Layer researchSecurity and identity
Vendor landscape
As of 2026-08-19. Vendor capability claims are vendor-published unless third-party sourced. Re-verify quarterly.
- Vendor / product
- Microsoft Entra Agent ID + Agent 365 (Defender/Purview for Agents)
- Category
- Identity + control plane
- Maturity (Aug 2026)
- Agent ID preview May 2025; Agent 365 GA May 1 2026, $15/user/mo standalone
- Notes
- Per-user licensing removes the per-agent cost brake; sponsor role productized [vendor]
- Vendor / product
- Okta for AI Agents
- Category
- Identity
- Maturity (Aug 2026)
- GA Apr 29 2026
- Notes
- First-class identities, human owners, short-lived tokens, kill switch [vendor]
- Vendor / product
- CyberArk Secure AI Agents
- Category
- Privileged access
- Maturity (Aug 2026)
- GA Nov 2025
- Notes
- Zero standing privilege for agents [vendor]
- Vendor / product
- SailPoint Agentic Fabric
- Category
- Identity governance
- Maturity (Aug 2026)
- May 2026
- Notes
- Discover, govern, certify agent access [vendor]
- Vendor / product
- Astrix (Cisco, pending), Oasis (Cyera), Entro, Clutch, GitGuardian
- Category
- NHI specialists
- Maturity (Aug 2026)
- Consolidating 2026
- Notes
- $340M+ combined funding; two acquired at ~$400M and ~$1B
- Vendor / product
- CrowdStrike (Pangea AIDR), Check Point (Lakera), Palo Alto (Protect AI), SentinelOne (Prompt Security), F5 (CalypsoAI), Cisco (Robust Intelligence)
- Category
- AIDR inside platforms
- Maturity (Aug 2026)
- Acquisitions 2024-2025, integration ongoing
- Notes
- The CD-13 absorption wave
- Vendor / product
- Zenity, Noma, WitnessAI, TrojAI
- Category
- Independent AI security
- Maturity (Aug 2026)
- Funded through 2025-2026
- Notes
- Differentiate on agent-graph/posture and research (ATLAS co-authorship)
- Vendor / product
- NeMo Guardrails, Guardrails AI, Prompt Guard, Azure Prompt Shields, Bedrock Guardrails (+ Automated Reasoning checks GA Aug 2025)
- Category
- Guardrails
- Maturity (Aug 2026)
- Mature; bypass evidence published
- Notes
- Advisory layer, never the boundary
- Vendor / product
- OPA/Rego, Cedar, OpenFGA/SpiceDB; Microsoft FIDES (Agent Framework)
- Category
- Deterministic authorization
- Maturity (Aug 2026)
- Production engines; FIDES shipped 2026
- Notes
- The boundary; sub-ms evaluation
Agent-washing watch: "AI firewall" claims resting on bypassable classifiers; agent-identity features that are relabeled service accounts without lifecycle, JIT, or revocation.
Source: research/R10-security-and-identity/vendors.md in the evidence repository behind this site.