Alternatives to Amazon Bedrock AgentCore Identity
Compare Amazon Bedrock AgentCore Identity alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Amazon Bedrock AgentCore Identity in 2026. Compare features, ratings, user reviews, pricing, and more from Amazon Bedrock AgentCore Identity competitors and alternatives in order to make an informed decision for your business.
-
1
Auth0
Okta
Auth0 takes a modern approach to Identity, providing secure access to any application, for any user. Safeguarding billions of login transactions each month, Auth0 delivers convenience, privacy, and security so customers can focus on innovation. Auth0 is part of Okta, The World’s Identity Company™. Auth0 lets you quickly integrate authentication and authorization for web, mobile, and legacy applications, with new Fine Grained Authorization (FGA) that goes beyond role-based access control. Authenticate users across all applications with a customized, secure, and standards-based single login. Universal Login connects users to a central authorization server. Credentials aren’t transferred across sources, which boosts security and protects against phishing and credential stuffing attacks. OAuth 2.0 recommends that only external user agents (like the browser) be used by native applications for authentication flows. Auth0’s Universal Login achieves this while enabling SSO. -
2
Ping Identity
Ping Identity
Ping Identity builds identity security for the global enterprise with an intelligent identity platform that offers comprehensive capabilities including single sign-on (SSO), multi-factor authentication (MFA), directory, and more. Ping helps enterprises balance security and user experience for workforce, customer, and partner identity types with a variety of cloud deployment options including identity-as-a-service (IDaaS), containerized software, and more. Ping has solutions for both IT and developer teams. Enable digital collaboration with simple integrations to these popular tools. Support your employees wherever they are with integrations to these popular tools. Deploy quickly with interoperability across the entire identity ecosystem. Whether you just want single sign-on (SSO) or a risk-based, adaptive authentication authority, starting off with a PingOne solution package lets you only pay for what you need, and gives you room to grow.Starting Price: $5 per user per month -
3
Amazon Bedrock AgentCore
Amazon
Amazon Bedrock AgentCore enables you to deploy and operate highly capable AI agents securely at scale, offering infrastructure purpose‑built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real‑world deployment. It works with any framework and any foundation model in or outside of Amazon Bedrock, eliminating the undifferentiated heavy lifting of specialized infrastructure. AgentCore provides complete session isolation and industry‑leading support for long‑running workloads up to eight hours, with native integration to existing identity providers for seamless authentication and permission delegation. A gateway transforms APIs into agent‑ready tools with minimal code, and built‑in memory maintains context across interactions. Agents gain a secure browser runtime for complex web‑based workflows and a sandboxed code interpreter for tasks like generating visualizations.Starting Price: $0.0895 per vCPU-hour -
4
Google Cloud Agent Identity
Google
Google Cloud Agent Identity gives each AI agent a distinct, cryptographically attested identity and managed X.509 credentials for authenticating to Google Cloud resources as itself. Its identity and credential management APIs support agent authentication, access to tools and services, and credential management for user-delegated OAuth flows. Administrators can apply IAM controls, including principal access boundaries and service perimeters, and review audit logs that distinguish agent actions from actions performed on a user's behalf. The service supports agent workloads running on Gemini Enterprise Agent Platform Runtime (Agent Runtime), Gemini Enterprise, Cloud Run, and Google Kubernetes Engine. Agents can use its credentials to access cloud resources, external APIs, and Model Context Protocol servers. Availability and supported authentication flows depend on the host service.Starting Price: $0 -
5
NewCore
NewCore
NewCore is a next-generation identity provider for humans and AI agents, built around one converged identity core that keeps every human and agentic identity visible, secured, and governed from access to audit. It treats employees, contractors, partners, machines, on-behalf-of actions, delegated agents, and autonomous workloads as first-class identities under one architecture. Identity Security protects the trust behind access with SSO, passkeys, phishing-resistant MFA, secure token signing, authenticator strength scoring, and security-aware policies. Secure Split Key distributes signing authority between NewCore’s cloud and the customer environment so neither side can sign a valid token alone. Identity Discovery maps humans, agents, accounts, applications, authenticators, sessions, and access paths into one live graph, revealing shadow accounts, orphaned credentials, and unmanaged agents. -
6
Opal Zero
Opal Security
Opal Zero is a just-in-time access governance platform for AI agents that inventories every agent, maps it to an accountable owner, decides each access request, and enforces the decision in the MCP gateway already in place. It gives organizations one inventory across identity providers and AI platforms such as Okta, Entra, Anthropic, OpenAI, Bedrock AgentCore, and Cursor, showing what every agent can access and who owns it. Risk Center surfaces access that is off-purpose, unowned, or standing and routes issues to the appropriate owner with an inline fix. Paladin evaluates requests using policy and context, identifies the least-privileged path, respects owner boundaries, and shows the reasoning behind each decision. Policy Insights uses real agent behavior to identify unused access and opportunities to improve access policy instead of relying on one-off remediation. Gateway Enforcement writes approved decisions as scoped, time-bound policy into existing gateways. -
7
Microsoft Entra Agent ID
Microsoft
Microsoft Entra Agent ID provides identity management and access controls for AI agents operating in an organization. IT and identity teams can create agent identity blueprints, issue identities to individual agents, assign owners and sponsors, and manage agent lifecycles and permissions. The platform is available to Microsoft Entra customers and supports OAuth 2.0, agent-to-agent communication, and Microsoft Graph APIs for programmatic provisioning and management. Organizations can connect agents built on Microsoft and third-party platforms, including AWS Bedrock and n8n. Extending Microsoft Entra security features to agents, including Conditional Access, governance, and risk controls, requires a Microsoft Agent 365 license; Agent 365 is included with Microsoft 365 E7. The service serves organizations building or deploying AI agents that need identity, access, and governance controls.Starting Price: $15/user/month -
8
Keycard
Keycard
Keycard is an identity-and-access infrastructure platform built for the agent-native era, enabling developers and enterprises to securely connect AI agents, users, services, and APIs with real-time, policy-driven identity controls. It issues dynamic, ephemeral access tokens in place of static secrets and supports federated identity models to unify users, agents, and workloads under a distributed authorization framework. The platform provides drop-in SDKs for popular frameworks so developers can build agent-aware applications without becoming IAM experts. Keycard’s data model includes identity-attested agents, tasks, tools, and resources, allowing logical zones with context-aware permissions and auditability. On the policy side, security teams can define deterministic, task-based rules that enforce who (user/agent) can do what (task) on which resource under which conditions, all with full transparency. -
9
Hush Security
Hush Security
Hush Security is a platform for discovering and governing AI agents and other non-human identities. It maps agent identities, credentials, permissions, tools, and infrastructure connections, helping security and identity teams assess risk and apply policy controls. The product is intended for organizations deploying AI agents and provides agent inventory, ownership attribution, activity auditing, access governance, and policy enforcement. Hush provides controls for limiting agent permissions and reducing reliance on static credentials, with visibility across agent and developer environments including Claude Code, Cursor, Codex, and Microsoft Foundry. Teams can use the platform to identify agents and credentials, review access, define scoped permissions, and monitor agent activity. Its free tier covers up to 25 protected agents, 50 access policies, and 10,000 discovered identities; paid plans support broader usage.Starting Price: $0 -
10
Arcade
Arcade.dev
Arcade.dev is an AI tool-calling platform that enables AI agents to securely perform real-world actions, like sending emails, messaging, updating systems, or triggering workflows, through authenticated, user-authorized integrations. By acting as an authenticated proxy based on the OpenAI API spec, Arcade.dev lets models invoke external services (such as Gmail, Slack, GitHub, Salesforce, Notion, and more) via pre-built connectors or custom tool SDKs, managing authentication, token handling, and security seamlessly. Developers work with a unified client interface (arcadepy for Python or arcadejs for JavaScript), facilitating tool execution and authorization without burdening application logic with credentials or API specifics. It supports secure deployments in the cloud, private VPCs, or on premises, and includes a control plane for managing tools, users, permissions, and observability.Starting Price: $50 per month -
11
MudraID
Decryptogen
MudraID is a cloud-based identity and trust platform for teams building AI agents, APIs and agent-enabled services. It gives agents distinct cryptographic identities, supports scoped and time-limited delegation, and checks requests against policy, trust and revocation state at action time. Teams can issue, rotate, suspend and revoke agent credentials, enforce per-action permissions, and trace delegation chains. The platform supports OAuth 2.0, OIDC, JWT/JWKS, MCP authorization and signed A2A Agent Cards. Developer options include a Python agent SDK and FastAPI/Starlette middleware; a hash-chained audit trail records decisions and related events. MudraID is intended for product, platform, security and IAM teams that need to govern agent-to-agent and agent-to-service interactions.Starting Price: $99/month -
12
Aembit
Aembit
Replace manual and insecure access to non-human identities with our automated and secretless Workload IAM platform. Manage your workload-to-workload access like you do your users: with automated, policy-based and identity-driven controls, so you can proactively eliminate the risk of non-human identities. Aembit boosts security by cryptographically verifying workload identities, in real time, ensuring that only trusted workloads have access to your sensitive data. Aembit injects short-lived credentials into requests just-in-time so you never have to store or protect secrets. Dynamically enforce access rights based on real-time evaluations of workload security posture, geography and other key behavioral characteristics. Aembit secures access amongst workloads in the cloud on-prem and in SaaS. -
13
Idira
Idira by Palo Alto Networks
Idira is Palo Alto Networks’ next-generation identity security platform built for the AI enterprise, designed to secure every human, machine, and agentic identity through one unified control plane. It modernizes privileged access management by extending privilege controls beyond administrators to every identity that can access sensitive systems, data, applications, cloud services, workloads, endpoints, secrets, certificates, SSH keys, and AI agents. It discovers identity risk, applies privilege dynamically, and governs the full lifecycle from first access to final session. Idira replaces static, always-on access with dynamic privilege, just-in-time access, zero standing privilege, continuous verification, policy-driven controls, and real-time enforcement based on identity, device, and context. For human identities, it unifies privileged access, workforce access, endpoint privilege management, and identity governance, helping organizations reduce privilege sprawl. -
14
Peta
Peta
Peta is an enterprise-grade control plane for the Model Context Protocol (MCP) that centralizes, secures, governs, and monitors how AI clients and agents access external tools, data, and APIs. It combines a zero-trust MCP gateway, secure vault, managed runtime, policy engine, human-in-the-loop approvals, and full audit logging into a single platform so organizations can enforce fine-grained access control, hide raw credentials, and track every tool call made by AI systems. Peta Core acts as a secure vault and gateway that encrypts credentials, issues short-lived service tokens, validates identity and policies on each request, orchestrates MCP server lifecycle with lazy loading and auto-recovery, and injects credentials at runtime without exposing them to agents. The Peta Console lets teams define who or which agents can access specific MCP tools in specific environments, set approval requirements, manage tokens, and analyze usage and costs.Starting Price: Free -
15
AI Gateway HQ
AI Gateway HQ
AI Gateway HQ is a hosted AI gateway and control plane for organizations connecting applications, coding agents, and automations to model providers. It provides OpenAI- and Anthropic-compatible API endpoints and routes requests through centrally managed provider credentials, model aliases, workload keys, and fallback rules. Administrators can apply identity and access policies, monitor request metadata, set organization and workload budgets, rate and concurrency limits, and review routing, usage, cost, and policy evidence. The service supports bring-your-own provider API credentials and a managed Amazon Bedrock option using prepaid credit. A browser-based console and API support configuration and governed requests; documented client setups include Codex CLI, Claude Code, and OpenCode. Teams use it to coordinate AI access, control model usage and spending, and review operational evidence across applications and environments.Starting Price: $499/month -
16
Token Security
Token Security
Token Security accelerates secure enterprise adoption of Agentic AI by discovering, managing, and governing every AI agent and non-human identity across the organization. From continuous visibility to least-privilege enforcement and lifecycle management, Token Security provides complete control over AI and machine identities, eliminating blind spots, reducing risk, and ensuring compliance at scale. -
17
Defakto
Defakto
Defakto secures every automated interaction by issuing short-lived, verifiable identities to non-human actors such as services, pipelines, AI agents, and machines, eliminating static credentials, API keys, and standing privileges. Their unified non-human identity and access management solution enables discovery of unmanaged identities across cloud, on-premises, and hybrid environments, issuance of dynamic identities at runtime tied to policy, enforcement of least-privilege access, and full audit-ready logging. The product consists of modules; Ledger for continuous discovery and governance of non-human identities; Mint for automated issuance of purpose-bound, ephemeral identities; Ship for secretless CI/CD workflows where hard-coded credentials are removed; Trim for automatic right-sizing of access and removal of over-privileged service accounts; and Mind for securing AI agents and large-language models with the same identity model used for workloads. -
18
OAuth
OAuth.io
Focus on your core app and get to market faster. OAuth.io handles identity infrastructure, maintenance, and security overhead, so your team doesn’t have to. Identity can be difficult, OAuth.io makes it easy. Choose identity providers, add custom attributes, customize your login page or use our widget, integrate with your app - identity solved in minutes. Manage your users from our easy to use dashboard - find and manage users, reset passwords, enforce two-factor authentication, and add memberships and permissions through OAuth.io's simple and easy to use User Management. Fully-featured, hyper-secure user authentication using passwords or tokens. From multi-tenant to complex permissions, OAuth.io has your user authorization modeling covered. Force a second factor of user authentication with our popular integrations.Starting Price: $19 per month -
19
StackOne
StackOne
StackOne is an AI agent integration platform that enables developers and enterprises to connect autonomous AI agents with business applications, data sources, and enterprise workflows. The platform provides more than 570 prebuilt connectors and 35,000 actions across CRM, HR, recruiting, finance, customer support, identity management, and productivity systems. It supports Model Context Protocol (MCP), Agent-to-Agent (A2A) communication, REST APIs, and software development kits for integrating AI agents with external services. Managed authentication handles OAuth, SAML, API keys, and credential management, while granular permissions control which actions and data each agent can access. Its security capabilities include prompt injection detection, audit logging, execution monitoring, and configurable access policies. StackOne also provides AI-assisted connector development, dynamic tool discovery, data synchronization, and token optimization to help organizations deploy and manage agents.Starting Price: $600/month -
20
Cerbos
Cerbos
Cerbos is an authorization management platform. Teams use it to authorize every identity, govern every action and prove every decision, with fine-grained, contextual and continuous authorization across applications, gateways, workloads and AI agents. Access rules live in readable policies instead of application code, so security and product teams can change who can access what without waiting for an engineering release. Cerbos supports RBAC, ABAC, ReBAC and PBAC, reads roles and attributes from your identity provider and databases when each check runs, and checks every AI agent action against the same rules as people. Every access check is logged with the policy that applied, ready for SOC 2, ISO 27001 and HIPAA audits. Cerbos runs hosted, self-hosted or air-gapped. Utility Warehouse, 9fin, 4G Capital, VW, Human Managed, and thousands of other organizations use Cerbos in production.Starting Price: $25/month -
21
HashiCorp Vault
HashiCorp
Secure, store and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets and other sensitive data using a UI, CLI, or HTTP API. Secure applications and systems with machine identity and automate credential issuance, rotation, and more. Enable attestation of application and workload identity, using Vault as the trusted authority. Many organizations have credentials hard coded in source code, littered throughout configuration files and configuration management tools, and stored in plaintext in version control, wikis, and shared volumes. Safeguarding and ensuring that a credentials isn’t leaked, or in the likelihood it is, that the organization can quickly revoke access and remediate, is a complex problem to solve. -
22
Hawcx
Hawcx
Hawcx is a cloud-based authentication platform for organizations securing AI agents and providing passwordless sign-in to employees and customers. For AI-agent workflows, it assigns agents identities linked to accountable people, checks each tool call against policy, routes sensitive actions for human approval, records decisions, and supports agent discovery and revocation. For workforce and customer applications, Hawcx provides device-bound, phishing-resistant sign-in with verification and additional checks based on risk. Teams can use web, mobile, and server SDKs to add passwordless authentication to apps, and enterprise workforce sign-in can federate with existing identity providers. The platform serves security and risk teams, platform and AI developers, and organizations deploying agents or building web and mobile applications that require controlled access and auditable actions.Starting Price: $0/month -
23
Silverfort
Silverfort
Silverfort’s Unified Identity Protection Platform is the first to consolidate security controls across corporate networks and cloud environments to block identity-based attacks. Using innovative agentless and proxyless technology, Silverfort seamlessly integrates with all existing IAM solutions (e.g., AD, RADIUS, Azure AD, Okta, Ping, AWS IAM), extending coverage to assets that could not previously have been protected, such as legacy applications, IT infrastructure, file systems, command-line tools, and machine-to-machine access. Our platform continuously monitors all access of users and service accounts across both cloud and on-premise environments, analyzes risk in real time, and enforces adaptive authentication and access policies. -
24
Permiso
Permiso Security
Permiso is an identity security platform that secures human, non-human, and AI identities across cloud, SaaS, and on-premises environments. The platform is built around its Universal Identity Graph, which connects identities to credentials, machines, agents, permissions, and runtime activity to provide continuous visibility across authentication boundaries. Permiso helps organizations discover identities, evaluate identity risk, detect threats, and defend against account compromise, insider threats, and attacks targeting AI agents and non-human identities. The platform combines identity discovery, posture management, runtime monitoring, threat detection, and response capabilities into a single identity security solution. It continuously analyzes identity behavior, permissions, tool calls, API activity, and machine interactions to identify suspicious activity before it becomes an incident. -
25
SlashID
SlashID
Identity is the most common vector for lateral movement and data breaches. SlashID helps you build a secure, compliant, and scalable identity infrastructure. Manage the creation, rotation and deletion of identities and secrets in a single place. Complete inventory of all your identities and secrets, multi-cloud. Detect initial access, privilege escalation, and lateral movement across your IdPs and cloud environments. Add authentication, authorization, conditional access, and tokenization to your services. Detect leaked key materials in real-time and prevent data breaches by rotating them. Automatically block, suspend, rotate or enforce MFA on a detection to reduce the impact of an attack. Add MFA and conditional access to your applications. Add authentication, authorization, credential tokenization, and conditional access to your APIs and workloads. -
26
Multifactor
Multifactor
Multifactor is a next-generation account-sharing and access-management platform built around zero-trust, post-quantum cryptography, and fine-grained permissioning. Rather than simply sharing credentials, users store their online accounts (passwords, passkeys, 2FA codes) in a secure vault and grant access to humans or AI agents by sending controlled links. Access can be revoked instantly, and the underlying credentials remain hidden. You can define precise permissions (for example, “read transactions” but not “initiate transfers”), capture detailed non-repudiable audit trails of every action, and enjoy built-in encryption and post-quantum security architecture that ensures only authorized parties ever gain access. The platform can also operate as a full identity-and-access-management suite, supporting authentication (biometrics, hardware tokens), authorization, access auditing, device and network endpoint enforcement, and secure account/resource sharing.Starting Price: Free -
27
Cydenti
Cydenti
Cydenti is a cloud-hosted identity security platform for inventorying human and non-human identities across SaaS and cloud services. It uses read-only connections to collect identity, service-account, OAuth application, token, and permission data from supported applications. Security and IAM teams can review dormant or orphaned credentials, excessive access, OAuth risks, and other posture findings; prioritize issues; and prepare governance reports. The service offers a free one-time audit of up to three SaaS applications, a monthly proof-of-concept plan, and continuous monitoring. Documented connectors include Microsoft 365, Microsoft Entra ID, Google Workspace, Salesforce, Okta, AWS, and other SaaS, cloud, identity, and security products. Cydenti targets CISOs and IAM, security, cloud, and compliance teams at small and mid-sized organizations.Starting Price: €490/month -
28
Unified.to
Unified.to
Ship the integrations your customers and prospects need now and watch your revenue soar, without compromising your core product. Deliver secure, deep and powerful integrations for all kinds of use cases with advanced observability and security features. We never store your customers' data, plus, you can even securely store your customers' OAUTH2 access tokens in your AWS Secrets Manager account. Keep your customers' credentials secure with OAUTH2 authentication while giving your customers full control to revoke access tokens anytime. Take charge of branding and security by using your OAUTH2 client IDS and secrets, giving your application full autonomy over authorization pages and access tokens. Skip the headache of juggling different APIs and complex data transformations. Simplify your integration process with one API and one data model.Starting Price: $250 per month -
29
Scalekit
Scalekit
Scalekit is the MCP gateway for AI agents. It is for developers and platform teams who need an agent to call tools as the user, not through a shared service account. One endpoint reaches 600+ connectors and 35,000+ tools, including Salesforce, Gmail, Slack, Notion, HubSpot, Jira, and GitHub. Scalekit finds that user's credentials, checks permission, runs the call, and returns a clean response. Tokens stay in an AES-256 vault. It works with Anthropic, OpenAI, LangChain, Google ADK, Vercel AI, and Mastra. Run it in the Scalekit cloud (US, with EU residency available), in your VPC, or self-hosted. SOC 2 Type II and ISO 27001. A HIPAA BAA is available on Enterprise. The Free plan includes 10,000 tool calls and 10,000 trigger events a month. Growth is $99 a month for 100,000 tool calls. Enterprise pricing is custom.Starting Price: $99/month -
30
Logto
Silverhand
Logto is an Auth0 alternative designed for modern apps and SaaS products. It offers a seamless developer experience and is well-suited for individuals and growing companies. 🧑💻 Comprehensive identity solution Enables easy authentication with Logto SDKs. Supports multiple passwordless and social sign-in methods. Offers customizable UI components to match your brand. 📦 Out-of-the-box infrastructure eliminates the need for extra setup. Provides ready-to-use Management API Offers flexible connectors for customization and scaling, and is customized with SAML, OAuth, and OIDC protocols. 💻 Enterprise-ready with role-based access control (RBAC), organizations (multi-tenant apps), user management, audit logs, single sign-on (SSO), and multi-factor authentication (MFA).Starting Price: $0 -
31
Descope
Descope
Descope is a drag-and-drop customer authentication and identity management platform. Our no / low code CIAM solution enables developers to easily create and customize their entire user journey using visual workflows – from authentication and authorization to MFA and federation. Descope also provides a connectors ecosystem with dozens of third-party services for use cases such as identity verification, fraud prevention, risk-based authentication, and identity orchestration. Descope is built on a scalable multi-tenant architecture with high availability that can support advanced enterprise requirements. Customers use Descope to improve their user onboarding with passwordless authentication, enhance security with MFA and step-up controls, and unify customer identities across business properties. Founded in 2022, Descope is backed by Lightspeed and GGV and is a member of the FIDO Alliance.Starting Price: $0.05 per user per month -
32
Unbound CORE Identity Security
Unbound Security
Authenticate users and machines and protect PKI – seamlessly across all locations and devices. Create virtual enclaves for mobile and for desktop with maximum security and without sacrificing the user experience. Authenticate user access and identify simply and securely with CORE virtual secure enclave SDK. Mobile, desktop, or server-side enabled – CORE keeps credentials safe even if the user’s personal device is compromised. Build virtual smartcards, protect mobile apps, and more with pure software agility. Integrate strong two-factor and multi-factor authentication into a mobile app – no hardware, no one-time password, no software token required. Replace traditional smartcards with virtual ones to authenticate employees and reduce operational strain and total cost of ownership. Protect machine and human electronic identities and the root certificate authority which oversees them. Protecting PII with maximum security, best user experience. -
33
HashiCorp Boundary
HashiCorp
Access any system from anywhere based on user identity. Traditional approaches like SSH bastion hosts or VPNs require distributing and managing credentials, configuring network controls like firewalls, and exposing the private network. Boundary provides a secure way to access hosts and critical systems without having to manage credentials or expose your network, and is entirely open source. Authenticate with any trusted identity provider you are already using. No need to distribute new credentials and manage them. Authorize access based on logical roles and services, instead of physical IP addresses. Manage dynamic infrastructure and integrate service registries so hosts and service catalogs are kept up-to-date. Automate credential injection to securely access services and hosts with HashiCorp Vault. Reduce risk of leaking credentials with dynamic secrets and just-in-time credentials. -
34
Cloudflare MCP Server Portals
Cloudflare
Cloudflare MCP Server Portals is a cloud-hosted access layer for organizations using Model Context Protocol (MCP) servers with AI clients. It brings approved remote MCP servers behind a single HTTP endpoint protected by Cloudflare Access, allowing administrators to apply identity-based policies and manage server availability. Administrators can choose which tools and prompts each portal exposes and route requests through Cloudflare Gateway for HTTP logging and data loss prevention inspection. The portal supports OAuth and service-token authentication; Access records tool, prompt, and resource activity. Users connect through MCP clients such as Claude Desktop, Workers AI Playground, OpenCode, or Windsurf. It serves IT and security teams managing internal or SaaS MCP services and authorized employees or agents. Only remote HTTP servers are supported; local stdio-only servers require a separate HTTP endpoint.Starting Price: $0 -
35
Bevel
Bevel
Bevel is a vendor-agnostic, Git-backed control plane for enterprise AI agents, where an organization’s agents, context, skills, tools, permissions, and identities are defined as files the company owns in its own infrastructure and served to any agent runtime over MCP. Context is stored as typed knowledge nodes with provenance for every fact, including where it came from, who last changed it, and when it was verified, then compiled into a graph that can be traversed, updated, and used for dashboards. Skills are written as plain Markdown procedures that process owners can read, review in diffs, and port across runtimes. Tool manifests define available capabilities, while secrets stay in a vault and access rules determine which agents may read specific files or call endpoints. Each agent has its own identity, credentials, and scope so actions remain attributable. -
36
runx
0state
runx is an open-source runtime and command-line tool for creating, discovering, and executing governed skills for AI agents. Developers can define bounded workflows, grant specific credentials and permissions, and run skills locally with their own provider accounts. Runs can pause for approval or missing input, then resume while retaining a signed receipt that can be inspected and verified. Skills can be installed from a public registry and used with compatible agents such as Claude Code, Cursor, and Codex. An optional hosted service adds managed OAuth connections, scoped grants, API-based run submission and inspection, approval handling, and receipt notarization. The CLI can also operate locally or in a self-hosted environment. runx is intended for developers and platform teams building and operating AI-agent workflows that need explicit authority boundaries and auditable execution.Starting Price: $0 -
37
Eyrane
Eyrane
Eyrane is an AI agent security platform in development for security and engineering teams responsible for agents and automated workflows. It is designed to help organizations discover agents, models, tools, MCP servers, identities, credentials, permissions, and connected systems, then map the access paths between them. The platform is intended to apply runtime policies that allow, require review of, or block agent actions according to identity, permissions, tools, and data sensitivity. Eyrane also describes testing agent behavior against prompt injection, tool misuse, privilege abuse, data exfiltration, and MCP-related scenarios. Its proposed use cases include agent inventory and access review, runtime oversight, MCP security, and AI red teaming. Eyrane is designed for security and engineering teams deploying AI agents across business applications and workflows. -
38
Tragentics
Tragentics
Tragentics is the AI agent security platform that authenticates every agent, injects keys from an encrypted Credential Vault so agents never hold them, routes every call through a content-blind relay, and records a metadata-only audit trail — across platforms and protocols. Tragentics runs no inference and executes no agent logic. It never reads or stores what your agents say. Every agent gets a permanent ID and an Ed25519 identity, keys are encrypted at rest with AES-256-GCM, and every call is authenticated, rate-limited, and recorded as metadata only — never payloads. Protocol-agnostic: it routes MCP, A2A, ACP, OpenAI, ANP, and DID traffic for the agents you already own.Starting Price: $39/month -
39
Gataca
Gataca
Gataca provides simple, compliant, and secure decentralized identity management technology, also known as self-sovereign identity (SSI) technology. Create and digitally sign identity credentials in a standardized format. Design customizable verification templates for on boarding and sign-in processes to offer frictionless access to digital services. Let your users authenticate seamlessly in digital services and control their data with the Gataca Wallet. User data and ID credentials are issued by trusted authorities and protected with biometrics and post-quantum cryptography to ensure they are tamper-proof, allowing instant identity verification without relying on centralized systems.Starting Price: €12 per month -
40
Airweave
Airweave
Airweave is an open source platform that transforms application data into agent-ready knowledge, enabling AI agents to semantically search across various apps, databases, and document stores. It simplifies the process of building intelligent agents by offering no-code solutions, instant data synchronization, and scalable deployment options. Users can connect their data sources using OAuth2, API keys, or database credentials, initiate data synchronization with minimal configuration, and provide agents with a unified search endpoint to access the necessary information. Airweave supports over 100 connectors, including integrations with Google Drive, Slack, Notion, Jira, GitHub, and Salesforce, allowing agents to access a wide range of data sources. It handles the entire data pipeline, from authentication and extraction to embedding and serving, automating tasks such as data ingestion, enrichment, mapping, and syncing to vector stores and graph databases. -
41
AgentShield
AgentShield
AgentShield is a next-generation identity platform built to verify both human users and AI agents acting on their behalf. It enables organizations to confirm who an agent is, whether the person behind the agent has provided explicit authority, and that the agent is trustworthy, all through APIs and JavaScript integrations. The product includes tools that detect agentic sessions on a website. and enforces identity and permission checks for agent-to-agent or agent-to-service interactions under the open Model Context Protocol Identity (MCP-I) specification. With KYA, businesses can securely manage agent identities and permissions, institute audit-trails, automation workflows, and finely-tuned access control for autonomous systems, thereby protecting themselves from misuse of digital identities and ensuring transparency when AI systems act on behalf of users. -
42
Google’s Agent Payments Protocol (AP2) is an open protocol designed together with over 60 payments, fintech, and tech companies (e.g., Mastercard, PayPal, Adyen, Coinbase, Etsy) to enable secure, agent-led transactions across platforms. It builds on earlier open standards like Agent2Agent (A2A) and the Model Context Protocol (MCP) to ensure that when an AI agent initiates or completes a payment on behalf of a user, three core requirements are met: authorization (proving the user explicitly gave permission for that specific purchase), authenticity (ensuring the agent’s intended purchase matches what the user meant), and accountability (clear audit trails and responsibility in case of errors or fraud). The protocol uses mandates, which are cryptographically signed digital contracts backed by verifiable credentials.
-
43
Curity
Curity
The Curity identity server is a standards-based identity and API security platform designed to provide robust authentication and authorization for digital services. It combines identity and API security, enabling scalable customer identity and access management to accelerate digital transformation, growth, and customer loyalty. It offers a range of features, including multi-factor authentication, user journey orchestration, decentralized identity, and secure access management. It supports various identity-related standards such as OAuth, OpenID Connect, and SCIM, ensuring interoperability and compliance with industry protocols. Curity's architecture is built on the principle of separation of concerns, enhancing security, flexibility, and scalability. It provides advanced configuration management with transaction-based changes, rollbacks, and backups, accessible through a web UI, CLI, RESTCONF API, and XML config files. -
44
Agent Substrate
Google
Agent Substrate is an open-source runtime for operating isolated, stateful agent and code-execution sandboxes on Kubernetes. It coordinates actor and worker lifecycles, places active workloads on a shared pool of ready capacity, and can suspend idle environments while preserving memory and filesystem state for later resumption. Sandboxes use gVisor or Cloud Hypervisor microVM isolation, with per-actor identity and network controls. Agent Substrate is designed for platform and infrastructure teams building agent-hosting services, coding environments, and other workloads that execute untrusted or intermittent tasks. The core project is Kubernetes-portable; Google Cloud also provides GKE-optimized deployment tooling. Optional Filestore agent volumes can persist workspaces across suspend and resume cycles.Starting Price: $0 -
45
Permit.io
Permit.io
Full Stack Permissions as a service. Check authorization as done, focus on your core product. Use the right tool for the right task. Use the right language for the right policy. Say no to Lock-in. Mix and match the policy engines you need. Permit.io supports OPA's Rego and now adds AWS' Cedar, and Amazon Verified Permissions. Generate Policy as code directly into Git, and deploy in realtime into the agent in your app. Makes granting permissions as easy as checking a box. Manage and edit your policies with in seconds instead of days. Work with a simple UI, API, or directly with Rego code. Enable multi-tenancy, RBAC, ABAC, ReBAC, and more with a single streamlined interface. Provide low-code/no-code interfaces for non-technical users. Ensure future requirements are met with policy as code. Get Git Ops support out-of-the-box. -
46
Cloptima
Cloptima
Cloptima is an AI and cloud FinOps platform that brings LLM spend governance, multicloud cost intelligence, Kubernetes optimization, query analysis, and engineering cost controls into one operating model. Its AI gateway lets teams use their own OpenAI, Anthropic, Gemini, Vertex AI, and Amazon Bedrock credentials behind encrypted controls, then apply virtual keys, model policies, token limits, budgets, guardrails, and attribution before calls reach providers. Spend analytics break down usage by provider, model, team, application, environment, user, agent session, tool, workflow, and dimensions, while agent controls track retries, loops, tool calls, and runaway-cost risk. Exact and semantic response caching can reduce repeated usage, and intelligent routing can shift eligible traffic to cheaper or faster models with canary rollout and rollback if quality, latency, or errors regress.Starting Price: $49 per month -
47
Clutch
Clutch
Clutch is addressing the increasingly critical challenge of non-human identity security within modern enterprises. As digital infrastructures expand and become more complex, the management and security of non-human identities, ranging from API keys and secrets to tokens and service accounts, have emerged as a pivotal yet often neglected aspect of cybersecurity. Recognizing this gap, Clutch is developing an enterprise platform dedicated to the comprehensive protection and management of these identities. Our solution is designed to fortify the digital backbone of enterprises, ensuring a secure, resilient, and trustworthy environment for their operations. Ever expanding, outpacing human identities by a staggering ratio of 45 to 1. Holds critical privileges and extensive access, essential for mission-critical automated processes. Lacks inherent security controls such as MFA and conditional access policies. -
48
Clerk
Clerk
Clerk is the user management and authentication platform built for developers. It provides complete solutions for sign-up, sign-in, user profiles, account switching, and multi-tenancy. Clerk integrates seamlessly with frameworks like Next.js, React, Vue, and Nuxt, offering secure APIs, prebuilt UI components, and powerful features like OAuth, SSO, and role management. With Clerk, you can skip building auth from scratch and ship production-ready authentication faster, while maintaining security, scalability, and a great user experience.Starting Price: $0 per month -
49
ActivID
HID Global
A versatile, flexible and highly scalable platform for securing access to government and corporate systems and online consumer services. Multi-factor authentication for securing employee remote access to corporate VPNs and other enterprise resources. Multi-factor authentication for securing employee remote access to corporate VPNs and other enterprise resources. Rapidly build and deliver authentication solutions for trusted identity and compliance. Smart card solution for strong authentication to protect workstations, mobile devices and networks. Solution for issuing and managing PIV and PIV-I cards, enterprise access cards and mobile credentials. HID PIV IDMS performs identity proofing, while securely issuing credentials - even to remote users. Leverage service bureau card issuance efficiently and securely. -
50
Totem
Totem
Totem is a hosted network for AI agents that enables organizations to discover, connect, and coordinate agents across organizational boundaries. It gives each agent a verifiable identity and supports controlled access to organizational channels, direct agent messaging, shared tasks, and other workflows. Teams can register agents, manage credentials and permissions, and use the web dashboard or command-line client to configure connections. An HTTPS API lets developers integrate Totem with applications and automated workflows. Use cases include procurement, data access, customer support handoffs, vendor operations, and compliance exchanges. Totem verifies an agent's identity, relationship, and scope for a requested action; it does not make downstream business decisions.Starting Price: $20/month
