A
Gives AI agents their own identity and policy-governed access to MCP servers and enterprise systems, exchanging credentials on the agent's behalf so agents never hold secrets.
AI agent governance and security platforms
An AI agent governance platform inventories the agents an organisation runs, gives each agent an identity and permissions, can enforce policy before an action runs, and keeps audit evidence of what happened. This page lists those platforms from vendors' own pages — agent identity, runtime and MCP security, policy and audit. It is a separate catalog from GRC agents in the main directory, which help a company run a compliance programme such as SOC 2 or ISO 27001.
GRC AI-governance listings (inventory, policy and ISO 42001 modules) are compared on the AI governance agents table. Identity-governance and access-review agents for human users are compared on the identity governance table.
19 listings · separate open dataset · agent-security.json · How we verify
Agent identity 14 listed Agent governance 11 listed Agent runtime security 9 listed Agent secrets 3 listed
Agent identity
Who an AI agent is: authentication, authorization, and workload identity for agents and their tools.
A
Checks, authorises and traces every action an AI agent takes before it reaches company systems, weighing the agent's identity, intent and context, and keeps an audit trail.
A
Developer identity layer for AI agents: user login, on-behalf-of API access, a Token Vault that holds third-party tokens for agents, and asynchronous human approval for sensitive actions.
D
Identity provider for AI agents and MCP servers: OAuth-based auth, consent, scoped short-lived agent credentials, access policies and a directory to monitor and revoke agents.
I
Access-control service that lets people delegate a scoped, time-limited slice of their own access to an AI agent, revoked automatically when the task ends, with every decision on record.
I
Finds AI agents across SaaS, cloud and developer environments and brokers their identities so each agent gets only task-scoped, time-limited privilege, with logs of what it did and for whom.
M
Gives AI agents first-class identities in Microsoft Entra so they can be authenticated, authorized, governed and audited like users and workloads, including agents built outside Microsoft.
N
Discovers and controls AI agents across SaaS, endpoints and cloud, weighing each agent action against context at runtime and able to block, steer, mask data or kill-switch an agent.
P
Lets a website ask an AI agent to prove whose verified legal identity it acts for and what that person cryptographically approved, via the open x401 protocol and an agent identity wallet.
S
Enterprise AI identity security platform that discovers every AI agent, MCP server and non-human identity, assigns owners, governs their access and blocks anomalous agent actions.
AI agent verification for businesses that receive requests from AI agents: it checks which agent is acting, confirms that a real, verified person authorised it, and enforces that person's mandate before the agent can access data or trigger a transaction.
S
Discovers AI agents across identity providers, cloud and SaaS, enforces least-privilege access at runtime and ties each agent action to a responsible human.
U
Discovers AI agents across cloud and SaaS, governs them as identities alongside humans and machine identities, traces their access paths and offers a kill switch for rogue agents.
W
OAuth 2.1 authorization server for MCP servers, so AI agents get scoped, permissioned access to an app without custom auth code.
Agent governance
Policies, approvals, and audit trails for what AI agents may do and who reviews them.
A
Checks, authorises and traces every action an AI agent takes before it reaches company systems, weighing the agent's identity, intent and context, and keeps an audit trail.
D
Identity provider for AI agents and MCP servers: OAuth-based auth, consent, scoped short-lived agent credentials, access policies and a directory to monitor and revoke agents.
I
Access-control service that lets people delegate a scoped, time-limited slice of their own access to an AI agent, revoked automatically when the task ends, with every decision on record.
I
Finds AI agents across SaaS, cloud and developer environments and brokers their identities so each agent gets only task-scoped, time-limited privilege, with logs of what it did and for whom.
K
Registers, observes, governs and contains AI agents across Microsoft, AWS, Google, Salesforce, ServiceNow and private runtimes, with a policy gateway, short-lived credentials and a kill switch.
M
Gives AI agents first-class identities in Microsoft Entra so they can be authenticated, authorized, governed and audited like users and workloads, including agents built outside Microsoft.
N
Discovers and controls AI agents across SaaS, endpoints and cloud, weighing each agent action against context at runtime and able to block, steer, mask data or kill-switch an agent.
O
Inventories AI agents, traces their prompts, tool calls and memory access, and blocks out-of-scope or exfiltrating agent actions inline, with an MCP gateway for the MCP stack.
P
AI security platform that discovers, red-teams, protects and governs AI apps, agents and models, with runtime defences against prompt injection, memory manipulation and tool misuse.
S
Enterprise AI identity security platform that discovers every AI agent, MCP server and non-human identity, assigns owners, governs their access and blocks anomalous agent actions.
AI agent verification for businesses that receive requests from AI agents: it checks which agent is acting, confirms that a real, verified person authorised it, and enforces that person's mandate before the agent can access data or trigger a transaction.
Agent runtime security
Runtime controls, isolation, and monitoring while an AI agent is running.
A
Checks, authorises and traces every action an AI agent takes before it reaches company systems, weighing the agent's identity, intent and context, and keeps an audit trail.
H
Runtime protection for AI agents and MCP interactions that blocks hidden prompt injection, unsafe memory recall and unsafe tool actions and reconstructs agent activity for investigation.
K
Registers, observes, governs and contains AI agents across Microsoft, AWS, Google, Salesforce, ServiceNow and private runtimes, with a policy gateway, short-lived credentials and a kill switch.
N
Discovers and controls AI agents across SaaS, endpoints and cloud, weighing each agent action against context at runtime and able to block, steer, mask data or kill-switch an agent.
O
Inventories AI agents, traces their prompts, tool calls and memory access, and blocks out-of-scope or exfiltrating agent actions inline, with an MCP gateway for the MCP stack.
P
AI security platform that discovers, red-teams, protects and governs AI apps, agents and models, with runtime defences against prompt injection, memory manipulation and tool misuse.
S
Discovers AI agents across identity providers, cloud and SaaS, enforces least-privilege access at runtime and ties each agent action to a responsible human.
S
Runtime security for AI agents that inspects prompts, reasoning steps and tool calls to block prompt injection, data exfiltration, agent manipulation and malicious MCP connections.
U
Discovers AI agents across cloud and SaaS, governs them as identities alongside humans and machine identities, traces their access paths and offers a kill switch for rogue agents.
Agent secrets
Secrets, credentials, and access material used by AI agents and their tool calls.
A
Gives AI agents their own identity and policy-governed access to MCP servers and enterprise systems, exchanging credentials on the agent's behalf so agents never hold secrets.
A
Developer identity layer for AI agents: user login, on-behalf-of API access, a Token Vault that holds third-party tokens for agents, and asynchronous human approval for sensitive actions.
I
Finds AI agents across SaaS, cloud and developer environments and brokers their identities so each agent gets only task-scoped, time-limited privilege, with logs of what it did and for whom.
FAQ
What is an AI agent governance platform?
A product that inventories the AI agents an organisation runs, gives those agents an identity and permissions, can enforce policy before an action runs, and keeps audit evidence of what happened. This catalog is separate from GRC agents in the main directory.
Which listed tools give AI agents their own identity?
From listing fields (agent-identity category, agent-authentication tasks, or vendor text that says the product gives agents their own identity): Aembit IAM for Agentic AI, Aggate AI agent governance platform, Auth0 for AI Agents (AI identity, Token Vault), Descope Agentic Identity Hub, IDENTOS PolicyArc, Idira Secure AI Agents (agentic identity security), Microsoft Entra Agent ID, Noma Agent Security and Governance Platform, Proof x401 and agent identity wallet, Saviynt Zuma (AI identity security), Shufti Know Your Agent (KYA), Silverfort AI Agent Security, Unosecur AI Agent Security and Freeze Agent, WorkOS AuthKit for MCP.
Which listed tools enforce policy at runtime or secure MCP?
From listing fields (agent-runtime-security category, runtime-monitoring or inline-blocking tasks, or MCP task tags): Aembit IAM for Agentic AI, Aggate AI agent governance platform, Descope Agentic Identity Hub, HiddenLayer Agentic and MCP Security, Kosmoy AI Agent Management, Noma Agent Security and Governance Platform, Operant Agent Protector and MCP Gateway, Prisma AIRS (AI runtime security), Silverfort AI Agent Security, Straiker Defend AI, Unosecur AI Agent Security and Freeze Agent, WorkOS AuthKit for MCP.
Is this a ranking?
No. Listings are grouped by vendor-published category fields. This is not a ranking or score.