Dome Systems
Also known as: Dome, Dome Systems Inc
Agent native governance control plane that registers agents, filters tools via an MCP Gateway, enforces per action Cedar policy before execution, and audits every governed action across any cloud.
Dome Systems builds the agent native governance platform, an operational control plane for the agentic enterprise: one system of control across every agent, every runtime and every cloud. It starts from the premise that the enterprise toolkit built to control access (RBAC, API gateways, audit logs, network policies) is necessary but no longer sufficient once a probabilistic agent decides what to do with its permissions, so control must shift from access to decisions. Dome treats every agent as three components (code for runtime and orchestration, a model for reasoning, and tools for external interactions) and provides a unified system of control: it registers agents with identity and capabilities, discovers tools through an MCP Gateway filtered by policy, provisions credentials on egress, and evaluates every tool call against per agent, per tool, per action Cedar policy before it executes, in under five milliseconds, default deny and fail closed. Every governed action is audited with a full chain of evidence (who, what, under which rule, with what result), agent health is monitored, and events stream to existing SIEM, APM and SOAR. Policy is versioned as code, and a phased maturity approach lets platform teams move from non invasive visibility toward full operational control across the estate.
Vendor details
Canonical URL
https://www.domesystems.ai/
Category
Agent infrastructure
Funding status
Seed round, backed by Redpoint Ventures, Bessemer Venture Partners and Mango Capital. Co-founded by CEO Dave McJannet and COO Marc Holmes (both formerly of HashiCorp).
Company status
private
Use cases & customers
Primary use cases
Target customers
Deployment options
Integrations
Connects to all systems to identify every agent and exposes an MCP Gateway, a single governed endpoint across all connected MCP servers that discovers tools filtered by policy and provisions credentials on egress so agents never hold them directly. Streams governance events to existing SIEM, APM and SOAR.
Sources & related URLs
Capability coverage
8.0 / 14 capabilities · 57%
| Integrations & Tool CallingConnects to all systems to identify every agent and exposes an MCP Gateway, a single governed endpoint across all connected MCP servers that discovers tools filtered by policy (domesystems.ai perspectives, domesystemsai.com). | Full |
|---|---|
| Workflow OrchestrationProvides centralized coordination and a system of control across the agentic estate, but it governs agents rather than composing their workflows (PitchBook, domesystems.ai). | Partial |
| Knowledge Grounding & RAGDome builds an agent registry and maps surfaces, but it is not a knowledge grounding or RAG product (domesystems.ai perspectives). | Unable to verify |
| Human Oversight & GuardrailsEvery tool call is evaluated against per agent, per tool, per action policy before it executes, default deny and fail closed, deterministic where it can be and deliberative where it must be (domesystemsai.com, perspectives). | Full |
| Security, Identity & GovernanceA governance product: registers agents with identity, provisions credentials on egress so agents never hold them, and authorizes every action against Cedar policy, shifting control from access to decisions (domesystemsai.com, Bessemer announcement). | Full |
| Observability & AuditabilityEvery governed action is audited with a full chain of evidence (who, what, under which rule, with what result), agent health is monitored, and events stream to existing SIEM, APM and SOAR (domesystemsai.com, perspectives). | Full |
| Memory & State PersistenceMaintains a persistent registry of agent identities, capabilities and versioned policy as code, a control plane state rather than agent memory (domesystemsai.com, perspectives). | Partial |
| Deployment & Data ResidencyDelivers one system of control with consistent capabilities across every runtime and every cloud (domesystems.ai, Bessemer announcement). | Full |
| Prebuilt Agents / Templates / PacksDome provides governance primitives and policy as code, but no prebuilt agent or template pack library was documented (domesystems.ai perspectives). | Unable to verify |
| Triggers & Channel CoveragePolicy evaluation is triggered on every tool call and governance events stream out, an action driven control domain rather than broad channel coverage (domesystemsai.com, perspectives). | Partial |
| Model Flexibility & RoutingDome governs every agent regardless of its model (it treats the model as one of three agent components), so it is model agnostic in coverage, but it offers no model routing or selection of its own (Dealroom, perspectives). | Partial |
| APIs / SDKs / MCP ExtensibilityServes primitives for operating an agentic estate, an MCP Gateway, agent registration by identity, and policy as code, making it a programmable control plane (domesystemsai.com, perspectives). | Full |
| Testing, Debugging & OptimizationRuntime policy enforcement and visibility are provided, but no agent testing, simulation or optimization framework was documented (domesystems.ai perspectives). | Unable to verify |
| Browser / Computer-useNo browser or computer use capability; Dome is a governance control plane for agents (domesystems.ai). | Unable to verify |
Pricing
No public pricing; in early access, onboarding select enterprises to work directly with the engineering team.
enterprise control plane license, likely by agent estate size
Cost watchouts
A control plane in the path of every tool call requires integration across runtimes and clouds, adding deployment effort alongside the license.
Variable cost rationale
As a control plane governing every agent and tool call, cost likely scales with the size of the agent estate and call volume, though no metered axis is published.
Sales call required
Yes — required for paid access
Free / trial
Early access; work directly with the engineering team
Lowest paid plan
None public; early access via the Dome team
Key ambiguities
Nothing numeric is public; early access stage with bespoke terms.
Related vendors
- Acrab — Singapore compute infrastructure company building a full stack…
- AgentOps — Agent observability and reliability platform with broad model and…
- Agno — High-performance agent runtime and framework (formerly Phidata) with…
- AIsa — Unified resource and payment gateway for AI agents that lets them…
- AlphaBitCore — AI control plane that governs how models, agents, tools, and…
- Anchor Browser — Cloud hosted browser infrastructure that lets AI agents operate real…