Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
Best TX-RAMP compliance AI agents
Quick answer
24 verified listings are on this best-of page for TX-RAMP in dataset v0.1.27 (generated 2026-10-27).
Order is mechanical (compliance-category first, then by number of framework tags), not a paid ranking or quality judgement.
Tags mean relevance for TX-RAMP, not certification.
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Official hub with sources and tag rules: TX-RAMP framework hub. Tag only when Texas DIR's TX-RAMP Certified Cloud Products list (updated 13 Oct 2026) shows the listed product (or the documented government boundary) at Level 1 or Level 2. Provisional and platform-only entries are shown on the hub but not tagged. DIR notes publishing issues: products missing from the list may not have lost certification, so this hub never says a vendor is not TX-RAMP certified.
Key facts (official sources)
Last checked 2026-10-18.
- Run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies. Source
- Applies to state agencies, institutions of higher education and public community colleges (Texas Government Code 2054.003(13)); only cloud computing services as defined in Texas Government Code 2054.0593(a) are in scope. Source
- Level 1: public/non-confidential information or low-impact systems (Level 1 assessment, or evidence of StateRAMP Category 1 / FedRAMP Low). Level 2: confidential/regulated data in moderate or high impact systems (Level 2 assessment, or StateRAMP Category 2 / FedRAMP Moderate). Source
- Provisional status lets an agency contract for a product for up to 18 months without full certification; the product must be certified within that period. Source
- The certified-products spreadsheet was last updated 13 Oct 2026. DIR notes publishing issues: products missing from the list may not have lost certification (verify with [email protected]). Source
Listed: agents tagged TX-RAMP in our dataset, compliance-category first, then by number of framework tags. Tags mean relevance, not certification; check each vendor's claims. Order is mechanical, not a paid ranking.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace)
Archer (Archer Technologies LLC)
United States
Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified.
Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)
Vulcan Technologies (Vulcan Technologies, Inc.)
United States
AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Cyber risk and third-party risk management platform with published CRPM pricing page.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate.
Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes).
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
CLEAR Investigate (agentic AI investigations for government, risk and fraud teams)
Thomson Reuters
Canada
Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators.
AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation.
Vendor platform certified; agent scope not stated by the vendor
These TX-RAMP registry records are not tagged on the listing (platform-only or a status that is not Authorized / Level 1 / Level 2). Full sources are on the TX-RAMP hub.
- Appian Agent Studio (AI agents) — Appian Cloud: Level 2 (TX985366) · vendor platform; agent scope not stated
- Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) — Managed Detection and Response/Managed Risk: Level 2 (TX1151665) · vendor platform; agent scope not stated
- Barracuda Integrated Email Protection agentic threat investigation and clawback (BarracudaONE) — Impersonation Protection / Incident Response: Provisional (TX1332609) · vendor platform; agent scope not stated
- Black Duck Signal (agentic AI AppSec) — Black Duck Polaris: Level 2 (TX1910179) · vendor platform; agent scope not stated
- Black Kite AI Agent — Black Kite: Level 1 (TX1464698) · vendor platform; agent scope not stated
- Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) — Box Enterprise Cloud Content Collaboration Platform: Level 2 (TX985384) · vendor platform; agent scope not stated
- Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) — Check Point Harmony: Level 2 (TX1598637) · vendor platform; agent scope not stated
- Claude Code security review — Claude (Claude for Enterprise): Level 2 (TX1880972) · vendor platform; agent scope not stated
- CrowdStrike Charlotte AI — Falcon Platform: Level 2 (TX985428) · vendor platform; agent scope not stated
- Darktrace Cyber AI Analyst — Active AI Security Platform: Provisional (provisional expiry 2027-05-08) (TX1896215) · vendor platform; agent scope not stated
- Datadog Bits AI Security Analyst — Datadog for Government: Level 2 (TX985429) · vendor platform; agent scope not stated
- DataSnipper Alwin — DataSnipper: Level 2 (TX1839020) · vendor platform; agent scope not stated
- Docusign Iris agents and Agent Studio (Intelligent Agreement Management) — DocuSign Cloud: Level 2 (TX999107) · vendor platform; agent scope not stated
- Fieldguide Field Agents — Fieldguide: Level 2 (TX1906508) · vendor platform; agent scope not stated
- Freshservice Freddy AI Agent and Freddy AI Agent Studio (IT and HR service agents) — FreshService: Level 2 (TX1114772) · vendor platform; agent scope not stated
- GitHub Copilot Autofix — GitHub Enterprise Cloud: Level 2 (TX988014) · vendor platform; agent scope not stated
- GitLab Duo Vulnerability Resolution — GitLab Dedicated for Government: Level 2 (TX1549412) · vendor platform; agent scope not stated
- Harvey Agents — Harvey.ai: Level 2 (TX1988168) · vendor platform; agent scope not stated
- Icertis Vera agents (Redline, Risk Review, Playbook Creation, Composer, Fulfillment and Insights agents) — Icertis Contract Intelligence (ICI) for Government: Level 2 (TX1045023) · vendor platform; agent scope not stated
- LEGALFLY agents (Review, Legal Radar and Agent Studio) — LEGALFLY: Level 2 (TX1845403) · vendor platform; agent scope not stated
- ManageEngine ServiceDesk Plus Zia Agents (L1 service desk, Entra ID user manager, PIR and KB agents, Agent Studio) — ServiceDesk Plus Cloud: Level 1 (TX1539241) · vendor platform; agent scope not stated
- SAFE TPRM AI Co-Worker — SAFE: Level 2 (TX1741314) · vendor platform; agent scope not stated
- SecurityScorecard — SecurityScorecard Security Ratings: Provisional (TX1535552) · vendor platform; agent scope not stated
- ServiceNow Now Assist — ServiceNow Government Community Cloud: Level 2 (TX985554) · vendor platform; agent scope not stated
- Snyk — Snyk Container: Level 1 (TX1510094) · vendor platform; agent scope not stated
- Sophos MDR AI Agents (Triage and Case Investigation) — Sophos Cloud: Level 2 (TX1138700) · vendor platform; agent scope not stated
- Spellbook Associate and Autonomous Contract Management (ACM) — Spellbook: Level 2 (TX1820375) · vendor platform; agent scope not stated
- Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) — Sublime Security Platform: Level 2 (TX1903681) · vendor platform; agent scope not stated
- Synack Sara AI Pentesting — On-Demand Security Testing Platform: Level 2 (TX1009325) · vendor platform; agent scope not stated
- TrendAI Vision One Agentic SIEM and Companion — Trend Micro Vision One for Government: Level 2 (TX1443251) · vendor platform; agent scope not stated
- TrustCloud TrustLens (agentic third-party risk assessments) — TrustCloud Platform: Level 1 (TX1583514) · vendor platform; agent scope not stated
- UiPath Autopilot / agents — Automation Cloud Public Sector: Level 2 (TX1082286) · vendor platform; agent scope not stated
- Veracode Fix — Veracode Online Security Platform for Government: Level 2 (TX1009331) · vendor platform; agent scope not stated
- Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov) — VulcanGov (Justinian for Government): Provisional (provisional expiry 2027-10-01) (TX1988256) · listing
- Whistic Automation Orchestrator (agentic assessments) — Whistic - Assess: Level 1 (TX1435648) · vendor platform; agent scope not stated
- Workiva Agent Studio (finance, audit and GRC agents) — Workiva Platform: Level 2 (TX985589) · vendor platform; agent scope not stated
Use-case comparisons
- AI SOC and security-analyst agents — 51 listings
- Email security and phishing-response AI agents — 16 listings
- TPRM and vendor-risk AI agents — 40 listings
- Privacy operations AI agents — 15 listings
- US public-sector and FedRAMP AI agents — 25 listings
- Cloud security (CNAPP) AI agents — 9 listings
- AI governance agents and platforms — 11 listings
Popular comparisons
- Wiz vs Orca Security
- Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs Credo AI
- Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs Optro (formerly AuditBoard)
- Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs RegScale RegML AI agents (RegScale CCM)
- Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs Secureframe
- Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) vs Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)
- Credo AI vs Optro (formerly AuditBoard)
- Credo AI vs RegScale RegML AI agents (RegScale CCM)
- Credo AI vs Secureframe
- Credo AI vs Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov)
- Optro (formerly AuditBoard) vs RegScale RegML AI agents (RegScale CCM)
- Optro (formerly AuditBoard) vs Secureframe