Agent Index
Submit / Claim
Home / Agents / Security and governance / Shufti Know Your Agent (KYA)

Shufti Know Your Agent (KYA)

Vendor: Shufti (Shufti Pro Limited) · HQ: United Kingdom · Category: Agent identity · Agent governance

Last verified · Added · 3 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

This listing is in the AI agent security and governance category — tools that secure or govern other AI agents. It is not counted with the GRC agents in the main directory.

What it does

Per Shufti's Oct 28, 2026 launch release and its AI agent verification page, KYA combines agent recognition, trust scoring, spoof-resistant identity verification and permission checks in one flow. A principal sets a mandate for each agent (permitted actions, limits, expiry, revocation) that is enforced as a policy on every request; requests outside the mandate or above a risk threshold trigger human-in-the-loop control with a selfie liveness check by the authorising person, and agent actions stay traceable. Shufti positions it for agentic commerce and other AI agent workflows (e.g. blocking agents from placing bets in iGaming) and says KYA is now available.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Not published

Tasks

agent authenticationagent authorizationhuman authorizationaudit logging

Sources

  1. shuftipro.com/press-release/shufti-launches-know-your-agent-to-verify-ai-agents/ (primary)
  2. shuftipro.com/ai-agent-verification/
  3. shuftipro.com/contact-us/

Framework tags indicate relevance, not certification. Spotted an error? Submit a correction. See our methodology.

Not legal or security advice. Confirm current facts with the vendor.

FAQ

What is Shufti Know Your Agent (KYA)?

AI agent verification for businesses that receive requests from AI agents: it checks which agent is acting, confirms that a real, verified person authorised it, and enforces that person's mandate before the agent can access data or trigger a transaction.

Is this a GRC agent?

No. This listing is in the separate agent security and governance category: tools that secure, govern, identify or audit AI agents, not tools that run a company’s SOC 2 or ISO 27001 programme.

Stay updated

We use your email only to send the newsletter. See our privacy policy.