Open dataset
410 agent records with source URLs and last-checked dates, plus 516 Verified · 11 registry-listed compliance audit firms. Licence: CC-BY-4.0. Free to download with no sign-up.
Download agents.json Download auditors.json
The JSON files, /llms.txt, /api/search and /api/mcp are openly accessible. No email is required.
Official Open Dataset Mirrors & DOI Citation
- Zenodo (Permanent DOI): https://doi.org/10.5281/zenodo.23604511 · zenodo.org/records/23604511
- Hugging Face Datasets: theagentindex/agent-index-grc-ai-agents-and-auditors
- Kaggle Datasets: theagentindex/agent-index-grc-ai-agents-and-verified-auditors
Cite as: Agent Index (https://theagentindex.io) — DOI: 10.5281/zenodo.23604511. Concept DOI: 10.5281/zenodo.23604510.
Public Search API (/api/search) & Model Context Protocol (MCP) Server (/api/mcp)
Read-only, CORS-open endpoints over the same static datasets. No API key. Licence CC BY 4.0 — please cite the DOI.
Search API
Query parameters: q, type (all | agents | auditors), category, framework, country / region, accreditation, limit (default 20, max 100).
curl "https://theagentindex.io/api/search?q=soc+2&type=all" curl "https://theagentindex.io/api/search?type=auditors&framework=ISO+27001&accreditation=ANAB&limit=10" MCP server (Cursor / Claude Desktop)
Streamable HTTP JSON-RPC 2.0 at https://theagentindex.io/api/mcp. Tools: search_agents, get_agent, search_auditors, get_auditor, compare_agents. GET /api/mcp returns a discovery document.
Cursor mcp.json
{
"mcpServers": {
"agent-index": {
"url": "https://theagentindex.io/api/mcp"
}
}
} Claude Desktop mcp.json
{
"mcpServers": {
"agent-index": {
"type": "http",
"url": "https://theagentindex.io/api/mcp"
}
}
} Related: Check an Auditor · Compliance deadlines calendar · Read the State of AI Compliance & Audit report.
How to cite
Agent Index (https://theagentindex.io) — DOI: 10.5281/zenodo.23604511. Agents v0.1.27, auditors v0.1.32.
Auditor listings (separate file): auditors.json — 516 Verified · 11 registry-listed compliance audit firms (listing_tier is Verified or registry-listed). Each record includes a government_body boolean (true for STQC, C-DAC, NSAI and the Standards Institution of Israel). Facts only; not endorsements.
Changelog
- 2026-10-27 — auditors v0.1.32: Added the registry-listed listing tier. 9 FedRAMP Marketplace assessors and 2 ISMAP audit institutions imported as registry-listed. GovRAMP tagged on matching existing firms. Official ISMAP list count 8 (fetch date 2026-10-27). 516 Verified · 11 registry-listed firms. No ranking, scores or prices.
- 2026-10-27 — agents v0.1.27 + auditors v0.1.31: Added RegASK AI agents (Singapore) and two US FedRAMP 3PAOs (SecureIT, SteelToad). 410 agents; 516 firms (176 United States). SUB4 listing alerts on framework hubs, region hubs and auditor guides. Curated alternatives for Arctic Wolf Aurora and ServiceNow Now Assist. ISMAP audit-institutions guide. No ranking, scores or prices.
- 2026-10-26 — auditors v0.1.30: EisnerAmper LLP removed after SEC settled order 34-104936 (6 Mar 2026: censure and cease-and-desist). The directory excludes firms with recent regulator sanctions. 301 from
/auditors/eisneramper/to/auditors/hitrust/in/us/. 514 verified firms. No ranking, scores or prices. - 2026-10-25 — agents v0.1.25 + auditors v0.1.28: Added FOCAL by MOZN Agentic AI (Riyadh, Saudi Arabia) and two US audit firms (PwC US, Wipfli). Trustero gained a TPRM sentence and vendor-risk task. Free audit-firm claim flow, FedRAMP 3PAO and CMMC C3PAO guides, curated alternatives for Dropzone, Abnormal and Hawk. Subscriber gate now covers extensionless
/downloads/files and guide PDFs. No ranking, scores or prices. - 2026-10-25 — open data:
agents.json,auditors.json,/api/searchand/api/mcpare openly accessible (CC BY 4.0) with no email sign-up. Survival-kit templates and the deadlines calendar stay subscriber-gated. - 2026-10-24 — auditors v0.1.27 + report: Auditors batch 11 — 527 verified firms (10 US added; Bytes Software Services removed; Forvis Mazars SOC 1/SOC 2 and CPAverify dropped). State of AI Compliance & Audit (Q4 2026) and ISO 27001 certification bodies. No ranking, scores or prices.
- 2026-10-23 — growth tools: Free Check an Auditor lookup (/tools/check-auditor/), GRC deadlines calendar + .ics, public /api/search and read-only MCP server at /api/mcp, plus Zenodo / Hugging Face / Kaggle mirrors. No ranking or scores.
- 2026-10-23 — auditors v0.1.26: Auditors batch 10 — 503 verified firms (1 added: NSF-ISR). AARC-360 CPAverify link now searches the Georgia firm name. Location pages still only at 3+ firms. New ISO 27001 × Michigan page. No ranking, scores or prices.
- 2026-10-22 — auditors v0.1.25: Auditors batch 9 — 502 verified firms (19 added). Deloitte US gained ISO 27001 and Palindrome Technologies gained ISO 42001 after ANAB directory re-checks. Elliott Davis PCI DSS was not added because the live PCI SSC QSA list did not confirm. Location pages still only at 3+ firms. No ranking, scores or prices.
- 2026-10-22 — auditors v0.1.24: Auditors batch 8 — 483 verified firms (14 added; SGS Gulf dropped because ISO 22301 is not a published framework tag). Location pages still only at 3+ firms. No ranking, scores or prices.
- 2026-10-22 — get-matched wizard: Fixed a
lists.jssyntax error that stopped the 3-step finder on every browser, plus mobile overflow and a dead Continue button. Fallback copy no longer mentions JavaScript. - 2026-10-22 — match requests: “Send my request to up to 3 matches” form on agent pages, auditor firm pages, the auditors hub, Get matched and the shortlist. Stored in D1 only (type
match-request). No emails, no forwarding, no ranking. - 2026-10-21 — auditors v0.1.23: Auditors batch 7 — 469 verified firms (38 added; WithumSmith+Brown dropped after a 2024 PCAOB firm-level censure). ISMAP is a published auditor framework. Puerto Rico offices use US state
PR. Location pages still only at 3+ firms. No ranking, scores or prices. - 2026-10-21 — v0.1.23: Added 8 verified listings. Parent-company HQ label (optional
hq_basis). Listing updates (GitHub agentic autofix GA, BigID AgentIQ, LogicGate agents pricing model, Drata TPRM pricing model). Audit-prep templates, after-audit guides, demo requests, listing alerts, next-step blocks. German auditor-location slug 301s on the main-domain proxy. No ranking or scores. - 2026-10-21 — auditors v0.1.22: Auditors batch 6 — 431 verified firms (49 added; Viscount Quality Certifications dropped because ISO 22301 is not a published framework tag). New HQ countries Japan, Israel, Brazil, Saudi Arabia and Mexico. German location slugs now transliterate umlauts (ü→ue). Location pages still only at 3+ firms. No ranking, scores or prices.
- 2026-10-21 — auditors v0.1.21: Auditors batch 5 — 382 verified firms (79 added; usd AG and JHS & Associates dropped after live re-checks). New HQ countries Germany and the Netherlands.
government_bodyon every record (true for STQC and C-DAC) with an include/exclude filter. Location pages still only at 3+ firms. No ranking, scores or prices. - 2026-10-21 — auditors v0.1.20: Auditors batch 4 — 303 verified firms (60 added; LMS Certifications dropped after SCC/EIAC re-check). First batch beyond US/UK/India (Australia, Canada, Singapore, Ireland, UAE). Location pages still only at 3+ firms. No ranking, scores or prices.
- 2026-10-21 — v0.1.22: Added 12 verified listings (run 17). Expanded AML, KYC, AI SOC, code-security, contract-review, pentesting, TPRM, identity-governance, AP/finance and procurement tables. One staged entry dropped (Sash AI: “Headquarters: Bangalore” only on the terms page; no HQ/RO sentence or vendor-published registry id). No new use-case table. No ranking or scores.
- 2026-10-20 — auditors v0.1.19: Auditors batch 3 — 243 verified firms (117 added; Secure IT and SteelToad dropped after live FedRAMP/CyberAB re-checks). India PCI QSA claims re-confirmed. Geels Norton Maine Failed To Renew not cited. No ranking, scores or prices.
- 2026-10-20 — v0.1.21: Added 13 verified listings (run 16). Expanded AI SOC, pentesting, TPRM, identity-governance, AP/finance and procurement tables. Two staged entries dropped (HashGo: About “Based in Bengaluru” / Office only, no registered-office line or vendor-published registry id; AgentAI: About “developed in Istanbul” plus unlabeled footer address, no MERSIS/registered-office statement). No new use-case table. No ranking or scores.
- 2026-10-20 — UX (dataset still 0.1.20): Auditors hub country / state / city filters now cascade, including on native mobile Safari selects. No dataset record changes. No ranking or scores.
- 2026-10-20 — v0.1.20: Listing updates (Snyk Evo, AppZen VAT Reclaim, BILL, Ironclad, Spellbook ACM, LegalOn Agent Builder, OneTrust CORIE, Automation Anywhere–Boost.ai, Harvey, Zip Config Superagent). Framework picker, cost-and-timeline guide, SOC 2 auditor FAQ, integrations filter, auditor matching form. AWS Marketplace URLs added for Drata, Scrut and Sprinto. Still 371 agents. No ranking or scores.
- 2026-10-20 — v0.1.19: Added 20 verified listings (runs 14–15). Expanded AML, KYC, AI SOC, code-security, pentesting, TPRM, AP/finance, questionnaire and procurement tables (Gradient Labs KYB Agent is KYC-only). One staged entry dropped (Calut: HQ only in terms/privacy domicile, Chilean registry not verified). No new use-case table. No ranking or scores.
- 2026-10-20 — v0.1.18: Auditors batch 2 — 126 verified firms (72 added). Live CPA re-check: removed SOC claims from Schellman, LBMC and Wolf & Company. Added NABCB ISO 27001 on ControlCase. BARR Advisory remains off the list (Kansas board-action flag confirmed). No ranking, scores or prices.
- 2026-10-20 — v0.1.17: Added 21 verified listings (runs 12–13). Expanded AML, KYC, AI SOC, email-security, code-security, contract-review, pentesting, TPRM, privacy, AP/finance, questionnaire and procurement tables. Four staged entries were dropped (Scantist, Barrion and Sharelock HQ; Dext AI Assist not an acting agent). No new use-case table. No ranking or scores.
- 2026-10-20 — v0.1.16: New Auditors section (54 verified firms; BARR Advisory and Armanino dropped). Location and framework × location pages only at 3+ firms. No ranking, scores or prices.
- 2026-10-20 — v0.1.15: Renamed listing framework-tag labels to “Frameworks (vendor-stated)”. Recategorised ServiceNow Now Assist as Business operations only (removed Risk, Compliance, and IRM/AI-governance task tags; remains on the ITSM table). No ranking or scores.
- 2026-10-19 — v0.1.14: Added 25 verified listings (runs 10–11). Expanded AML, KYC, AI SOC, code-security, contract-review, AP/finance and procurement tables. Five staged entries were dropped (Avalara and Coupa HQ, Raksa recommend-only, NTP pentest service, Green Cabbage tech-enabled service). No ranking or scores.
- 2026-10-19 — v0.1.13: Listing updates (Shufti AI suite, Sprinto Autonomous Trust Platform, SonarQube Remediation Agent, Lumos Identity Agent Force, Proofpoint–Varonis, Behavox–Apiax), DORA hub, privacy category, Secureframe/Sprinto alternatives, India/APAC AML-KYC table, DPDP/CERT-In key facts and answer-engine key-facts/FAQ blocks. No ranking or scores.
- 2026-10-19 — v0.1.12: Added 33 verified listings and one use-case table (procurement / autonomous sourcing). Expanded AML, KYC, AI SOC, code-security, contract-review, pentesting, TPRM, AP/finance, cloud-security and AI-governance tables. Six staged entries were dropped (glueckkanja and Inspira Security Copilot agents, Pactum and Fairmarkit HQ, Syneqis early access, Uno.ai HQ). No ranking or scores.
- 2026-10-19 — v0.1.11: Added 35 verified listings, a Latin America HQ region, and one use-case table (security questionnaires). Expanded AML, KYC, AI SOC, email-security, code-security, contract-review, pentesting, TPRM, privacy, FedRAMP/public-sector, AP/finance, identity-governance, AI-governance and ITSM tables. Four staged entries were dropped (Diligent TPRI Early Adopter, HighRadius unnamed 200+ agents, Netenrich HQ, BigDataCorp copilot). No ranking or scores.
- 2026-10-19 — UX (dataset still 0.1.9): Compare tray and shortlist, custom /compare/custom/ table from agents.json, Get matched criteria finder, desktop newsletter slide-in, newsletter archive and topic-alert signups. No ranking or scores. No dataset record changes.
- 2026-10-18 — v0.1.10 (UX): Criteria-based “Start here” tiles on the home and category pages, plus a crawlable /market-map/ of every verified listing (logos, category/use-case groups, share/cite snippet, SVG/PNG export). Built on dataset 0.1.9 (237 agents). No ranking or scores.
- 2026-10-18 — v0.1.9: Added 37 verified listings and one use-case table (email security / phishing-response). Expanded AML, KYC, AI SOC, code-security, contract-review, pentesting, TPRM, privacy, FedRAMP/public-sector, AP/finance, enterprise agent platforms and ITSM tables. Check Point and Sublime government rows are platform-only. No ranking or scores.
- 2026-10-18 — UX (dataset still 0.1.8): Directory UX only — logos on alternatives/categories/compare-with, RSS feed, slimmed compare index with per-category pair indexes, sticky compare tables with difference/column controls, agent Quick facts + section menu, richer /agents/ filters. No ranking or scores.
- 2026-10-18 — v0.1.8: Added 40 verified listings and three use-case tables (identity governance; enterprise agent platforms; ITSM/service agents). Expanded AML, KYC, AI SOC, code-security, contract-review, pentesting, TPRM, privacy, FedRAMP/public-sector, AP/finance and cloud-security tables. Ironclad FedRAMP Ready is vendor-claimed only. No ranking or scores.
- 2026-10-18 — v0.1.7: Added optional per-listing government
authorizations, CMMC / GovRAMP / TX-RAMP hubs, two use-case tables (cloud security CNAPP; AI governance), expansions of AML, KYC, AI SOC, TPRM, privacy and FedRAMP tables, and Vanta/Drata alternatives upgrades. Still 160 agents. No ranking or scores. - 2026-10-18 — v0.1.6: Added 38 verified listings and one use-case table (AP / finance automation). Expanded AML, KYC, AI SOC, code-security, contract-review, pentesting, TPRM and FedRAMP/public-sector tables. No ranking or scores.
- 2026-10-18 — v0.1.5: Added 64 verified listings, the FedRAMP framework hub (Marketplace Authorized only), and five use-case tables (contract review, agentic pentesting, TPRM, privacy operations, US public-sector/FedRAMP). Expanded the AML, KYC, AI SOC and code-security tables. No ranking or scores.
- 2026-10-18 — v0.1.4: Added the Code security category, 15 verified code-security listings, the AI code security agents use-case table, and a Copilot Autofix vs Snyk pair page. No ranking or scores.
- 2026-10-18 — v0.1.3: Added
group_comparisons(AML, KYC/identity, AI SOC) and extra columns / featured pairs for the 10 non-US listings. No ranking or scores. - 2026-10-18 — v0.1.2: Added 10 non-US headquarters listings; added
hq_countryandhq_regionon every agent; added HQ-region hubs and directory filter. - 2026-10-16 — v0.1.1: Added FIS AML Investigations Agent and Rippling Automated Compliance; merged the duplicate AuditBoard listing into Optro (formerly AuditBoard); added the HIPAA framework hub; corrected SafeBase (now part of Drata) records; refreshed Drata, Moveworks, ServiceNow, Transcend, SecurityScorecard, Wiz and OneTrust.
- 2026-10-15 — v0.1.0: Initial seed of 33 agents, 4 framework hubs, 5 comparison pages.