Agentic Index

The best security and SOC agents in 2026, ranked

The best security and SOC agents of 2026 are Torq, CrowdStrike, and Elastic, ranked by verified capability coverage on the Agentic Index. All 86 researched vendors in the category are scored against the same 14 capabilities, and Torq documents the broadest coverage at 12.5 out of 14.

Agentic Index ranks all 86 security and SOC agents in its index by verified capability coverage. These are agents that triage, investigate, and respond to security alerts autonomously. Each vendor is scored across the same 14 point taxonomy used throughout the index, most recently verified on 2026-10-29, and this ranking recomputes automatically as new research is verified.

Buyers also search this category as agentic SOC platforms, AI alert triage tools, and autonomous security operations agents.

Scored on 14 buyer facing capabilities researched from public sources. No vendor pays for placement. How this ranking works

Best security and SOC agents by buyer need

Best for regulated and governed deployments

Torq

Documents 3.0 of 3 on security, auditability, and human oversight, and 12.5 of 14 overall.

Best for production reliability

Snyk

Documents 2.0 of 2 on testing and observability, and 11.5 of 14 overall.

Best for developer extensibility

CrowdStrike

Documents 2.0 of 2 on APIs, MCP support, and tool calling, and 12.0 of 14 overall.

Best for complex multi step work

Command Zero

Documents 3.0 of 3 on orchestration, memory, and knowledge grounding, and 10.5 of 14 overall.

Each segment names the vendor with the most documented coverage on the criteria that segment depends on, computed from the same research as the ranking below. A vendor appears once, in its strongest segment.

1. 1

   T

   Torq12.5 / 14

   Agentic AI SOC platform built on security hyperautomation, with Auto Triage, HyperAgents and the Socrates analyst grounded in a Context Graph of the customer's environment and a memory of past cases, over a governed workflow layer.

2. 2

   C

   CrowdStrike12.0 / 14

   CrowdStrike is a cybersecurity platform whose Charlotte AI delivers agentic detection, triage, and response in the SOC.

3. 3

   E

   Elastic11.5 / 14

   Elastic, the company behind Elasticsearch, sells Agent Builder for creating AI agents that search, reason over and act on everything stored in Elasticsearch, and Elastic Workflows for automation that calls those agents. Agents use built in and custom tools, external MCP servers and workflows, and reach Claude, Cursor or other agents through MCP and A2A.

   Full coverage on APIs / SDKs / MCP Extensibility and Model Flexibility & Routing and 9 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization.

4. 4

   S

   Snyk11.5 / 14

   AI security platform whose Evo agents secure AI generated code and the coding agents that write it. It brings AI-SPM visibility across models, agents and MCP servers, continuous autonomous pentesting, runtime enforcement, and agents that fix vulnerabilities and open pull requests.

5. 5

   T

   Tines11.5 / 14

   Workflow and AI orchestration platform where security and IT teams build stories with AI Agent actions or import them from a prebuilt library, with Workbench confirmation before changes, bring your own model, an API and MCP server, and self hosting.

6. 6

   C

   ContraForce11.0 / 14

   ContraForce offers Security Delivery Agents for MSPs and MSSPs on Microsoft Defender XDR and Sentinel that triage, investigate, respond and report across customer tenants, with approval gates on high-impact actions.

   Full coverage on APIs / SDKs / MCP Extensibility and Model Flexibility & Routing and 8 more. No documented coverage on Browser / Computer-use and Memory & State Persistence.

7. 7

   D

   Dropzone AI11.0 / 14

   AI SOC analyst that investigates every alert over the existing security stack, with a threat hunting agent beside it and plans priced by investigation volume through sales.

8. 8

   S

   Sonar11.0 / 14

   Verification layer for AI and agentic coding, and a standard for automated code review, with Gitar reviewing, fixing and verifying pull requests until CI passes, Sonar Vortex guiding and checking agents as they write, and a self managed SonarQube Server that now carries the agentic features.

9. 9

   B

   BlinkOps10.5 / 14

   Agentic security operations platform where customers build and chain micro-agents that act only through workflow Abilities vetted in advance, across 30,000+ integration actions, with human approval per action, step level run logs, a REST API and self hosted runners.

10. 10

    C

    Command Zero10.5 / 14

    Autonomous AI SOC investigation platform whose Agent Zero investigates alerts from a public library of 943 questions over read only federated data, with sign off on the verdict types the customer chooses, an ordered audit record of every question and source, living Throughline investigations, and a public API and MCP server.

11. 11

    D

    D3 Security (Morpheus)10.5 / 14

    Autonomous AI SOC platform that investigates every alert at L2 depth, generates response playbooks at runtime and gates risky actions by autonomy mode, with one audit trail per incident, customer-preferred LLMs and cloud, on-prem or air-gapped deployment.

12. 12

    d

    depthfirst10.5 / 14

    AI security platform that detects, triages, and remediates software vulnerabilities.

13. 13

    D

    Drata10.5 / 14

    Trust management platform with its own compliance agents and AI Agent Governance, in which a Sensor and an MCP Proxy inventory agents, evaluate each tool call, block violations inline, route recommended actions for approval and keep a tamper evident evidence feed. A public API and MCP server run in US, EU and APAC regions.

14. 14

    P

    Palo Alto Networks10.5 / 14

    Cortex AgentiX, the successor to XSOAR, runs prebuilt and custom security agents over 1,100 integrations and 1,300 playbooks, with manual approval for sensitive actions, every agent action logged, a model selector (Gemini, Claude) and tenants in ten regions.

15. 15

    S

    SentinelOne10.5 / 14

    Purple AI runs zero-click investigations to a verdict with an auditable evidence chain, then either triggers policy-driven response or prompts an analyst. Hyperautomation adds 130+ templates and approval gates. Plans start at $179.99 per endpoint per year, and the agentic analyst is in Enterprise.

16. 16

    S

    Swimlane10.5 / 14

    Agentic security automation platform (Turbine) whose Hero AI agents work inside customer built playbooks, with explicit approval before state changing actions, a reasoning chain per investigation, per agent model choice including BYOM, and cloud, on premises or air gapped deployment.

17. 17

    Z

    Zeron10.5 / 14

    Cyber risk and security control plane whose ZAK agents (Conformity, Interno, Vendor Pulse, Cyber Navigator) act on the stack under DSL policies with Slack approvals and a tamper evident Action Ledger, plus an open source agent development kit and risk quantification.

18. 18

    A

    Airrived10.0 / 14

    Agentic OS that unifies SOC, GRC, IAM, vulnerability management, IT, and business operations under one agent layer, with a builder for multi agent workflows, prebuilt security applications and customer fine tuned models.

19. 19

    C

    Cyware10.0 / 14

    Threat intelligence and security operations platform whose Quarterback AI agents research threats, triage alerts and vulnerabilities, write detections and map attack flows under customer defined approvals, with Orchestrate playbooks, an open source MCP server and cloud, on premises or air gapped deployment.

20. 20

    G

    Ghost Security10.0 / 14

    Enterprise security agents for incident response, phishing, business email compromise, identity and cloud key compromise that run on premises, in a private cloud or air gapped, with per agent Notify, In the Loop or Above the Loop autonomy and every reasoning step logged.

    Full coverage on APIs / SDKs / MCP Extensibility and Model Flexibility & Routing and 7 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 1 more.

21. 21

    R

    ReliaQuest10.0 / 14

    Agentic security operations platform over the customer's existing stack: six Agentic Teammates chained by scheduled, event and alert-triggered workflows, customer-set approval gates, an audit trail on every action, RAG grounding and customer-controlled Agentic Memory, priced per endpoint.

22. 22

    T

    ThreatModeler10.0 / 14

    Governed agentic threat modeling platform whose multi agent system builds, maintains, and reports on threat models grounded in a persistent Secure Design Graph, threat modeling applications, cloud, OT, and AI agents at enterprise scale with a deterministic framework and Bring Your Own AI.

23. 23

    T

    Tuskira10.0 / 14

    Agentic SecOps platform whose five named agents reason over a federated Security Data Fabric spanning more than 150 security tools, for exposure management, alert triage and containment that waits for an analyst's approval.

24. 24

    A

    Arctic Wolf9.5 / 14

    Managed detection and response rebuilt around agents: the Aurora Agentic SOC's Swarm of Experts coordinates oversight, authoritative and process agents, with human approval for irreversible or high-impact actions, an AI Judge on every outcome, step-by-step run traces and 600+ integrations.

25. 25

    Conifers.ai9.5 / 14

    Agentic AI SOC platform (CognitiveSOC) with five named agents for threat intelligence, threat hunting, detection engineering, investigation, and response and remediation, working in one fabric that grounds each alert in the customer's institutional knowledge. Connects to 60 named security tools and runs on Microsoft Azure, hosted by Conifers or in the customer's own Azure tenant. Serves enterprise SOCs and MSSPs.

26. 26

    Vanta9.5 / 14

    Agentic trust and compliance platform: the Vanta AI Agent answers questionnaires and flags gaps from the customer's own knowledge base, Custom Agents run on schedules and events with approval steps and curated templates, and an API and MCP server run in US, EU and Australian regions.

27. 27

    Abnormal AI9.0 / 14

    Behavioral AI email security with three named autonomous agents: a mailbox that triages user reports and explains itself to employees, a coach that trains at the point of error, and an analyst queried by email.

28. 28

    Andesite9.0 / 14

    Human-AI SOC platform where customers build their own agents and playbooks for triage, investigation and remediation, with plan review before queries run, a full audit trail, bring-your-own LLM and air-gapped deployment; FedRAMP High authorized.

29. 29

    Capsule Security9.0 / 14

    Runtime security layer for AI agents that discovers agents across builders, coding tools and enterprise platforms, maps them in an agent security graph and blocks unsafe tool calls inline, with a consent gated Guardian Agent assistant and a GraphQL API.

30. 30

    Crogl9.0 / 14

    Autonomous alert and advisory investigation that runs inside the customer's environment (on-premises, private cloud or air-gapped) with a knowledge graph, playbook-free orchestration, a skills library, a full audit trail in the ticketing system and the customer's choice of LLM; free single-user edition, Enterprise by quote.

31. 31

    Exaforce9.0 / 14

    Agentic SOC platform and MDR service: four Exabots detect, triage, investigate and respond over Exaforce's own security data layer and multi model AI, with AI and agent security, a voice mobile app and a Claude MCP connector.

32. 32

    HiddenLayer9.0 / 14

    AI security platform for the customer's own models and agents: AI discovery, model supply chain scanning, red team evaluations against the customer's AI applications, and runtime policies with turn-by-turn agent session replay; SaaS or self-hosted.

33. 33

    Simbian9.0 / 14

    Family of SOC, pentest, threat hunting and network security agents sharing one Context Lake, with analyst approved responses and self scoring against the customer's own objectives.

34. 34

    Sprinto9.0 / 14

    Compliance platform with named agents for evidence, fixes, vendor review and trust, customer-built agents through an Agent Orchestrator, human approval as a stated platform property, and US, EU and India instances.

35. 35

    XBOW9.0 / 14

    Autonomous offensive security platform where a coordinator directs short lived attack agents that chain and validate exploits against web applications and APIs, now across a whole external application estate with Autonomous Exposure Management. Scope, rate and testing window controls, every agent action logged, a versioned REST API and webhooks for CI triggers, Jira and Microsoft Sentinel integrations, and regions in the US, EU and Singapore, with Australia, Canada and Japan in preview. Usage based credits, with a $50,000 a year package on AWS Marketplace.

36. 36

    Zenity9.0 / 14

    Security and governance platform for enterprise AI agents: inventory and execution analysis across SaaS, cloud, endpoint and coding agents, posture checks before go-live, runtime Boundaries that allow, block or shut down agent actions, an Evaluate API and OpenTelemetry for custom agents, and Blue Agent for finding triage with human approval. SOC 2 Type II and ISO 27001.

37. 37

    7AI8.5 / 14

    Agentic SOC from the Cybereason founders: domain specialized agents work alerts across endpoint, identity, cloud, email, and network, from detection through response and hunting, with humans on the loop.

38. 38

    Anvilogic8.5 / 14

    Agentic security operations platform that works on top of existing SIEMs, data lakes and cloud storage: Onboard, Search, Detect and Investigate agents orchestrated by Blueprints workflows with scheduled runs and human approval checkpoints, grounded in an enterprise security graph, with an MCP server and credit-metered AI work.

39. 39

    DeepKeep8.5 / 14

    AI security platform: red teaming of the customer's models, apps and agents (with the Reddy agent pausing for human steering), an inline AI Firewall that logs every interaction, an Agent Scanner for n8n, CrewAI, Make and Dify agents, and SaaS to air-gapped deployment.

40. 40

    Horizon3.ai8.5 / 14

    NodeZero autonomous penetration testing across internal, external, cloud, Kubernetes and web app surfaces, with proven attack paths, daily scheduling, Quick Verify retests, a GraphQL API, a hosted MCP server and a FedRAMP High environment for federal use. List prices per asset, from $15 a test on Flex and $50 a year on Core.

41. 41

    Magnitude8.5 / 14

    Autonomous AI workforce for third party risk management that continuously assesses vendors, products, and AI agent dependencies across the supply chain instead of periodic audits.

42. 42

    N

    Netskope8.5 / 14

    Cloud security platform with the AgentSkope agent layer: Data Security, Insider Threat and Private Access agents act autonomously and log every action, conversational agents answer telemetry questions, and an AI Risk agent is reaching GA; REST API and regional management planes.

43. 43

    Okta8.5 / 14

    Identity platform extended to AI agents: agents registered as first-class identities with owners, an Agent Gateway that authorizes and logs every tool call, step-up human approval for high-risk actions, time-bound access requests and a kill switch; add-on to Workforce Identity plans.

44. 44

    Prophet Security8.5 / 14

    AI SOC platform whose agents investigate every alert with documented reasoning, respond through scoped actions with optional sign-off, and test guidance changes against the customer's own history.

45. 45

    Qevlar AI8.5 / 14

    European autonomous AI SOC platform using graph based orchestration for hallucination free tier 2 and 3 investigation in about three minutes, live across 1,500 plus organizations.

46. 46

    Seemplicity8.5 / 14

    Agentic exposure action platform that turns security findings into prioritized, auto-routed, and tracked remediation fixes, with a suite of AI agents for security teams.

47. 47

    Straiker8.5 / 14

    Agent security in three products: discovery that maps each agent's tools and permissions, attack agents that red-team the customer's agents on every change, and runtime tracing and blocking; SaaS or on premises.

48. 48

    UnderDefense8.5 / 14

    Agentic AI SOC (MAXI) with six AI Teammates that investigate alerts end to end and keep a knowledge map of the environment, plus human-led MDR; runs in the cloud or fully on-prem and air-gapped with bring-your-own models.

49. 49

    WitnessAI8.5 / 14

    AI security and governance platform running inline at the network layer: intent-based policies route, block or redact AI prompts and responses, agents are governed at the tool call and MCP server level, agent state and execution commands are captured at runtime and tied to a human identity, and Witness Attack red-teams the customer's models before production. Single-tenant SaaS, also sold on AWS Marketplace.

50. 50

    AlertD8.0 / 14

    AI agents for AWS operations that run read only in the customer's VPC and cover security, compliance, cost, performance and LLM spend over a live cloud graph, proposing fixes as diffs for the customer's pipeline.

    Full coverage on Model Flexibility & Routing and Triggers & Channel Coverage and 3 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 1 more.

51. 51

    Assail8.0 / 14

    Autonomous red teaming platform (Ares) whose twelve Sidewinder agents discover, chain and exploit vulnerabilities across APIs, web and mobile apps, driving a real browser and running on Assail's own offensive security models, managed in the major clouds or on premises.

52. 52

    Astelia8.0 / 14

    AI native exposure management platform from Israeli National Red Team veterans that maps an enterprise's real network, isolates the reachable vulnerabilities, and runs Astelia Agents workflows that draft tickets, propose firewall rules and drive patches across 100+ MCP integrations behind a human approval queue.

53. 53

    Idira8.0 / 14

    Identity security platform (now Idira by Palo Alto Networks) extended to AI agents, with agent discovery and inventory, an AI Agent Gateway and identity broker with just in time access, identity audit on every tool call, admin approval of MCP servers and a kill switch.

54. 54

    Mindgard8.0 / 14

    Automated AI red teaming of the customer's agents and AI systems, from reconnaissance through multi-step attacks, run continuously or in CI/CD, with a Python SDK, CLI and API and runtime protection.

55. 55

    Repello AI8.0 / 14

    Autonomous red teaming of the customer's AI apps and agents (ARTEMIS), runtime guardrails that log every call (ARGUS), endpoint agent discovery (Workstation Lens) and an AI inventory, with a Python SDK and GitHub Action.

56. 56

    RunSybil8.0 / 14

    AI offensive security platform whose agent system, Sybil, pentests live applications and infrastructure on every pull request, on a set cadence or on demand, chaining findings into exploit paths and validating exploitability before reporting. Pushes findings to GitHub and Linear, with a public API and an MCP server. Co-founded by Ari Herbert-Voss (first security hire at OpenAI) and Vlad Ionescu (formerly offensive security tech lead at Meta), it raised $40M in a round led by Khosla Ventures.

57. 57

    Stacklok8.0 / 14

    Self-hosted platform for running and governing what agents reach: MCP servers in isolated containers, an identity-aware tool gateway and an AI gateway for model routing, budgets, screening and audit, on Kubernetes.

58. 58

    Trent AI8.0 / 14

    AI security engineer whose four specialist agents scan code, cloud and AI agents, prioritize exploitable risk, open fix pull requests and verify them, reaching developers inside their coding tools through a hosted MCP server and plugin.

59. 59

    Darktrace7.5 / 14

    Self-learning AI that models each customer's normal and flags deviation, with Cyber AI Analyst investigating every alert into a written summary and Autonomous Response acting in Human Confirmation or autonomous mode. Customers choose their cloud regions.

60. 60

    Operant AI7.5 / 14

    Runtime security for AI agents, MCP servers and employee AI tools, with tracing of each run from prompt to tool calls to memory, inline allow, block or redact decisions, and VPC, on prem or air gapped deployment on Enterprise.

61. 61

    Parameter7.5 / 14

    Autonomous offensive security agents, renamed Parameter in July 2026, that pentest apps and APIs, trace cloud and supply chain attack paths and review pull requests, proving each finding with a working exploit.

    Full coverage on Triggers & Channel Coverage and Prebuilt Agents / Templates / Packs and 4 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 3 more.

62. 62

    Pillar Security7.5 / 14

    AI security platform that inventories the customer's agents and MCP servers, red-teams them with multi-turn and black-box attacks, and applies runtime guardrails that log every tool invocation; deployable in the customer's VPC.

63. 63

    StrikeReady7.5 / 14

    AI security operations platform whose deterministic agents build a memory of the customer's environment, investigate every alert and act across 400+ two-way integrations at a chosen autonomy level; cloud, on-prem or hybrid.

64. 64

    Enclave7.0 / 14

    Autonomous security agent team that scans code, pen tests live applications, reviews configurations, monitors CVEs, triages and prepares verified fixes, taking jobs in Slack or Teams and running on the customer's choice of frontier or open weight models.

    Full coverage on Model Flexibility & Routing and Triggers & Channel Coverage and 3 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 3 more.

65. 65

    Intezer7.0 / 14

    AI SOC platform that investigates every alert with deterministic forensics and AI models, escalates a small share with evidence, runs response actions automatically or after review, and offers a hosted MCP server. It is priced by endpoints.

66. 66

    Kai7.0 / 14

    Agentic AI cybersecurity platform that unifies threat intelligence, exposure management, detection, and response into one autonomous machine speed pipeline across IT and OT.

67. 67

    Lasso Security7.0 / 14

    AI security platform that discovers the customer's agents and applications, red-teams them with multi-turn attacks in CI/CD, and enforces intent-based runtime policies at the gateway with audit trails of agent activity.

68. 68

    Noma Security7.0 / 14

    Agent security platform that discovers agents and MCP servers into an approval registry, controls access to each tool at runtime, logs and blocks agent traffic, and red teams the customer's agents continuously.

69. 69

    Quantro Security7.0 / 14

    Seven specialist agents under a Supervisor that find, test and remediate exploitable vulnerabilities, with human approval for every action.

    Full coverage on Triggers & Channel Coverage and Prebuilt Agents / Templates / Packs and 4 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 4 more.

70. 70

    ZEST Security7.0 / 14

    Agentic exposure management platform whose eight named agents turn scanner, CSPM and CNAPP findings into validated, code based resolution paths tested on a digital twin, delivered through Jira, Slack and code integrations with read only cloud access.

    Full coverage on Testing, Debugging & Optimization and Prebuilt Agents / Templates / Packs and 3 more. No documented coverage on Browser / Computer-use and APIs / SDKs / MCP Extensibility and 3 more.

71. 71

    Linx Security6.5 / 14

    Linx Security is an AI native identity security and governance platform that maps and governs human, non human and AI agent identities in real time, with an autonomous remediation agent, Autopilot.

72. 72

    Mycroft6.5 / 14

    Security and compliance platform whose AI agents draft policies and SSPs, collect evidence and track controls across SOC 2, ISO 27001, HIPAA, CMMC, FedRAMP and more, through read only integrations with remediation tickets and Slack alerts, backed by security experts.

    Full coverage on Triggers & Channel Coverage and Prebuilt Agents / Templates / Packs and 3 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 4 more.

73. 73

    Radiant Security6.5 / 14

    AI SOC platform triaging every alert type that reaches the SOC, with analyst confirmed response actions and integrated log management. Cribl acquired its technology in August 2026.

74. 74

    Terra Security6.5 / 14

    Continuous penetration testing by an AI agent swarm with human pentesters on the loop, across apps, networks and the customer's AI systems, with every test action logged and signed reports.

75. 75

    Token Security6.5 / 14

    Non human identity security platform that discovers and governs machine identities and AI agents across cloud, SaaS and on premises systems, with posture management, threat detection, least privilege, a conversational Token AI Agent and MCP Server, and Enzo for building identity workflows in natural language.

76. 76

    AirMDR6.0 / 14

    AI native MDR whose AI analyst investigates every alert and writes an audit ready case, with human analysts on escalation, one click approval for remediation and a free plan of 100 investigations.

77. 77

    Clutch Security6.0 / 14

    Non human identity security platform that discovers, governs and secures machine identities, AI agents and secrets across cloud, SaaS and on premises, built on the Identity Lineage graph, with customer set Agent Guardrails and ephemeral credentials.

78. 78

    Equixly6.0 / 14

    Equixly is an autonomous offensive security platform whose Agentic AI Hacker, a team of agents on Equixly's own model, continuously pentests APIs and web applications, chaining interactions to prove exploitable risk and rerunning on each release.

    Full coverage on Triggers & Channel Coverage and Observability & Auditability and 2 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 4 more.

79. 79

    Knostic6.0 / 14

    Security controls for enterprise AI tools and agents. Kirin guards coding assistants and MCP connections inline, with agent inventory, least privilege policies and Copilot oversharing assessments, and AgentMesh rates the risk of agent skills and MCP servers.

80. 80

    Pi6.0 / 14

    Agentic product security platform that builds a security brain from a company's code and security history, then autonomously finds and ships fixes for vulnerabilities across the software development lifecycle.

81. 81

    PRE Security6.0 / 14

    AI native predictive SecOps platform with parserless ingestion, a SignalGate data fabric and an Autonomous Security Operator (SOARGPT, SOCGPT, ReportGPT, BreachGPT) that triages and acts across the security stack, deployable on premises, in a private cloud or as SaaS.

82. 82

    Ocean5.5 / 14

    Agentic email security platform whose network of AI agents, led by an autonomous investigation engine called Ray, inspects every message in real time to catch phishing and social engineering that evade legacy filters.

83. 83

    Portal265.5 / 14

    AI governance and security platform (AI TRiSM) that discovers AI tools and agents, records agent prompts, responses and tool calls, throttles or stops runaway agents with Agentic Token Control, and answers questions over AI activity with its Recon assistant.

    Full coverage on Triggers & Channel Coverage and Observability & Auditability and 2 more. No documented coverage on Browser / Computer-use and Testing, Debugging & Optimization and 5 more.

84. 84

    Vulnetic5.5 / 14

    Sable, an AI pentesting agent for web, API, network, cloud and Active Directory that follows the customer's own methodology, preserves every command and exploit trace, and can run on premises or air gapped.

85. 85

    Evoke Security5.0 / 14

    Detection and response for AI agents that records every prompt, tool call and action of the customer's agents across endpoint, web and cloud, inventories agents, MCP servers and Skills, and blocks or redirects risky actions in real time.

    Full coverage on Triggers & Channel Coverage and Observability & Auditability and 1 more. No documented coverage on Browser / Computer-use and Model Flexibility & Routing and 5 more.

86. 86

    Dux3.0 / 14

    Agentic exposure management from IDF Talpiot veterans whose AI workers analyze exploitability across the environment, check whether controls already block the path, suggest lightweight mitigations and route targeted remediation to owners.