When should you choose HiddenLayer?

Your own models and their supply chain are the main risk. You need the platform self hosted, with red team evaluations of your own models. Agent sessions should be replayable turn by turn. Graded by Agentic Index against the same capability axes from each vendor's own published materials. No vendor pays for placement.

When should you choose Zenity?

Agents bought and used across SaaS and endpoints need governing, not only those you build. No suggested fix should apply until a person approves it. Usage based prices on AWS Marketplace suit your procurement. Graded by Agentic Index against the same capability axes from each vendor's own published materials. No vendor pays for placement.

How much do HiddenLayer and Zenity cost?

HiddenLayer: Contact sales; no prices are published.. Zenity: AWS Marketplace (Security Hub Extended): Observability at $130 per resource per month, plus Runtime Protection at $16 and Guardrails for AWS at $2 per million tokens per month.. Graded by Agentic Index against the same capability axes from each vendor's own published materials. No vendor pays for placement.

Agentic Index

HiddenLayer vs Zenity (2026)

Both vendors last verified September 28, 2026

HiddenLayer and Zenity both offer an API, runtime visibility and strong security controls, from different ends of the problem. That verdict is the Agentic Index coverage score, graded from each vendor's own published materials.

HiddenLayer protects the models and agents a customer builds: discovery, supply chain scanning for malware and tampering with an AIBOM, red team evaluations, and runtime policies with turn by turn session replay, as SaaS or self hosted. Zenity governs the agents a business uses as well as builds, across SaaS, cloud, endpoint and coding tools, with posture checks before go live, runtime Boundaries and Blue Agent triage under human approval, and usage based prices on AWS Marketplace. HiddenLayer installs by Helm in the customer's own environment without exposing model weights, prompts or data. Choose HiddenLayer to secure your own models and their supply chain, and Zenity to govern agents across the business.

On the Agentic Index AI SOC ranking, neither HiddenLayer nor Zenity clears the bar, which asks for all five investigation loop capabilities documented in full. HiddenLayer does not document workflow orchestration in full, nor human oversight and guardrails; Zenity does not document workflow orchestration in full. 25 of the 86 vendors in the lane clear it. See the AI SOC ranking

On the Agentic Index agent infrastructure ranking, neither HiddenLayer nor Zenity clears the bar, which asks for all five production contract capabilities documented in full. HiddenLayer does not document model flexibility and routing in full; Zenity documents two of the five in full. 33 of the 186 vendors in the lane clear it. See the agent infrastructure ranking

This comparison is published by Agentic Index, an independent agentic AI vendor research platform. HiddenLayer and Zenity are each graded against the same 14 capability Agentic Index taxonomy, from the vendor's own public materials under the Agentic Index verification standard, alongside 1,084 researched vendors. No vendor pays for placement and no vendor has reviewed this page. How this evidence is graded

At a glance

HiddenLayer

Category: Security / SOC agent
Entry price: Contact sales; no prices are published.
Free or trial: Not published
Pricing confidence: contact only

Zenity

Category: Security / SOC agent
Entry price: AWS Marketplace (Security Hub Extended): Observability at $130 per resource per month, plus Runtime Protection at $16 and Guardrails for AWS at $2 per million tokens per month.
Free or trial: 30-day free trial on the AWS Marketplace listing
Pricing confidence: public partial

Keep exploring

Choose HiddenLayer if

Your own models and their supply chain are the main risk.
You need the platform self hosted, with red team evaluations of your own models.
Agent sessions should be replayable turn by turn.

Choose Zenity if

Agents bought and used across SaaS and endpoints need governing, not only those you build.
No suggested fix should apply until a person approves it.
Usage based prices on AWS Marketplace suit your procurement.

Feature	H HiddenLayer	Z Zenity
Action & orchestration
Integrations & Tool Calling Ability to connect agents to real systems through native integrations, OAuth-authenticated actions, custom tools, APIs, webhooks, or MCP-compatible tools.
HiddenLayerIntegrations & Tool Calling Prebuilt integrations reach CI/CD, MLOps, data pipelines and SIEM/SOAR, with integrations for Microsoft Sentinel, Splunk and a GitHub Action, and the runtime plugs into agent gateways and execution frameworks to block or redact agent traffic as it passes through. Named frameworks and gateways include LangChain, LiteLLM, the OpenAI and AWS Strands guardrails SDKs, Azure API Management and the TrueFoundry AI Gateway, and the JFrog Artifactory integration blocks malicious model downloads. SourceHiddenLayer, docs.hiddenlayer.ai integrationsread 2026-10-05
ZenityIntegrations & Tool Calling Zenity covers Microsoft's Copilot Studio, Microsoft 365 Copilot, Power Platform and Azure AI Foundry, Salesforce Agentforce, AWS Bedrock and Google Vertex AI, ChatGPT Enterprise and Claude Enterprise, and ServiceNow. It also covers GitHub Copilot, OpenAI Codex, Microsoft Foundry and Agent 365. Custom agents report through OpenTelemetry, and Zenity integrates with CrowdStrike Falcon SIEM and ServiceNow. Sourcezenity.io/platformread 2026-09-28
Workflow Orchestration Ability to sequence, branch, retry, route, and combine deterministic workflow nodes with autonomous agent steps.
HiddenLayerWorkflow Orchestration HiddenLayer runs a fixed product pipeline across four modules (discovery, supply chain scanning, attack simulation, runtime detection and response). It does not orchestrate the customer's agents, and customers do not build flows in it. The platform is agentless and model agnostic and needs no training data. SourceHiddenLayer, hiddenlayer.com/platformread 2026-10-05
ZenityWorkflow Orchestration Surface, Enforce and Protect run as a fixed product pipeline, and one Guardian Agent is live, Blue Agent, a triage assistant that works in several steps. There is no coordination among several agents and no flow the customer configures. The Clarity and Correlation agents from earlier descriptions no longer appear. Sourcezenity.io/blog/august-2026-product-updatesread 2026-09-28
Triggers & Channel Coverage How agents wake up and where they work: schedules, webhooks, message events, CRM events, inbox events, chat, email, voice, and collaboration tools.
HiddenLayerTriggers & Channel Coverage Runtime detection fires on every prompt, tool call and response passing the runtime proxy or agent gateway, and supply chain scans run in CI/CD through the GitHub Action, so neither waits for a person to start it. Model scans also run from Azure DevOps, Jenkins and JFrog Artifactory, and runtime detections can go out by webhook as they happen. SourceHiddenLayer, docs.hiddenlayer.ai agentic sessions and integrationsread 2026-10-05
ZenityTriggers & Channel Coverage Boundaries check every agent action in real time as it happens, in prevention or detection mode, and Blue Agent triages findings as they arrive, so events start the work with no one launching it. Sourcezenity.io/platform/runtime-boundariesread 2026-09-28
Knowledge & context
Knowledge Grounding & RAG Ability to ground agent behavior in company data through document ingestion, retrieval, external knowledge APIs, semantic search, or RAG layers.
HiddenLayerKnowledge Grounding & RAG AI Discovery builds an inventory of the customer's AI applications, models and assets, and supply chain scanning produces an AIBOM for each model, a map of the customer's AI assets. There is no knowledge store for agents to draw on. Discovery covers Bedrock, Bedrock Agents and SageMaker on AWS, Databricks Unity Catalog, and Azure AI Foundry and Azure ML. SourceHiddenLayer, docs.hiddenlayer.ai and integrationsread 2026-10-05
ZenityKnowledge Grounding & RAG A live inventory covers agents across SaaS, custom and endpoint deployments, with identity, data and behavior signals correlated into attack paths. There is no retrieval layer that an agent queries, and Blue Agent gathers context for each finding. Sourcezenity.io/platformread 2026-09-28
Memory & State Persistence Ability to persist context across a run, conversation, workflow, user, team, or longer-term memory layer.
HiddenLayerMemory & State Persistence There is no memory for the customer's agents or for an agent of HiddenLayer's own. The inventory and AIBOM map the customer's AI assets, and session replay records past sessions. Neither is memory that an agent reads. SourceHiddenLayer, docs.hiddenlayer.airead 2026-10-05
ZenityMemory & State Persistence Blue Agent's triage guidelines are generated at onboarding and persist for the organization, and the agent suggests revisions when it sees a need. That state persists and the agent maintains it, and Zenity says nothing more about its scope or lifetime. Sourcezenity.io/blog/august-2026-product-updatesread 2026-09-28
Control & trust
Human Oversight & Guardrails Approval steps, consent checkpoints, escalation rules, structured guardrails, policy constraints, and pause/resume controls.
HiddenLayerHuman Oversight & Guardrails Agentic runtime policies assign each detection rule an action of Block, Detect or Redact on the customer's agent sessions. The customer sets these policies, and there is no step that asks a person to approve an agent action before it goes through. A rule only describes a condition, the policy decides what happens, and a policy takes effect once a project references it. SourceHiddenLayer, docs.hiddenlayer.ai agentic policyread 2026-10-05
ZenityHuman Oversight & Guardrails Blue Agent runs in suggest mode, so nothing it proposes is applied without a person's approval. On the customer's agents, Boundaries let an action through, block it or shut the agent down. Sourcezenity.io/blog/august-2026-product-updatesread 2026-09-28
Security, Identity & Governance RBAC, SSO, auditability, encryption, least-privilege tool access, compliance posture, and data handling policy.
HiddenLayerSecurity, Identity & Governance HiddenLayer reports SOC 2 Type II covering security, availability and confidentiality, and offers single sign-on, user management and a console audit log. Runtime redaction can strip entity types such as US Social Security numbers, email addresses and phone numbers from output. SourceHiddenLayer, hiddenlayer.com/security and docs.hiddenlayer.ai agentic policyread 2026-10-05
ZenitySecurity, Identity & Governance Attestations on the trust center cover SOC 2 Type II, ISO 27001 and ISO 27701, with full reports on request. Account setup offers SSO through Azure AD and Okta or generic SAML and OIDC, along with an IP allowlist and encryption keys the customer manages. FedRAMP is in process, not authorized. Sourcedocs.zenity.io/ssoread 2026-09-28
Observability & Auditability Traces, logs, execution histories, metrics, audit events, and debugging detail for production agent behavior.
HiddenLayerObservability & Auditability Agentic Sessions reconstruct each of the customer's agent sessions as "a clean, ordered, turn-by-turn replay: the user prompts, the model's tool calls and results, and the final answers, with any blocked or redacted moments marked in place", which records each tool call the customer's agents make. Runtime detections flow to Microsoft Sentinel through Log Analytics, to Splunk, or to any application by webhook. SourceHiddenLayer, docs.hiddenlayer.ai agentic sessions and integrationsread 2026-10-05
ZenityObservability & Auditability The customer's agents are analyzed in context: execution paths, tool invocations and memory updates, along with decision flows, RAG queries and file access. Each agent has an activity record, and spans from custom agents come in through OpenTelemetry, so every tool call the customer's agents make is on record. Sourcezenity.io/platform/ai-observabilityread 2026-09-28
Deployment & Data Residency Deployment modes and options, including SaaS, dedicated cloud, VPC, on-prem, hybrid, local runtime, and self-hosting.
HiddenLayerDeployment & Data Residency Self-hosted installation of the platform is available (embedded cluster or Helm), and AI Runtime Security is deployed by Helm in the customer's environment, alongside the AWS-hosted SaaS. HiddenLayer says it deploys in minutes without exposing model weights, prompts or customer data. SourceHiddenLayer, docs.hiddenlayer.ai self hosted Helm install and hiddenlayer.com/platformread 2026-10-05
ZenityDeployment & Data Residency Commercial customers get SaaS on AWS. A federal deployment inside Knox Systems' platform is in process for FedRAMP, a second environment not yet authorized. There is no region list or option to host in the customer's own environment. Encryption keys the customer manages protect data but do not set where it lives, and the agent platforms Zenity covers are not where it is hosted. Sourcezenity.io/company-overview/newsroom/company-news/zenity-achieves-fedramp-in-process-status-for-ai-agent-securityread 2026-09-28
Solution readiness
Prebuilt Agents, Templates & Packs Ready-made workflows, packaged employees, templates, blueprints, industry solutions, and role-specific agents that reduce time-to-value.
HiddenLayerPrebuilt Agents, Templates & Packs Prebuilt detection rules and red team prompt sets ship with the platform, though the catalog has no name and there are no prebuilt agents. The detection rules cover prompt injection, PII, code, suspicious URLs and exfiltration hosts, oversized inputs, guardrail refusals and message language. SourceHiddenLayer, docs.hiddenlayer.ai attack simulation and agentic policyread 2026-10-05
ZenityPrebuilt Agents, Templates & Packs A library of prebuilt Boundaries rules and a snippet library of prebuilt examples ship without a named catalog, and one Guardian Agent, Blue Agent, is live. There is no named set of prebuilt agents. Sourcezenity.io/platform/runtime-boundariesread 2026-09-28
Platform extensibility
Model Flexibility & Routing Ability to work across multiple foundation models, route tasks to different models, or let buyers bring their own providers and keys.
HiddenLayerModel Flexibility & Routing HiddenLayer secures and tests models instead of serving or routing them. The runtime proxy accepts several LLM API formats so it can sit in front of different providers, but it does not pick or route models. From the console, red team tests can run against a range of foundation model providers. SourceHiddenLayer, docs.hiddenlayer.ai API format support and attack simulationread 2026-10-05
ZenityModel Flexibility & Routing No model provider, choice or routing is named for Blue Agent or the platform's analysis. Zenity covers agents built on many models, which does not give its customers a choice of model for Zenity itself. Sourcezenity.io/platformread 2026-09-28
APIs, SDKs & MCP Extensibility Composability layer: stable APIs, SDKs, MCP tool consumption/serving, custom tools, and integration into internal systems.
HiddenLayerAPIs, SDKs & MCP Extensibility HiddenLayer offers a Python SDK, API keys and API routes, and an AI Supply Chain Security CLI, and attack simulations can be run via API. There are Java and TypeScript SDKs as well. A runtime policy applies to a project, and an evaluation call names that project in a header. SourceHiddenLayer, docs.hiddenlayer.ai Python SDK, integrations and agentic policyread 2026-10-05
ZenityAPIs, SDKs & MCP Extensibility The Evaluate API lets customers' custom agents call Zenity for inline enforcement decisions on their actions, alongside OpenTelemetry ingestion. It has a public documentation page, Custom Agents: Evaluate API, but the page shows no reference content. Sourcedocs.zenity.io/integration/custom-agents-evaluate-apiread 2026-09-28
Testing, Debugging & Optimization Testing, debugging, scoring, retries, fallbacks, quality gates, and optimization loops for improving agent workflows before and after deployment.
HiddenLayerTesting, Debugging & Optimization Red teaming covers the customer's own deployed AI applications. AI Attack Simulation runs red team and system prompt evaluations via API against any application reachable from the internet, reports success rates, failure reasons and interactions, and can run in the release pipeline. System prompt evaluations also suggest improved prompts, and results become baselines that teams track and compare over time. The application under test needs a public interface. SourceHiddenLayer, docs.hiddenlayer.ai attack simulationread 2026-10-05
ZenityTesting, Debugging & Optimization Before anything goes live, the customer's agents are checked for configuration and permissions against policy, and attack paths that correlated signals show to be reachable are scored from 0 to 100. That validates configuration. There is no red teaming or scored test run against the customer's agents. Sourcezenity.io/platform/ai-exposure-managementread 2026-09-28
Specialist automation
Browser & Computer Use Browser, desktop, or remote/local computer control for workflows that cannot be handled through stable APIs alone.
HiddenLayerBrowser & Computer Use There is no browser or computer use. HiddenLayer's products inspect prompts, tool calls and model files instead of operating applications themselves. SourceHiddenLayer, docs.hiddenlayer.ai and hiddenlayer.com/platformread 2026-10-05
ZenityBrowser & Computer Use Zenity governs other agents, browser and endpoint agents among them, and does not drive an interface itself or use a browser or computer. Sourcezenity.io/platformread 2026-09-28

Pricing snapshot

Sourced from the Index pricing dataset · open each vendor's profile for full detail.

Pricing	H HiddenLayer	Z Zenity
Entry price Lowest public entry point	Contact sales; no prices are published.	AWS Marketplace (Security Hub Extended): Observability at $130 per resource per month, plus Runtime Protection at $16 and Guardrails for AWS at $2 per million tokens per month.
Pricing confidence How public the numbers are	Contact only	Public, partial
Billing Primary billing axis	Inference, not stated by the vendor: modules adopted and the scope of models, applications and agents covered.	Per monitored resource per month for observability, plus per million tokens for runtime protection and guardrails (AWS Security Hub Extended); private-offer contracts otherwise.
Variable cost Workload / overage exposure	Medium variable cost	High variable cost
Free tier / trial Try before you buy	No free tier	No free tierTrial
Buying motion Self-serve vs sales call	Sales call	Mixed
Pricing verified When this pricing was last checked	Sep 28, 2026	Sep 28, 2026

Product updates

Newest first, each linked to its source.

HiddenLayer

October 27, 2026 · Integrations

Runtime detections for AI agents from HiddenLayer now arrive in Splunk through its HTTP Event Collector and in Microsoft Sentinel through a Log Analytics table, and model scan results reach Splunk the same way.
Source
October 14, 2026 · Security / enterprise

AI Supply Chain Security 26.10.0 lets a tenant add multiple rules to its Supply Chain policy.
Source

All 2 HiddenLayer updates →

Zenity

October 15, 2026 · Human approval / guardrails

Zenity now supports tool call validation in Anthropic's Inference Hooks for Claude Enterprise, so each tool call Claude proposes is held for an allow or deny verdict from Zenity before it runs.
Source
August 8, 2026 · Integrations

Zenity announced an integration with AWS Security Hub to secure enterprise AI agents.
Source
August 5, 2026 · Integrations

Zenity extended its AI agent security and governance platform to support Claude Enterprise.
Source

All 3 Zenity updates →

HiddenLayer profile Zenity profile Compare the full category See security and SOC agents ranked Build a custom comparison

More comparisons with HiddenLayer or Zenity

Other matchups in security and SOC agents

Not the pairing you were after? These compare a different set of security and SOC agents on the same 14 capabilities.

See all 79 security and SOC agents comparisons

HiddenLayer vs Zenity (2026)

Choose HiddenLayer if

Choose Zenity if

Product updates

HiddenLayer

Zenity

More comparisons with HiddenLayer or Zenity

Other matchups in security and SOC agents

Contact us