Alternatives to Google Cloud Agent Identity
Compare Google Cloud Agent Identity alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Google Cloud Agent Identity in 2026. Compare features, ratings, user reviews, pricing, and more from Google Cloud Agent Identity competitors and alternatives in order to make an informed decision for your business.
-
1
Gemini platform
Google
Gemini platform is an enterprise AI development and machine learning platform from Google Cloud that enables organizations to build, customize, deploy, and manage AI agents and intelligent applications. Formerly known as Vertex AI, the platform provides access to more than 200 foundation models from Google, third-party providers, and open-source communities. Its Agent Studio and Agent Development Kit allow developers to create autonomous agents, design multistep workflows, and integrate artificial intelligence with enterprise data and external tools. The platform also supports custom model training, fine-tuning, machine learning pipelines, model evaluation, and scalable inference infrastructure. Enterprise capabilities include agent identity management, centralized governance, security policies, persistent memory, and monitoring tools for evaluating agent performance. Gemini platform integrates with BigQuery, Google Antigravity, Google Cloud infrastructure, and developer frameworks to support generative AI applications, predictive analytics, and automated business workflows. -
2
Auth0
Okta
Auth0 takes a modern approach to Identity, providing secure access to any application, for any user. Safeguarding billions of login transactions each month, Auth0 delivers convenience, privacy, and security so customers can focus on innovation. Auth0 is part of Okta, The World’s Identity Company™. Auth0 lets you quickly integrate authentication and authorization for web, mobile, and legacy applications, with new Fine Grained Authorization (FGA) that goes beyond role-based access control. Authenticate users across all applications with a customized, secure, and standards-based single login. Universal Login connects users to a central authorization server. Credentials aren’t transferred across sources, which boosts security and protects against phishing and credential stuffing attacks. OAuth 2.0 recommends that only external user agents (like the browser) be used by native applications for authentication flows. Auth0’s Universal Login achieves this while enabling SSO. -
3
Ping Identity
Ping Identity
Ping Identity builds identity security for the global enterprise with an intelligent identity platform that offers comprehensive capabilities including single sign-on (SSO), multi-factor authentication (MFA), directory, and more. Ping helps enterprises balance security and user experience for workforce, customer, and partner identity types with a variety of cloud deployment options including identity-as-a-service (IDaaS), containerized software, and more. Ping has solutions for both IT and developer teams. Enable digital collaboration with simple integrations to these popular tools. Support your employees wherever they are with integrations to these popular tools. Deploy quickly with interoperability across the entire identity ecosystem. Whether you just want single sign-on (SSO) or a risk-based, adaptive authentication authority, starting off with a PingOne solution package lets you only pay for what you need, and gives you room to grow.Starting Price: $5 per user per month -
4
Amazon Bedrock AgentCore Identity
Amazon Web Services
Amazon Bedrock AgentCore Identity is a cloud identity and credential-management service for AI agents and automated workloads. Developers can create workload identities, configure OAuth 2.0 credential providers, and obtain tokens for user-delegated or machine-to-machine access to AWS resources and external services. The service stores and manages credentials, including OAuth tokens, and applies authorization controls so agents can access resources on behalf of users or under their own permissions. It includes inbound authentication options, credential vaulting, workload identity controls, and integration with Amazon Bedrock AgentCore Runtime and Gateway. AgentCore Identity is intended for developers and security teams building agents that need authenticated access to tools, APIs, and user-authorized data. It can be used with compatible OAuth providers and agent applications running on or outside AgentCore.Starting Price: $0.01/1K requests -
5
NewCore
NewCore
NewCore is a next-generation identity provider for humans and AI agents, built around one converged identity core that keeps every human and agentic identity visible, secured, and governed from access to audit. It treats employees, contractors, partners, machines, on-behalf-of actions, delegated agents, and autonomous workloads as first-class identities under one architecture. Identity Security protects the trust behind access with SSO, passkeys, phishing-resistant MFA, secure token signing, authenticator strength scoring, and security-aware policies. Secure Split Key distributes signing authority between NewCore’s cloud and the customer environment so neither side can sign a valid token alone. Identity Discovery maps humans, agents, accounts, applications, authenticators, sessions, and access paths into one live graph, revealing shadow accounts, orphaned credentials, and unmanaged agents. -
6
Hush Security
Hush Security
Hush Security is a platform for discovering and governing AI agents and other non-human identities. It maps agent identities, credentials, permissions, tools, and infrastructure connections, helping security and identity teams assess risk and apply policy controls. The product is intended for organizations deploying AI agents and provides agent inventory, ownership attribution, activity auditing, access governance, and policy enforcement. Hush provides controls for limiting agent permissions and reducing reliance on static credentials, with visibility across agent and developer environments including Claude Code, Cursor, Codex, and Microsoft Foundry. Teams can use the platform to identify agents and credentials, review access, define scoped permissions, and monitor agent activity. Its free tier covers up to 25 protected agents, 50 access policies, and 10,000 discovered identities; paid plans support broader usage.Starting Price: $0 -
7
Hawcx
Hawcx
Hawcx is a cloud-based authentication platform for organizations securing AI agents and providing passwordless sign-in to employees and customers. For AI-agent workflows, it assigns agents identities linked to accountable people, checks each tool call against policy, routes sensitive actions for human approval, records decisions, and supports agent discovery and revocation. For workforce and customer applications, Hawcx provides device-bound, phishing-resistant sign-in with verification and additional checks based on risk. Teams can use web, mobile, and server SDKs to add passwordless authentication to apps, and enterprise workforce sign-in can federate with existing identity providers. The platform serves security and risk teams, platform and AI developers, and organizations deploying agents or building web and mobile applications that require controlled access and auditable actions.Starting Price: $0/month -
8
Keycard
Keycard
Keycard is an identity-and-access infrastructure platform built for the agent-native era, enabling developers and enterprises to securely connect AI agents, users, services, and APIs with real-time, policy-driven identity controls. It issues dynamic, ephemeral access tokens in place of static secrets and supports federated identity models to unify users, agents, and workloads under a distributed authorization framework. The platform provides drop-in SDKs for popular frameworks so developers can build agent-aware applications without becoming IAM experts. Keycard’s data model includes identity-attested agents, tasks, tools, and resources, allowing logical zones with context-aware permissions and auditability. On the policy side, security teams can define deterministic, task-based rules that enforce who (user/agent) can do what (task) on which resource under which conditions, all with full transparency. -
9
Microsoft Entra Agent ID
Microsoft
Microsoft Entra Agent ID provides identity management and access controls for AI agents operating in an organization. IT and identity teams can create agent identity blueprints, issue identities to individual agents, assign owners and sponsors, and manage agent lifecycles and permissions. The platform is available to Microsoft Entra customers and supports OAuth 2.0, agent-to-agent communication, and Microsoft Graph APIs for programmatic provisioning and management. Organizations can connect agents built on Microsoft and third-party platforms, including AWS Bedrock and n8n. Extending Microsoft Entra security features to agents, including Conditional Access, governance, and risk controls, requires a Microsoft Agent 365 license; Agent 365 is included with Microsoft 365 E7. The service serves organizations building or deploying AI agents that need identity, access, and governance controls.Starting Price: $15/user/month -
10
Permiso
Permiso Security
Permiso is an identity security platform that secures human, non-human, and AI identities across cloud, SaaS, and on-premises environments. The platform is built around its Universal Identity Graph, which connects identities to credentials, machines, agents, permissions, and runtime activity to provide continuous visibility across authentication boundaries. Permiso helps organizations discover identities, evaluate identity risk, detect threats, and defend against account compromise, insider threats, and attacks targeting AI agents and non-human identities. The platform combines identity discovery, posture management, runtime monitoring, threat detection, and response capabilities into a single identity security solution. It continuously analyzes identity behavior, permissions, tool calls, API activity, and machine interactions to identify suspicious activity before it becomes an incident. -
11
Arcade
Arcade.dev
Arcade.dev is an AI tool-calling platform that enables AI agents to securely perform real-world actions, like sending emails, messaging, updating systems, or triggering workflows, through authenticated, user-authorized integrations. By acting as an authenticated proxy based on the OpenAI API spec, Arcade.dev lets models invoke external services (such as Gmail, Slack, GitHub, Salesforce, Notion, and more) via pre-built connectors or custom tool SDKs, managing authentication, token handling, and security seamlessly. Developers work with a unified client interface (arcadepy for Python or arcadejs for JavaScript), facilitating tool execution and authorization without burdening application logic with credentials or API specifics. It supports secure deployments in the cloud, private VPCs, or on premises, and includes a control plane for managing tools, users, permissions, and observability.Starting Price: $50 per month -
12
MudraID
Decryptogen
MudraID is a cloud-based identity and trust platform for teams building AI agents, APIs and agent-enabled services. It gives agents distinct cryptographic identities, supports scoped and time-limited delegation, and checks requests against policy, trust and revocation state at action time. Teams can issue, rotate, suspend and revoke agent credentials, enforce per-action permissions, and trace delegation chains. The platform supports OAuth 2.0, OIDC, JWT/JWKS, MCP authorization and signed A2A Agent Cards. Developer options include a Python agent SDK and FastAPI/Starlette middleware; a hash-chained audit trail records decisions and related events. MudraID is intended for product, platform, security and IAM teams that need to govern agent-to-agent and agent-to-service interactions.Starting Price: $99/month -
13
Scalekit
Scalekit
Scalekit is the MCP gateway for AI agents. It is for developers and platform teams who need an agent to call tools as the user, not through a shared service account. One endpoint reaches 600+ connectors and 35,000+ tools, including Salesforce, Gmail, Slack, Notion, HubSpot, Jira, and GitHub. Scalekit finds that user's credentials, checks permission, runs the call, and returns a clean response. Tokens stay in an AES-256 vault. It works with Anthropic, OpenAI, LangChain, Google ADK, Vercel AI, and Mastra. Run it in the Scalekit cloud (US, with EU residency available), in your VPC, or self-hosted. SOC 2 Type II and ISO 27001. A HIPAA BAA is available on Enterprise. The Free plan includes 10,000 tool calls and 10,000 trigger events a month. Growth is $99 a month for 100,000 tool calls. Enterprise pricing is custom.Starting Price: $99/month -
14
Aembit
Aembit
Replace manual and insecure access to non-human identities with our automated and secretless Workload IAM platform. Manage your workload-to-workload access like you do your users: with automated, policy-based and identity-driven controls, so you can proactively eliminate the risk of non-human identities. Aembit boosts security by cryptographically verifying workload identities, in real time, ensuring that only trusted workloads have access to your sensitive data. Aembit injects short-lived credentials into requests just-in-time so you never have to store or protect secrets. Dynamically enforce access rights based on real-time evaluations of workload security posture, geography and other key behavioral characteristics. Aembit secures access amongst workloads in the cloud on-prem and in SaaS. -
15
Idira
Idira by Palo Alto Networks
Idira is Palo Alto Networks’ next-generation identity security platform built for the AI enterprise, designed to secure every human, machine, and agentic identity through one unified control plane. It modernizes privileged access management by extending privilege controls beyond administrators to every identity that can access sensitive systems, data, applications, cloud services, workloads, endpoints, secrets, certificates, SSH keys, and AI agents. It discovers identity risk, applies privilege dynamically, and governs the full lifecycle from first access to final session. Idira replaces static, always-on access with dynamic privilege, just-in-time access, zero standing privilege, continuous verification, policy-driven controls, and real-time enforcement based on identity, device, and context. For human identities, it unifies privileged access, workforce access, endpoint privilege management, and identity governance, helping organizations reduce privilege sprawl. -
16
StackOne
StackOne
StackOne is an AI agent integration platform that enables developers and enterprises to connect autonomous AI agents with business applications, data sources, and enterprise workflows. The platform provides more than 570 prebuilt connectors and 35,000 actions across CRM, HR, recruiting, finance, customer support, identity management, and productivity systems. It supports Model Context Protocol (MCP), Agent-to-Agent (A2A) communication, REST APIs, and software development kits for integrating AI agents with external services. Managed authentication handles OAuth, SAML, API keys, and credential management, while granular permissions control which actions and data each agent can access. Its security capabilities include prompt injection detection, audit logging, execution monitoring, and configurable access policies. StackOne also provides AI-assisted connector development, dynamic tool discovery, data synchronization, and token optimization to help organizations deploy and manage agents.Starting Price: $600/month -
17
systemprompt.io
SystemPrompt
SystemPrompt is a self-hostable AI governance and runtime platform for organizations connecting AI clients, model providers, and tools. It provides a shared gateway and control plane for managing user and agent access, model routing, tool permissions, credentials, and policy checks. Requests and tool actions can be recorded in the organization's environment for audit and usage review. The platform supports connections to Anthropic, OpenAI, Google Gemini, and Groq, and uses the Model Context Protocol (MCP) to expose authorized tools to compatible clients. Teams can extend the runtime with agents, workflows, skills, and business-specific services, and deploy it through a binary, containers, or managed cloud tenants. SystemPrompt is intended for technical and security teams governing AI workloads. Local evaluation is free; production use and cloud hosting require commercial terms. -
18
Defakto
Defakto
Defakto secures every automated interaction by issuing short-lived, verifiable identities to non-human actors such as services, pipelines, AI agents, and machines, eliminating static credentials, API keys, and standing privileges. Their unified non-human identity and access management solution enables discovery of unmanaged identities across cloud, on-premises, and hybrid environments, issuance of dynamic identities at runtime tied to policy, enforcement of least-privilege access, and full audit-ready logging. The product consists of modules; Ledger for continuous discovery and governance of non-human identities; Mint for automated issuance of purpose-bound, ephemeral identities; Ship for secretless CI/CD workflows where hard-coded credentials are removed; Trim for automatic right-sizing of access and removal of over-privileged service accounts; and Mind for securing AI agents and large-language models with the same identity model used for workloads. -
19
Smallstep
Smallstep
Smallstep is the world’s first Device Identity Platform™, built to ensure that only company-owned devices can access sensitive enterprise resources. It secures Wi-Fi, VPNs, ZTNA, SaaS applications, cloud APIs, and developer infrastructure using hardware-bound credentials. At its core is ACME Device Attestation, a modern standard co-developed with Google that binds identity directly to device hardware. This approach prevents credential theft, phishing, and impersonation by making credentials non-exportable. Smallstep extends Zero Trust beyond users by verifying devices with cryptographic assurance at the silicon level. The platform supports all major operating systems, enabling consistent security across modern, distributed workforces.Starting Price: $0 -
20
Peta
Peta
Peta is an enterprise-grade control plane for the Model Context Protocol (MCP) that centralizes, secures, governs, and monitors how AI clients and agents access external tools, data, and APIs. It combines a zero-trust MCP gateway, secure vault, managed runtime, policy engine, human-in-the-loop approvals, and full audit logging into a single platform so organizations can enforce fine-grained access control, hide raw credentials, and track every tool call made by AI systems. Peta Core acts as a secure vault and gateway that encrypts credentials, issues short-lived service tokens, validates identity and policies on each request, orchestrates MCP server lifecycle with lazy loading and auto-recovery, and injects credentials at runtime without exposing them to agents. The Peta Console lets teams define who or which agents can access specific MCP tools in specific environments, set approval requirements, manage tokens, and analyze usage and costs.Starting Price: Free -
21
Bevel
Bevel
Bevel is a vendor-agnostic, Git-backed control plane for enterprise AI agents, where an organization’s agents, context, skills, tools, permissions, and identities are defined as files the company owns in its own infrastructure and served to any agent runtime over MCP. Context is stored as typed knowledge nodes with provenance for every fact, including where it came from, who last changed it, and when it was verified, then compiled into a graph that can be traversed, updated, and used for dashboards. Skills are written as plain Markdown procedures that process owners can read, review in diffs, and port across runtimes. Tool manifests define available capabilities, while secrets stay in a vault and access rules determine which agents may read specific files or call endpoints. Each agent has its own identity, credentials, and scope so actions remain attributable. -
22
Eyrane
Eyrane
Eyrane is an AI agent security platform in development for security and engineering teams responsible for agents and automated workflows. It is designed to help organizations discover agents, models, tools, MCP servers, identities, credentials, permissions, and connected systems, then map the access paths between them. The platform is intended to apply runtime policies that allow, require review of, or block agent actions according to identity, permissions, tools, and data sensitivity. Eyrane also describes testing agent behavior against prompt injection, tool misuse, privilege abuse, data exfiltration, and MCP-related scenarios. Its proposed use cases include agent inventory and access review, runtime oversight, MCP security, and AI red teaming. Eyrane is designed for security and engineering teams deploying AI agents across business applications and workflows. -
23
Composio
Composio
Composio is a platform that enables AI agents to seamlessly interact with external tools and applications. It provides pre-built integrations with over 1,000 apps, allowing agents to execute tasks across services like Slack, Gmail, GitHub, and more. The platform handles complex processes such as authentication, tool execution, and sandboxed environments automatically. Composio supports dynamic tool selection, ensuring agents use the right tools based on user intent. It also enables secure, parallel execution of workflows in isolated environments. Developers can build agents that move beyond conversation to perform real-world actions. By simplifying integrations and execution, Composio helps turn AI agents into powerful, task-performing systems.Starting Price: $49 per month -
24
Google’s Agent Payments Protocol (AP2) is an open protocol designed together with over 60 payments, fintech, and tech companies (e.g., Mastercard, PayPal, Adyen, Coinbase, Etsy) to enable secure, agent-led transactions across platforms. It builds on earlier open standards like Agent2Agent (A2A) and the Model Context Protocol (MCP) to ensure that when an AI agent initiates or completes a payment on behalf of a user, three core requirements are met: authorization (proving the user explicitly gave permission for that specific purchase), authenticity (ensuring the agent’s intended purchase matches what the user meant), and accountability (clear audit trails and responsibility in case of errors or fraud). The protocol uses mandates, which are cryptographically signed digital contracts backed by verifiable credentials.
-
25
Token Security
Token Security
Token Security accelerates secure enterprise adoption of Agentic AI by discovering, managing, and governing every AI agent and non-human identity across the organization. From continuous visibility to least-privilege enforcement and lifecycle management, Token Security provides complete control over AI and machine identities, eliminating blind spots, reducing risk, and ensuring compliance at scale. -
26
Totem
Totem
Totem is a hosted network for AI agents that enables organizations to discover, connect, and coordinate agents across organizational boundaries. It gives each agent a verifiable identity and supports controlled access to organizational channels, direct agent messaging, shared tasks, and other workflows. Teams can register agents, manage credentials and permissions, and use the web dashboard or command-line client to configure connections. An HTTPS API lets developers integrate Totem with applications and automated workflows. Use cases include procurement, data access, customer support handoffs, vendor operations, and compliance exchanges. Totem verifies an agent's identity, relationship, and scope for a requested action; it does not make downstream business decisions.Starting Price: $20/month -
27
Cerbos
Cerbos
Cerbos is an authorization management platform. Teams use it to authorize every identity, govern every action and prove every decision, with fine-grained, contextual and continuous authorization across applications, gateways, workloads and AI agents. Access rules live in readable policies instead of application code, so security and product teams can change who can access what without waiting for an engineering release. Cerbos supports RBAC, ABAC, ReBAC and PBAC, reads roles and attributes from your identity provider and databases when each check runs, and checks every AI agent action against the same rules as people. Every access check is logged with the policy that applied, ready for SOC 2, ISO 27001 and HIPAA audits. Cerbos runs hosted, self-hosted or air-gapped. Utility Warehouse, 9fin, 4G Capital, VW, Human Managed, and thousands of other organizations use Cerbos in production.Starting Price: $25/month -
28
Descope
Descope
Descope is a drag-and-drop customer authentication and identity management platform. Our no / low code CIAM solution enables developers to easily create and customize their entire user journey using visual workflows – from authentication and authorization to MFA and federation. Descope also provides a connectors ecosystem with dozens of third-party services for use cases such as identity verification, fraud prevention, risk-based authentication, and identity orchestration. Descope is built on a scalable multi-tenant architecture with high availability that can support advanced enterprise requirements. Customers use Descope to improve their user onboarding with passwordless authentication, enhance security with MFA and step-up controls, and unify customer identities across business properties. Founded in 2022, Descope is backed by Lightspeed and GGV and is a member of the FIDO Alliance.Starting Price: $0.05 per user per month -
29
NVIDIA OpenShell
NVIDIA
NVIDIA OpenShell is an open, secure runtime for autonomous AI agents that governs how agents execute, what they can access, and where inference traffic goes. Security is enforced in the environment rather than inside the model or application: nothing is permitted by default, permissions are granted through policy, and enforcement happens outside the agent process so it cannot be bypassed through prompting. Each agent runs in an isolated sandbox with no direct network access, limited file access, and kernel-level monitoring of system calls. A gateway acts as the control plane, authenticating users, managing sandbox lifecycles, and delivering policies, settings, credentials, and inference configuration. A supervisor runs outside each sandbox, evaluates network requests against policy at the binary, destination, method, and path levels, and provides credentials only when allowed. -
30
Universal Commerce Protocol (UCP)
Universal Commerce Protocol (UCP)
The UCP and AP2 documentation describes how the Universal Commerce Protocol (UCP) integrates with the Agent Payments Protocol (AP2) to support secure, verifiable transactions initiated by AI agents or platforms on behalf of users, making it possible for commerce systems to handle discovery, checkout, and payment without intermediaries. UCP is fully compatible with AP2, which acts as the trust layer for agent-led transactions by requiring a secure, cryptographically verifiable exchange of intent and authorization between platforms and businesses using Verifiable Digital Credentials (VDCs); this ensures businesses receive signed checkout commitments that can’t be altered mid-flow and platforms issue proofs of payment authorization tied specifically to a cart state, reducing fraud and making transactions final and authentic. -
31
ActivID
HID Global
A versatile, flexible and highly scalable platform for securing access to government and corporate systems and online consumer services. Multi-factor authentication for securing employee remote access to corporate VPNs and other enterprise resources. Multi-factor authentication for securing employee remote access to corporate VPNs and other enterprise resources. Rapidly build and deliver authentication solutions for trusted identity and compliance. Smart card solution for strong authentication to protect workstations, mobile devices and networks. Solution for issuing and managing PIV and PIV-I cards, enterprise access cards and mobile credentials. HID PIV IDMS performs identity proofing, while securely issuing credentials - even to remote users. Leverage service bureau card issuance efficiently and securely. -
32
Logto
Silverhand
Logto is an Auth0 alternative designed for modern apps and SaaS products. It offers a seamless developer experience and is well-suited for individuals and growing companies. 🧑💻 Comprehensive identity solution Enables easy authentication with Logto SDKs. Supports multiple passwordless and social sign-in methods. Offers customizable UI components to match your brand. 📦 Out-of-the-box infrastructure eliminates the need for extra setup. Provides ready-to-use Management API Offers flexible connectors for customization and scaling, and is customized with SAML, OAuth, and OIDC protocols. 💻 Enterprise-ready with role-based access control (RBAC), organizations (multi-tenant apps), user management, audit logs, single sign-on (SSO), and multi-factor authentication (MFA).Starting Price: $0 -
33
Solid
Codapt lnc
Solid is the operating system for always-on AI agents. This AI agent infrastructure runs agent software, allocates resources, connects agents to external systems, and applies shared controls. It provides a persistent runtime, memory, approved computers, identities, accounts, credentials, phone numbers, system access, and controlled spending so work can continue after a chat closes. Agents can use APIs, MCP, code, browsers, desktops, phones, and software interfaces, subject to customer permissions and system policies. Solid can build and test a missing integration, app, API, dashboard, or report needed to finish the job. Customer-set budgets and approvals govern provisioning and purchases. Solid provides agent orchestration plus visibility into available activity, code, resource state, costs, logs, and exceptions, with policies routing sensitive, unclear, or out-of-policy decisions to people. Builders can embed a Solid-powered agent through its API.Starting Price: $40/month/user -
34
Airweave
Airweave
Airweave is an open source platform that transforms application data into agent-ready knowledge, enabling AI agents to semantically search across various apps, databases, and document stores. It simplifies the process of building intelligent agents by offering no-code solutions, instant data synchronization, and scalable deployment options. Users can connect their data sources using OAuth2, API keys, or database credentials, initiate data synchronization with minimal configuration, and provide agents with a unified search endpoint to access the necessary information. Airweave supports over 100 connectors, including integrations with Google Drive, Slack, Notion, Jira, GitHub, and Salesforce, allowing agents to access a wide range of data sources. It handles the entire data pipeline, from authentication and extraction to embedding and serving, automating tasks such as data ingestion, enrichment, mapping, and syncing to vector stores and graph databases. -
35
HashiCorp Boundary
HashiCorp
Access any system from anywhere based on user identity. Traditional approaches like SSH bastion hosts or VPNs require distributing and managing credentials, configuring network controls like firewalls, and exposing the private network. Boundary provides a secure way to access hosts and critical systems without having to manage credentials or expose your network, and is entirely open source. Authenticate with any trusted identity provider you are already using. No need to distribute new credentials and manage them. Authorize access based on logical roles and services, instead of physical IP addresses. Manage dynamic infrastructure and integrate service registries so hosts and service catalogs are kept up-to-date. Automate credential injection to securely access services and hosts with HashiCorp Vault. Reduce risk of leaking credentials with dynamic secrets and just-in-time credentials. -
36
Tragentics
Tragentics
Tragentics is the AI agent security platform that authenticates every agent, injects keys from an encrypted Credential Vault so agents never hold them, routes every call through a content-blind relay, and records a metadata-only audit trail — across platforms and protocols. Tragentics runs no inference and executes no agent logic. It never reads or stores what your agents say. Every agent gets a permanent ID and an Ed25519 identity, keys are encrypted at rest with AES-256-GCM, and every call is authenticated, rate-limited, and recorded as metadata only — never payloads. Protocol-agnostic: it routes MCP, A2A, ACP, OpenAI, ANP, and DID traffic for the agents you already own.Starting Price: $39/month -
37
Multifactor
Multifactor
Multifactor is a next-generation account-sharing and access-management platform built around zero-trust, post-quantum cryptography, and fine-grained permissioning. Rather than simply sharing credentials, users store their online accounts (passwords, passkeys, 2FA codes) in a secure vault and grant access to humans or AI agents by sending controlled links. Access can be revoked instantly, and the underlying credentials remain hidden. You can define precise permissions (for example, “read transactions” but not “initiate transfers”), capture detailed non-repudiable audit trails of every action, and enjoy built-in encryption and post-quantum security architecture that ensures only authorized parties ever gain access. The platform can also operate as a full identity-and-access-management suite, supporting authentication (biometrics, hardware tokens), authorization, access auditing, device and network endpoint enforcement, and secure account/resource sharing.Starting Price: Free -
38
Archestra
Archestra
Archestra is an open source, self-hosted AI platform for deploying and governing agents across an organization. It provides agentic chat for non-developers, apps and skills, shared projects, a server-side agent runtime, MCP orchestration, permission-aware RAG, LLM and MCP proxies, security guardrails, and observability in one platform. Users sign in with SSO, and every tool call runs under that person’s own identity rather than a shared service account. Projects keep chats, files, scheduled tasks, and instructions together, while agents run in sandboxed containers and can start from schedules, emails, or webhooks. MCP servers run in the organization’s own Kubernetes environment and move through security-reviewed promotion flows with separate credentials and network policies. Knowledge bases can connect Confluence, Jira, drives, and internal documents while preserving source-system ACLs, so users only retrieve content they are already allowed to access.Starting Price: Free -
39
Silverfort
Silverfort
Silverfort’s Unified Identity Protection Platform is the first to consolidate security controls across corporate networks and cloud environments to block identity-based attacks. Using innovative agentless and proxyless technology, Silverfort seamlessly integrates with all existing IAM solutions (e.g., AD, RADIUS, Azure AD, Okta, Ping, AWS IAM), extending coverage to assets that could not previously have been protected, such as legacy applications, IT infrastructure, file systems, command-line tools, and machine-to-machine access. Our platform continuously monitors all access of users and service accounts across both cloud and on-premise environments, analyzes risk in real time, and enforces adaptive authentication and access policies. -
40
AQtive Guard
SandboxAQ
AQtive Guard is a cybersecurity platform that helps organizations secure and manage cryptographic assets and non-human identities (NHIs) such as AI agents, keys, certificates, algorithms, and machine identities across their entire IT environment. It delivers continuous discovery and real-time visibility into NHIs and cryptography, integrating with existing security tools, cloud providers, and repositories to provide a unified view of security posture. Using advanced AI and large quantitative models, the platform analyzes vulnerabilities, prioritizes risks, and offers actionable insights with automated remediation workflows to fix issues and enforce policies such as credential rotation or certificate renewal. AQtive Guard supports compliance with evolving standards, including new NIST cryptographic protocols, and enables lifecycle management of cryptographic assets to reduce risk from current and future threats. -
41
runx
0state
runx is an open-source runtime and command-line tool for creating, discovering, and executing governed skills for AI agents. Developers can define bounded workflows, grant specific credentials and permissions, and run skills locally with their own provider accounts. Runs can pause for approval or missing input, then resume while retaining a signed receipt that can be inspected and verified. Skills can be installed from a public registry and used with compatible agents such as Claude Code, Cursor, and Codex. An optional hosted service adds managed OAuth connections, scoped grants, API-based run submission and inspection, approval handling, and receipt notarization. The CLI can also operate locally or in a self-hosted environment. runx is intended for developers and platform teams building and operating AI-agent workflows that need explicit authority boundaries and auditable execution.Starting Price: $0 -
42
JetStream Security
JetStream
JetStream Security is a security-first AI governance platform designed to give enterprises full visibility, control, and accountability over their AI systems by turning them from opaque, fragmented tools into managed, traceable infrastructure. It acts as a centralized control plane that connects identity, runtime governance, observability, and financial oversight into a single system, allowing organizations to “see every AI action, tie actions to accountable owners, [and] keep workflows inside approved boundaries” while enforcing policy at runtime. It introduces agentic identity, binding human, agentic, and non-human identities to specific actions and access permissions, ensuring every invocation, tool call, or workflow can be traced and governed through least-privilege access principles. Through continuous runtime governance, JetStream compares live AI behavior against approved blueprints, using immutable logging and real-time observability to detect drift. -
43
Locurity
Locurity
Locurity provides patent pending 360 degree security platform using 'zero trust' security model that continuously defends this new enterprise ‘identity perimeter’. Identity is the new enterprise perimeter, protect it now. Defend against 81% of all cyber attacks. Security breaches often start with compromised identity (Verizon DBIR). Detect cyber attacks proactively. Protect before attacks turn to breaches. Secure your enterprise assets. Prevents numerous identity/credential borne attacks such as - phishing, whaling, hacking, guessing, brute forcing, scraping, social engineering, keylogging, ATO, credential stuffing etc. Decentralized architecture - no honeypot of identity crown jewels. Increase productivity while minimizing cost of login/password/access related helpdesk tickets. Email, VPN, SaaS (Office365, GSuite, Salesforce, BOX, Slack...), Healthcare/Finance apps and many more. Biometric (TouchID/FaceID), Pin/Pattern and elliptic curve cryptography based multi factor authentication. -
44
Google Cloud’s Confidential Computing delivers hardware-based Trusted Execution Environments to encrypt data in use, completing the encryption lifecycle alongside data at rest and in transit. It includes Confidential VMs (using AMD SEV, SEV-SNP, Intel TDX, and NVIDIA confidential GPUs), Confidential Space (enabling secure multi-party data sharing), Google Cloud Attestation, and split-trust encryption tooling. Confidential VMs support workloads in Compute Engine and are available across services such as Dataproc, Dataflow, GKE, and Gemini Enterprise Agent Platform Notebooks. It ensures runtime encryption of memory, isolation from host OS/hypervisor, and attestation features so customers gain proof that their workloads run in a secure enclave. Use cases range from confidential analytics and federated learning in healthcare and finance to generative-AI model hosting and collaborative supply-chain data sharing.Starting Price: $0.005479 per hour
-
45
Agent Compute Engine
Google
Agent Compute Engine is a managed Google Cloud compute service that provides execution environments for AI agents. Each agent receives a hardware-isolated microVM with its own guest kernel and root-level control. The service supports rapid startup, pausing, checkpointing, snapshots, and resume workflows. Persistent workspaces retain agent files and context across sessions, while copy-on-write memory sharing supports parallel environments from common images. Agents can run code, shell commands, and browser actions in isolated sandboxes, with governed access to enterprise data through Google Cloud networking and identity controls. Developers can configure environment images, identity, network access, and lifecycle while Google manages the underlying compute fleet. The platform is designed for interactive assistants, coding agents, browser-based tasks, and large-scale evaluation and reinforcement-learning workloads. -
46
M4PAM
Mamori.io
Unlike other PAM solutions, M4PAM extends privileged access control into the database. It combines server-level access management, SSH and RDP, identity-based sessions, credential management, and full session recording, with a Database Privileged Access Management (DBPAM) layer that governs which tables, columns, and rows each user can see, edit, or export. Traditional PAM disables an Active Directory account but leaves local database credentials untouched; M4PAM closes that gap. Users authenticate through single sign on and two factor authentication instead of shared credentials, request access on demand, and lose it automatically once it expires. An SQL Firewall and dynamic data masking add further control over database activity. M4PAM can run as a standalone PAM solution or layer on top of an existing third party PAM to close the database gap without replacing it. It connects to native database clients and BI tools, and deploys without agents.Starting Price: $1440/user/year -
47
Credential Agent
Credential Agent
Credential Agent is inexpensive software designed to help store and keep updated, employee or supplier credentials. This document management software was specifically built to reduce the amount of time and improve the accuracy of, important credentials such as licenses, certifications, immunizations, background checks, human resource forms, insurance, and other documents that expire. Credential Agent works in a Software as a service (Saas) environment which requires no downloading of software or hardware and is super secure. Credential Agent can also be contracted with so that we take full responsibility of keeping your credentials updated and verified using our software and staff. By using Credential Agent, you can reduce the risks of lawsuits, be better prepared for audits, and gain more time to work on other key company initiatives. Our inexpensive software ensures your employee or vendor credentials are kept up to date. -
48
HOL Guard
HOL
HOL Guard is a local-first runtime security layer for AI agents that watches what an AI assistant is about to do and stops risky actions before they happen. It sits between the agent and the computer, evaluating supported tool calls and local artifacts for threats such as secret and credential exposure, destructive commands, prompt-injection-driven actions, malicious or changed packages, risky MCP configuration, and unsafe plugins, skills, hooks, and settings. Known threats can be blocked automatically, while ambiguous actions are paused for user approval so people remain in control. Guard runs entirely on the developer’s machine, works offline, and does not upload files, prompts, or passwords. Local checks typically complete in under 50 milliseconds and require no changes to existing code or routines. It supports coding agents including Claude Code, Cursor, Codex, Gemini CLI, OpenCode, Hermes, and OpenClaw, with tailored integrations that inspect actions before execution.Starting Price: $4.99 per month -
49
Zynap
Zynap
Zynap is a cloud-based cybersecurity operations platform for enterprise security teams and managed security providers. It combines threat intelligence, exposure and credential analysis, malware sandboxing, and AI-assisted operations in an automation environment. Security professionals can use a visual low-code workflow canvas and AI agents to investigate threats, connect intelligence with assets and identities, prioritize risks, and coordinate actions across existing security tools. Use cases include threat enrichment, incident handling, vulnerability and credential validation, malware analysis, and remediation workflows. Zynap is designed to work with organizations’ existing security stack, including SIEM, endpoint, identity, ticketing, and threat-intelligence tools, and serves internal SOC teams, enterprise cyber-defense organizations, and MSSPs. -
50
NVIDIA Open Agent Safety Platform is an open reference design for continuously monitoring and governing AI agent behavior, helping organizations keep agents isolated, observable, auditable, and within defined operational boundaries. It combines runtime governance, continuous threat detection, and hardware-isolated policy enforcement to secure enterprise AI agents from testing through deployment. NVIDIA OpenShell provides an open-source runtime that separates how agents execute from how they reach data, tools, and external systems, using sandboxed execution and deterministic, zero-trust policy enforcement to control what agents can see, do, and interact with. Policies are enforced outside the agent process, helping limit the impact of unexpected behavior. NVIDIA Sentry adds an independent security layer that observes agent requests and responses, establishes verifiable agent identities, continuously governs access to data, tools, APIs, and services, and can quarantine agents.
