Does Netskope have SOC 2, SSO and role based access control?

Full under the Agentic Index verification standard. Netskope publishes public evidence of enterprise security and identity controls, covering a compliance posture such as SOC 2 or ISO 27001, single sign on (SSO or SAML), and role based access control (RBAC). Evidence basis: Public compliance centre lists SOC 2 Type 2, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, PCI DSS v4.0.1, CSA STAR Level 2 and FedRAMP High, with a penetration test report available under request, alongside an isolated FedRAM. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Can Netskope be self hosted or run in a private VPC?

Full under the Agentic Index verification standard. Netskope publishes public evidence of self hosted or private VPC deployment, along with data residency options for controlling where agent data is processed and stored. Evidence basis: Delivered on the Netskope One platform over the NewEdge global network with regional presence, an isolated FedRAMP High authorised government cloud for United States agencies and a PBMM certified environment for Canada; agent workloads run. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Netskope give you tracing and observability into agent runs?

Partial under the Agentic Index verification standard. Netskope publishes some public evidence of logging or observability, but narrower than full tracing and auditability across agent runs. Evidence basis: AgentSkope is stated to track and monitor agent utilisation, and the platform logs user activity across services as audit evidence under FedRAMP High control mapping; no agent level decision trace, reasoning log or replay of an agent run is. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Back to vendors

Netskope

Also known as: Netskope One, Netskope One AgentSkope, AgentSkope, DLP AISecOps Agent, Insider Threat AISecOps Agent, Private Access AIOps Agent, DEM Data Intelligence Agent, DEM Insights Agent, CCI Insights Agent, AI Risk AISecOps Agent, Netskope One AI Command Center, NTSK

Visit site

Security / SOC agentindependentVerified 2026-08-21

Entry priceNot publicFull pricing detail

SASE incumbent with a young agent layer: AgentSkope ships six named agents, of which the DLP and Private Access agents autonomously triage, investigate and remediate while the other three answer questions rather than act.

Netskope is a cloud security and networking company listed on NASDAQ as NTSK, known for secure access service edge and security service edge rather than for agents. It enters this index on one product: Netskope One AgentSkope, announced on 5 May 2026 as a named layer of the Netskope One platform that deploys AI agents capable of executing end to end workflows for security and network operations teams.

Six agents shipped at launch. The DLP AISecOps Agent carries the eligibility case: it mimics the actions of a security operations analyst to run end to end data protection workflows, applying contextualised risk assessment, intelligent triage and investigation, and agentic remediation. A named beta customer, a global professional services firm, reports it analysing millions of alerts, converting them into dozens of cases that are automatically investigated in minutes. The Private Access AIOps Agent acts on configuration state, auditing Netskope One Private Access settings, removing dormant entries and generating application segments and policies from observed consumption patterns. The Insider Threat AISecOps Agent was in private preview at launch.

The other three shipped agents are conversational rather than autonomous. DEM Data Intelligence, DEM Insights and CCI Insights turn telemetry and a catalogue of more than 85,000 cloud, AI and SaaS applications into natural language answers. They are useful and they do not execute. A separate AI Risk AISecOps Agent reached general availability alongside the Netskope One AI Command Center on 2 June 2026, handling triage and investigation for AI risk.

Read the score with the eligibility line in mind. Netskope acts autonomously on data loss prevention case state and on private access configuration, and it is not documented as acting autonomously anywhere else. The wider AI portfolio around it, including Agentic Broker, AI Gateway, AI Guardrails and AI Red Teaming, governs the agents of other parties rather than being an agent, and none of it is credited on this grid. The score is a breadth measurement of one young agent layer, not a verdict on a large and well established security business.

Vendor details

Canonical URL

https://www.netskope.com

Subcategory

SASE and data security operations agents

Company status

independent

Use cases & customers

Primary use cases

Data loss prevention alert triage and investigationInsider threat triagePrivate access configuration audit and policy generationDigital experience troubleshootingCloud and AI application risk queries

Target customers

enterprisepublic sector

Deployment options

SaaSNewEdge global networkGovCloud FedRAMP High isolated environmentPBMM certified environment

Sources & related URLs

Research sources

https://www.netskope.com/press-releases/netskope-revolutionizes-security-and-network-operations-with-agentskope-including-first-of-kind-agentic-ai-dlp-analysis-and-insider-threat-triage https://www.netskope.com/netskope-one/agentskope https://compliance.netskope.com/ https://www.netskope.com/press-releases/netskope-unveils-ai-command-center-delivering-comprehensive-ai-discovery-and-correlated-risk-intelligence-with-fully-coordinated-agentic-response

Agentic Index coverage score

6.0 / 14 capabilities · 43%

Integrations & Tool CallingAgents call platform surfaces directly, with the Private Access agent generating application segments and policies and the DLP agent executing remediation; no third party tool calling by agents is documented, and Cloud Exchange integration is a platform capability rather than an agent one, Netskope press release 2026-05-05	Partial
Workflow OrchestrationAgentSkope is described as a foundation for agents that execute end to end workflows, with the DLP agent running triage, investigation and remediation as a sequence; no visual workflow builder, conditional branching or agent to agent collaboration is documented, Netskope press release 2026-05-05	Partial
Knowledge Grounding & RAGAgents ground in Netskope platform telemetry, DLP alert data, user behaviour data and the Cloud Confidence Index catalogue of more than 85,000 cloud, AI and SaaS applications with risk attributes and compliance certifications; no customer document ingestion or retrieval layer is documented, Netskope press release 2026-05-05	Partial
Human Oversight & GuardrailsAgentSkope is stated to create a common set of security, privacy and governance controls applied uniformly across the platform, and the DLP workflow routes the most important cases to human attention; no approval gate, action authorisation step or bounded autonomy configuration is documented, Netskope press release 2026-05-05	Partial
Security, Identity & GovernancePublic compliance centre lists SOC 2 Type 2, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, PCI DSS v4.0.1, CSA STAR Level 2 and FedRAMP High, with a penetration test report available under request, alongside an isolated FedRAMP High authorised government cloud; AgentSkope additionally states a common security, privacy and governance control set across agents, Netskope compliance centre and press release 2026-08-21	Full
Observability & AuditabilityAgentSkope is stated to track and monitor agent utilisation, and the platform logs user activity across services as audit evidence under FedRAMP High control mapping; no agent level decision trace, reasoning log or replay of an agent run is documented, Netskope press release 2026-05-05 and FedRAMP compliance guide 2026-04-27	Partial
Memory & State PersistenceNo persistent agent memory, session continuity or cross investigation state layer is documented; cases created by the DLP agent persist as platform records rather than as agent memory, Netskope press release 2026-05-05	Unable to verify
Deployment & Data ResidencyDelivered on the Netskope One platform over the NewEdge global network with regional presence, an isolated FedRAMP High authorised government cloud for United States agencies and a PBMM certified environment for Canada; agent workloads run as a layer of that platform, Netskope compliance and public sector pages 2026-08-21	Full
Prebuilt Agents, Templates & PacksShips six named prebuilt agents at launch, five generally available and one in private preview, covering DLP operations, insider threat, private access operations, digital experience data and insights, and cloud application risk queries, with a seventh AI Risk agent generally available from 2 June 2026 and more stated to follow, Netskope press releases 2026-05-05 and 2026-06-02	Full
Triggers & Channel CoverageAgents react to platform events rather than running on a schedule, with the DLP agent processing alerts as they arrive and converting them into cases investigated in minutes; no webhook, external channel or customer defined trigger surface is documented, Netskope press release 2026-05-05	Partial
Model Flexibility & RoutingNo underlying model, model provider, model choice, bring your own model option or routing policy is documented for AgentSkope agents; the AI Gateway and AI Guardrails products govern customer and third party models rather than offering model selection within the agent layer, Netskope press releases 2026-03-11 and 2026-05-05	Unable to verify
APIs, SDKs & MCP ExtensibilityNo customer facing SDK, agent builder or extensibility surface for AgentSkope is documented, and the stated ability to build and release agents quickly describes vendor delivery rather than customer authoring; MCP capability in the portfolio is Agentic Broker governing MCP traffic of other parties rather than exposing Netskope agents over MCP, Netskope press releases 2026-05-05 and 2026-03-11	Unable to verify
Testing, Debugging & OptimizationNo agent testing, sandbox, dry run, regression evaluation or accuracy benchmark is documented for AgentSkope; the AI Red Teaming product exposes customer AI models to simulated attacks and is not an evaluation surface for the agents of this vendor, Netskope press releases 2026-03-11 and 2026-05-05	Unable to verify
Browser & Computer UseNo browser driving or computer use by agents is documented; agents operate on security and network telemetry, alerts and configuration within the platform, and the Enterprise Browser and Remote Browser Isolation products are user facing security controls rather than agent actuation surfaces, Netskope press release 2026-05-05	Unable to verify

The Agentic Index coverage score grades every vendor Full, Partial or Unable to verify against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded

Pricing

Not public

What is public

Nothing numeric. Two passes over the vendor site, the product pages and investor materials returned no list price, no per user rate and no published unit of sale for AgentSkope or for the Netskope One platform. Product pages route to a contact or demonstration request.

Cost watchouts

AgentSkope is a layer of the Netskope One platform rather than a standalone purchase, so the cost of reaching any given agent depends on which platform modules are already licensed. The DLP agent needs data loss prevention, the Private Access agent needs Private Access, and the digital experience agents need digital experience management. A buyer evaluating the agent layer alone may find the real cost is the module underneath it.

Variable cost rationale

Scoping dominates. The purchase is a platform subscription across a selectable module set rather than a priced agent product, so seat count and module mix determine cost, and the agent layer has no separately published unit that a buyer could model against expected volume.

Additional watchouts

Enterprise security platform pricing of this kind is typically scoped per user across selected modules with multi year commitments, so the quoted figure moves substantially with seat count, module mix and term. None of that is published.

Sales call required

Yes, required for paid access

Free / trial

No trial of AgentSkope. A free test drive exists for Netskope Private Access, which is a different product.

Key ambiguities

Whether AgentSkope carries its own list line, is bundled into platform tiers, or is metered by agent runs was not established in two passes. No public statement distinguishes the six launch agents commercially, and the private preview agent has no stated commercial terms.

Agentic Index verified 2026-08-21

Data confidence: high