomous Trust Platform with governed AI agents that detect change across systems, vendors, access and AI use, then refresh evidence, run vendor due diligence, prepare audits and close control gaps, with humans approving material decisions.
SQUR Autonomous Pentest (24-hour AI web and API pentesting with exploit verification)
SQUR (SQUR UG (haftungsbeschränkt))
Germany
German autonomous pentesting product for web apps and APIs: given a target URL, scope and optional source code, its AI agents carry out real exploitation, a separate agent re-tests every finding against the live app to weed out false positives, and a compliance-ready report with proof-of-exploit and remediation steps arrives within 24 hours; continuous monthly runs mark findings fixed, regressed or new.
StackHawk Wingman (find-fix-verify security for AI coding agents)
StackHawk (StackHawk, Inc.)
United States
Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month.
Agentic financial close workspace where AI agents handle reconciliations, journal entries, anomaly detection and reporting while accounting teams review the work.
Steuerboard Kompass (agentic OS for German tax firms: AI agents working directly on DATEV data)
Steuerboard (Steuerboard Labs GmbH)
Germany
Generally available since Oct 14, 2026: an agentic operating system for German tax-advisory firms (Steuerkanzleien). AI agents work on the firm's DATEV data in the background. They check client bookkeeping for missing receipts, unusual costs and missing tax codes, flag missing year-end closing entries, calculate BWA metrics and email clients to request missing documents, and changes go back to DATEV only after the firm approves them.
Compliance platform with published product pricing pages for building and maintaining security certification programs.
Strike48 agentic SecOps platform (pre-built SOC agent team and no-code agent builder over federated logs, cloud or air-gapped on-prem)
Strike48 (Devo Technology, Inc.)
United States
Agentic orchestration platform for SOC and IT teams from the company behind the Devo log platform: purpose-built micro agents triage and investigate alerts, analyse phishing, hunt threats, write and tune detections and help with compliance over logs queried in place across SIEMs and data lakes, with configurable human approval and an audit trail; available as SaaS, isolated compute or an air-gapped on-prem appliance.
StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt)
StrongestLayer
United States
AI-native email security for Microsoft 365 and Google Workspace in which a multi-LLM reasoning engine (TRACE) investigates each email's intent against your business context and blocks attacks. Three classes of agents give employees plain-English verdicts in Outlook and Gmail, send pre-investigated, MITRE-mapped cases to the SOC, and hunt and remediate across mailboxes.
Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer)
Sublime Security
United States
Email security platform whose AI agents triage user-reported and flagged emails end to end (ASA, with passive or active auto-remediation modes) and write backtested detections for new attacks (ADÉ), which default to one-click human approval and can auto-activate when they clear a precision threshold. Runs as SaaS or self-hosted in AWS, including GovCloud.
Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions.
Swimlane's AI SOC product, built on its Turbine automation platform, uses autonomous 'deep agents' to plan and run alert investigations, with explainable decisions, auditable actions and AI-generated plans that analysts can review and turn into playbooks.
Financial-crime agents on SymphonyAI's agent-native Symphony Risk Intelligence platform: manager and specialist agents that prepare TM and screening investigations, enrich watchlist records, track threat and regulatory intelligence, and run KYC/EDD workflows.
Synack's Autonomous Red Agent (Sara) for agentic pentesting, with exploitable findings validated by the Synack Red Team.
Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data.
Tacto AI agents for industrial procurement (supplier-document, order-confirmation, RFQ/quote, should-cost and savings agents)
Tacto (Tacto Technology GmbH)
Germany
Munich-based procurement platform for manufacturers whose AI agents request and update supplier documents autonomously, read order confirmations and match them to purchase orders (escalating only deviations), convert and compare supplier quotes, verify compliance documents (REACH, ESG, CBAM, LkSG) and surface savings opportunities.
Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review.
Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)
GMO Flatt Security (GMO Flatt Security株式会社)
Japan
Japanese security AI agent that continuously finds vulnerabilities with AI-SAST and AI-DAST (including logic, authentication and authorisation flaws), generates fix patches and opens pull requests with unit tests, and runs AI penetration tests that actually attempt intrusion to prove exploitability.
Agent orchestration platform (not a dedicated AppSec scanner) that opens auto-fix PRs from Snyk vulnerability scans and Sentry production errors.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Themis AI Investigator (AML/KYB due-diligence agents)
Themis (Themis International Services Ltd)
United Kingdom
A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision.
AML investigation suite inside ThetaRay's Investigation Center, working on top of ThetaRay's transaction monitoring. Ray analyses each alert end to end (case data, customer and counterparty behaviour, KYC/profile alignment, jurisdictions, related past alerts), produces a full investigation report with a narrative, explained decision and recommended next steps, and gives analysts an on-demand assistant; analysts make the final decision.
Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.
TOKIUM finance AI agents (経理AIエージェント TOKIUM: AI expense approval, AI travel arrangement and AI invoice matching)
TOKIUM (株式会社TOKIUM / TOKIUM Inc.)
Japan
Japanese expense and invoice-management vendor that sells finance work as AI agents backed by its own staff. Its AI expense-approval agent checks every claim against company rules, performs the first-level approval itself and sends faulty claims back to the applicant with the reason. A travel agent turns a chat message into a submitted pre-approval request plus transport and hotel bookings.
APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation.
Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation.
trail Governance Agents (GRC and AI governance agents)
trail (trail GmbH, part of Collibra since Oct 2026)
Germany
Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written.
Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do.
Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant.
Trintech AI agents (Variance Analysis, Flux, Exception Management, Accruals Intelligence and Data Access agents)
Trintech (Trintech, Inc.)
United States
Financial-close platform (Cadency, Adra) with five AI agents that investigate variances and account fluctuations, triage and root-cause reconciliation exceptions, generate and roll forward accruals, and build governed data pipelines, keeping evidence, approvals and audit trails for reviewers.
Agentic AI inside Trulioo's KYB verification workflow from Vancouver-headquartered Trulioo. When registries run out, the UBO Discovery Agent researches filings, disclosures, legal and public records, OSINT and verified third-party databases, reaches registries without API connectivity in real time, reconstructs the beneficial-ownership chain with jurisdiction-specific control logic, cites every finding and reports gaps instead of guessing.
Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring.
AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires.
Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration.
Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs.
AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval.
Upflow AI agents (Collections, Cash App and AP Portal agents for B2B accounts receivable)
Upflow (Upflow SAS)
France
Paris-founded B2B accounts-receivable platform whose AI agents run collections outreach and follow-ups (with autonomy controls up to fully autonomous), match payments to open invoices and write reconciled payments back to the ERP, and submit invoices to buyer AP portals.
UpFlux Agente Negociador (autonomous tail-spend negotiation and purchasing agent inside TOTVS Protheus, Datasul and SAP)
UpFlux (Smart Process S.A.)
Brazil
Procurement agent from Brazil's UpFlux that works inside the customer's ERP (TOTVS Protheus, Datasul or SAP). It reads 12 months of purchase history, finds the best price the company has already paid for each item, and on each new requisition requests quotes, makes counter-offers, routes to the right supplier and writes the purchase order itself when the deal is within the buyer-set approval limits. Buyers approve only the exceptions.
Cyber risk and third-party risk management platform with published CRPM pricing page.
Uptiq compliance and risk agents (sanctions screening, BSA/AML and regulatory reporting agents for banks)
Uptiq (UPTIQ, Inc.)
United States
Agents for bank and credit-union compliance teams on Uptiq's Qore platform. A Sanctions Screening Agent screens every transaction and party and prioritises alerts by risk, a BSA/AML Agent assembles case files and drafts SAR and CTR narratives for disposition, and a Regulatory Reporting Agent prepares and validates filings and tracks regulatory changes to policy; agents run under the institution's own policies, permissions and approval gates, with every action logged.
Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy.
Brazilian risk and compliance decisioning platform whose AI agents read the full KYC/KYB dossier, compare it with current regulation, flag risks such as adverse-media homonyms, and suggest a justified decision with a confidence level for the analyst to validate, with continuous re-analysis when a monitored person or company changes.
Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.
Veeam PrivacyOps AI agents (Consent Agent, DSR and Assessment agents)
Veeam Software (Securiti AI, a Veeam company)
United States
Privacy-operations agents on Veeam's DataAI Command Platform: a generally available Consent Agent that builds, tests, monitors and auto-remediates consent across sites and downstream systems, plus announced DSR intake-form and assessment-autofill agents.
Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows.
Vertice Ana (Autonomous Negotiation Agent for software purchases)
Vertice (Vertice Group Ltd)
United Kingdom
AI negotiation agent, launched Sep 8, 2026, that runs software purchase and renewal negotiations with vendors on the customer's behalf. It builds scenario-specific strategies, drafts every exchange in the customer's voice and tracks vendor responses, either autonomously end to end or as a copilot that waits for review of each round, and it enforces customer policies such as data-protection evidence.
Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.
VISO TRUST AI Agent (agentic third-party risk management)
VISO TRUST (a Protecht company; Valente Sherman, Inc.)
United States
TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team.
Vivox AI compliance agents (Rachel, AI compliance analyst)
Vivox AI (Digital Intelligent Solutions Ltd)
United Kingdom
Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing.
Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)
Vulcan Technologies (Vulcan Technologies, Inc.)
United States
AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary.
Agentic pentesting agent for internal security teams and MSSPs. Sable plans and executes authorised tests against web applications, APIs, internal networks and Active Directory, runs real tools, proves impact with reproducible evidence and exploit traces, and supports targeted retests after remediation; teams steer it in plain language and can approve every command or let it run fully autonomously.
WealthAi KYC & onboarding agents (client data collection, ID verification, PEP/sanctions and KYC checks for wealth managers)
WealthAi (WealthAi Technology Limited)
United Kingdom
AI agents inside the WealthAi operating system for wealth managers that run client onboarding and KYC end-to-end: they collect client information and documents, spot what is missing, generate forms, and start identity verification, PEP and sanctions screening, KYC and account checks, bringing in a person only where review or approval is needed.
Australian AI SOC agent that enriches, investigates and recommends escalate/close actions on alerts, proposing containment for human approval.
Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Wolfia Questionnaire Agent (security questionnaires and trust center)
Wolfia (Wolfia Inc.)
United States
Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension.
AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning.
Workato's agent layer on its integration and automation platform: Agent Studio builds AI agents ('genies') that understand context and execute skills built from Workato workflows and recipes, with prebuilt genies for IT, sales, HR, support and other functions.
Generally available Workday Contract Lifecycle Management (ex-Evisort) agent. It reviews whole pre-signature agreements against the company playbook, flags risk and missing terms and drafts pinpoint redlines with a rationale for each; users apply the redlines. The Contract Workflow Agent is Early Access and is not covered by this listing.
Workday Financial Audit Agent (part of Workday Accounting Agent)
Workday (Workday, Inc.)
United States
Generally available Workday Financials agent for audit readiness. It finds the supporting evidence for transactions (invoices, supplier contracts, receipts, POs, journals, bank reconciliations) across the Workday tenant, compiles auditor-ready evidence packages and flags high-priority risks such as duplicate invoices.
Named AI agents that act as L1/L2 AML analysts: they review and disposition sanctions, PEP and watchlist alerts, transaction screening and monitoring alerts, adverse media, EDD and KYC work, escalating or closing cases with justification.
No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps.
Xelix AP control centre (agentic AP: statements, transactions and helpdesk agents)
Xelix (GSPV Ltd)
United Kingdom
UK accounts-payable control software that bolts onto ERPs and uses 20+ autonomous AI agents to catch duplicate payments, overpayments and invoice fraud before the pay-run, reconcile supplier statements and answer vendor queries.
Xpert-iA Agent Onboarding clients / LCB-FT (AML onboarding agent for French accounting firms)
Xpert-iA (Xpert-IA SAS)
France
French AI agent for accounting firms' anti-money-laundering (LCB-FT) client onboarding: from a SIREN it pulls the company and directors from the national business register, sends the client a secure portal link and chases missing documents, checks beneficial owners against the RBE register, asset-freeze lists, FATF/EU country risk and document consistency, screens for PEPs, and assembles a traced due-diligence file for the firm to decide.
Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform.
On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform.
Zalion KI-Agenten für den Einkauf (Intake, Sourcing, Negotiation and Order-confirmation check agents)
Zalion (Zalion GmbH)
Germany
Munich-headquartered modular AI-agent platform for direct and indirect procurement in manufacturing: a sourcing agent drafts and sends RFQs, chases suppliers and lines up quotes; a negotiation agent benchmarks each offer and drafts the negotiation email for approval; an order-check agent matches order confirmations against POs, writes correct ones back to the ERP and clears deviations with suppliers.
Featured
Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.
Zefort Agent (agentic CLM assistant for contract review, redlining and follow-up; beta)
Zefort (Zefort Oy)
Finland
Agent built into the Zefort contract-management platform that takes assigned contract work (reviewing and redlining agreements, comparing contract sets, finding risks or missing information) and turns findings into suggested updates to metadata, parties, binders, tasks and reminders that a person approves before they are applied.
Ten specialised AML investigation agents that screen, research, analyse and validate each onboarding or transaction alert, write a cited case narrative and hand the decision to a human analyst; a Red Team Agent challenges every finding.
AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language.
Procurement-embedded third-party risk agents that screen and score vendors, fast-track low-risk ones, route high-risk ones for deeper review, analyse surveys and documents for key risks, and schedule re-assessments by risk tier.
Zoho Zia Agents (Agent Studio, Agent Store prebuilt agents and Agent Marketplace)
Zoho Corporation
India
Zoho's agentic AI platform: 100+ prebuilt Zia Agents in the Agent Store for sales, support, HR and operations across Zoho apps, plus a no-/low-code Agent Studio to build custom agents with tools, knowledge bases, guardrails and multi-agent setups.
Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide.
Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment)
Zscaler (Zscaler, Inc.)
United States
AI-first security operations product launched September 2026. Specialized autonomous AI agents triage alerts, investigate root cause, assign evidence-backed verdicts and trigger response workflows, and Zscaler's inline Zero Trust controls can automatically isolate users, block command-and-control traffic and cut off lateral movement.
No agents match these filters. Clear filters
“Recently added” and “Added in the last 30 days” use the added date recorded in the dataset (from the changelog). Agents without a recorded added date are the earlier seed listings and are omitted from the 30-day toggle. “India / DPDP relevant” is India headquarters, a DPDP tag, or a non-empty india_relevance note. “Government authorization” is listing-scope FedRAMP, GovRAMP or TX-RAMP (not CMMC). A fw query can require several framework tags at once (AND), as used by Get matched. The integrations filter uses vendor-listed names from a subset of listings (18 so far); blank means unknown, not “no”.