Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents)
Vendor: Cloudgeni (Cloudgeni AS) · HQ: Norway · Category: Security · Compliance
Last verified · Added · 4 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
What it does
Cloudgeni says it runs 'your cloud, run by agents': every run follows understand, investigate, change, validate and verify steps. The Compliance Remediation Agent fixes compliance findings automatically by writing IaC, validating it via plan execution and policy checks and opening clean pull requests; it ingests findings from Prowler, AWS Security Hub, Microsoft Defender and Checkov and maps to CIS, SOC 2, ISO 27001 and NIS2. Other agents include a Drift & Import Agent (detects drift and console-created resources and reconciles them as PRs), a PR Review Agent (reviews every infrastructure PR for correctness, security and compliance and enforces policy gates pre-merge), an IaC Pipeline Agent, a chat-based DevOps Agent and a Cost Optimization Agent, plus early-access AI Infrastructure and SRE agents and custom scheduled agents. Guardrails include sandboxed, ephemeral execution, read-only integrations by default, pre-PR validation, human approval gates with plain-English policies ('routine changes merge on their own, critical paths wait for review'), RBAC and SSO/SAML, and an exportable audit trail. It runs as SaaS or self-hosted via Helm, covers AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, OpenShift and on-prem, and is built on Opengeni, Cloudgeni's Apache-2.0 open-source agent runtime. Customer metrics on the site (e.g. Posten ISO 27001 compliance up from 54% to 96%, 79% of agent PRs merged) are vendor claims.
Frameworks
Vendor-claimed CIS Benchmarks, SOC 2, ISO 27001, NIS2, DORA
Pricing (as published)
Published tiers on cloudgeni.ai/pricing: Free ($0, 1 cloud account, 2 repos, 50 agent actions/month, DevOps Agent only); Pro $79 per user/month (Remediation, Drift, Import, DevOps and PR Review agents; CIS, SOC 2, ISO 27001); Enterprise custom (all agents, DORA/HIPAA/PCI-DSS frameworks, SSO, self-hosting options). Confirm current amounts on the vendor pricing page.
Tasks
cloud securityremediationiaccompliance posturepr reviewpolicy as code
Sources
Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.
Use-case comparisons
- Cloud security (CNAPP) AI agents — 8 verified listings (Cloud and container security posture, exposure and remediation)
Compare Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) with
-
-
-
-
-
-
-
- A
-
-
Alternatives
-
AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. (shared tags: DORA) -
Co-Brain Questionnaire Agent (security questionnaire automation) — German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. (shared tags: DORA) -
Hadrian Nova (agentic pentesting) — On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. (shared tags: DORA) - 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: DORA)
-
BRYTER Hybrid Agents (AI plus rule-based workflow agents for DORA, DPA and NDA contract review) — Legal and compliance agents that combine AI document review with BRYTER's rule-based workflow engine to run specific tasks end to end, such as reviewing contracts against DORA, reviewing DPAs and NDAs against a playbook, and generating the amendment agreements or reports. (shared tags: DORA) -
Egerie Jerry (agentic Cyber GRC platform) — European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. (shared tags: DORA)
Stay updated
We use your email only to send the newsletter. See our privacy policy.