Back to vendors
Dome Systems logo

Dome Systems

Also known as: Dome, Dome Systems Inc

Visit site
Agent infrastructureprivateVerified 2026-07-08

Agent native governance control plane that registers agents, filters tools via an MCP Gateway, enforces per action Cedar policy before execution, and audits every governed action across any cloud.

Dome Systems builds the agent native governance platform, an operational control plane for the agentic enterprise: one system of control across every agent, every runtime and every cloud. It starts from the premise that the enterprise toolkit built to control access (RBAC, API gateways, audit logs, network policies) is necessary but no longer sufficient once a probabilistic agent decides what to do with its permissions, so control must shift from access to decisions. Dome treats every agent as three components (code for runtime and orchestration, a model for reasoning, and tools for external interactions) and provides a unified system of control: it registers agents with identity and capabilities, discovers tools through an MCP Gateway filtered by policy, provisions credentials on egress, and evaluates every tool call against per agent, per tool, per action Cedar policy before it executes, in under five milliseconds, default deny and fail closed. Every governed action is audited with a full chain of evidence (who, what, under which rule, with what result), agent health is monitored, and events stream to existing SIEM, APM and SOAR. Policy is versioned as code, and a phased maturity approach lets platform teams move from non invasive visibility toward full operational control across the estate.

Vendor details

Canonical URL

https://www.domesystems.ai/

Category

Agent infrastructure

Funding status

Seed round, backed by Redpoint Ventures, Bessemer Venture Partners and Mango Capital. Co-founded by CEO Dave McJannet and COO Marc Holmes (both formerly of HashiCorp).

Company status

private

Use cases & customers

Primary use cases

Agent governance and access controlTool call policy enforcementAgent identity and credential managementAgent audit and observabilityEnterprise agent estate operations

Target customers

Enterprises building internal AI platformsPlatform and security teamsRegulated enterprises deploying agents

Deployment options

Any cloud or runtimeCustomer environment

Integrations

Connects to all systems to identify every agent and exposes an MCP Gateway, a single governed endpoint across all connected MCP servers that discovers tools filtered by policy and provisions credentials on egress so agents never hold them directly. Streams governance events to existing SIEM, APM and SOAR.

Capability coverage

8.0 / 14 capabilities · 57%

Integrations & Tool CallingConnects to all systems to identify every agent and exposes an MCP Gateway, a single governed endpoint across all connected MCP servers that discovers tools filtered by policy (domesystems.ai perspectives, domesystemsai.com). Full
Workflow OrchestrationProvides centralized coordination and a system of control across the agentic estate, but it governs agents rather than composing their workflows (PitchBook, domesystems.ai). Partial
Knowledge Grounding & RAGDome builds an agent registry and maps surfaces, but it is not a knowledge grounding or RAG product (domesystems.ai perspectives). Unable to verify
Human Oversight & GuardrailsEvery tool call is evaluated against per agent, per tool, per action policy before it executes, default deny and fail closed, deterministic where it can be and deliberative where it must be (domesystemsai.com, perspectives). Full
Security, Identity & GovernanceA governance product: registers agents with identity, provisions credentials on egress so agents never hold them, and authorizes every action against Cedar policy, shifting control from access to decisions (domesystemsai.com, Bessemer announcement). Full
Observability & AuditabilityEvery governed action is audited with a full chain of evidence (who, what, under which rule, with what result), agent health is monitored, and events stream to existing SIEM, APM and SOAR (domesystemsai.com, perspectives). Full
Memory & State PersistenceMaintains a persistent registry of agent identities, capabilities and versioned policy as code, a control plane state rather than agent memory (domesystemsai.com, perspectives). Partial
Deployment & Data ResidencyDelivers one system of control with consistent capabilities across every runtime and every cloud (domesystems.ai, Bessemer announcement). Full
Prebuilt Agents / Templates / PacksDome provides governance primitives and policy as code, but no prebuilt agent or template pack library was documented (domesystems.ai perspectives). Unable to verify
Triggers & Channel CoveragePolicy evaluation is triggered on every tool call and governance events stream out, an action driven control domain rather than broad channel coverage (domesystemsai.com, perspectives). Partial
Model Flexibility & RoutingDome governs every agent regardless of its model (it treats the model as one of three agent components), so it is model agnostic in coverage, but it offers no model routing or selection of its own (Dealroom, perspectives). Partial
APIs / SDKs / MCP ExtensibilityServes primitives for operating an agentic estate, an MCP Gateway, agent registration by identity, and policy as code, making it a programmable control plane (domesystemsai.com, perspectives). Full
Testing, Debugging & OptimizationRuntime policy enforcement and visibility are provided, but no agent testing, simulation or optimization framework was documented (domesystems.ai perspectives). Unable to verify
Browser / Computer-useNo browser or computer use capability; Dome is a governance control plane for agents (domesystems.ai). Unable to verify

Recent platform changes

No recent material changes tracked yet.

Pricing

No public pricing; in early access, onboarding select enterprises to work directly with the engineering team.

enterprise control plane license, likely by agent estate size

Contact onlyMedium variable cost

Cost watchouts

A control plane in the path of every tool call requires integration across runtimes and clouds, adding deployment effort alongside the license.

Variable cost rationale

As a control plane governing every agent and tool call, cost likely scales with the size of the agent estate and call volume, though no metered axis is published.

Sales call required

Yes — required for paid access

Free / trial

Early access; work directly with the engineering team

Lowest paid plan

None public; early access via the Dome team

Key ambiguities

Nothing numeric is public; early access stage with bespoke terms.

Verified 2026-07-08

Contact us

Found a vendor we missed? Have feedback on the index? We'd love to hear from you.