Agent Index by Heritage Services
Submit / Claim
Home / Agents / Corma AI agents (browser-based identity lifecycle, provisioning and access automation)

Corma AI agents (browser-based identity lifecycle, provisioning and access automation)

Vendor: Corma (Corma SAS) · HQ: France · Category: Security

Last verified · Added · 5 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Corma SAS sells an IAM/SAM platform with Limitless AI Automation: a documented Agent Builder and clicker agent that creates AI-driven actions for applications with or without APIs and plugs them into IT workflows. Per the vendor's AI Agent Automation page, the browser-based agent runs in a dedicated Chrome environment, reads the HTML structure and UI state, decides the next step, and performs actions such as offboarding users and zero-touch provisioning across joiner-mover-leaver workflows when SSO/SAML/API paths are unavailable. The platform also covers discovery of software and AI usage, shadow AI/NHI detection, RBAC/IGA policy enforcement, access reviews and SaaS spend. Pricing is published via the site's pricing page (tiers; confirm live amounts at quote time).

Frameworks (vendor-stated)

No framework tags yet.

Vendor-claimed ISO 27001, SOC 2

Pricing (as published)

Published on corma.io/pricing: Freemium (free tier); Essential from €3/user/month; Pro (demo); Enterprise custom from 1,000 users.

Tasks

identity governanceaccess reviewsworkflow automationagentic ops

Sources

  1. corma.io/platform/ai-agent-automation (primary)
  2. corma.io/
  3. corma.io/company/legal
  4. corma.io/pricing
  5. recherche-entreprises.api.gouv.fr/search?q=CORMA%2090%20MOZART

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

Published country pages in this directory. Choose any region; this listing has no mapped HQ country page.

United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare Corma AI agents (browser-based identity lifecycle, provisioning and access automation) with

Alternatives

  • 7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
  • Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
  • Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
  • Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
  • AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
  • Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Corma AI agents alternatives →

FAQ (from this dataset)

What does Corma AI agents do?

French identity and SaaS-management product whose custom AI agents automate joiner-mover-leaver provisioning, offboarding and other identity actions in web apps even when no API, SCIM or SAML is available, using a browser-based agent that interprets the admin UI and executes the workflow steps.

How much does Corma AI agents cost?

Published on corma.io/pricing: Freemium (free tier); Essential from €3/user/month; Pro (demo); Enterprise custom from 1,000 users.

Where is Corma (Corma SAS) headquartered?

France

What are alternatives to Corma AI agents?

See the Corma AI agents alternatives page for category-sharing listings in relevance order, not a ranking. Corma AI agents alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.