Andesite Human-AI SOC (Azimuth for Government) alternatives
Andesite Human-AI SOC (Azimuth for Government) is listed under Security and tagged FedRAMP, SOC 2, ISO 27001, HIPAA. These 103 agents share at least one category with it, ranked by the number of shared framework tags, then by same primary category.
| # | Agent | Category | Shared framework tags | Compare |
|---|---|---|---|---|
| 1 | Appian Agent Studio (AI agents) Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized. | Business operations | FedRAMP, SOC 2, ISO 27001, HIPAA | — |
| 2 | 6clicks Hailey AI Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 3 | Anecdotes Agentic GRC (Agent Library and Agent Studio) Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM. | Compliance | FedRAMP, ISO 27001, HIPAA | — |
| 4 | Comp AI Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 5 | Cypago Agentic Workflows Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 6 | Drata Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 7 | Hyperproof AI-powered GRC platform for program management, evidence, audits and multi-framework compliance. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 8 | IntelliGRC Evan and Alfie AI agents CMMC- and NIST 800-171-focused GRC platform whose AI agents auto-map evidence to assessment objectives (Evan) and run automated control gap assessments with remediation steps (Alfie); FedRAMP 20x Low authorized. | Compliance | FedRAMP, SOC 2, ISO 27001 | — |
| 9 | LogicGate Risk Cloud AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting. | Risk | SOC 2, ISO 27001, HIPAA | — |
| 10 | Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 11 | Scrut Automation Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 12 | Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 13 | Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 14 | Sprinto Autonomous compliance platform aimed at SaaS and growth-stage teams, with AI agents for mapping obligations, gathering evidence, and monitoring controls. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 15 | Strike Graph Compliance platform with published product pricing pages for building and maintaining security certification programs. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 16 | Thoropass Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 17 | Trustero AI (GRC agents) AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 18 | Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 19 | Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | SOC 2, ISO 27001, HIPAA | — |
| 20 | Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Conveyor |
| 21 | Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Hadrian Nova (agentic pentesting) |
| 22 | Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Mondoo |
| 23 | Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Orca Security |
| 24 | SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs SafeBase |
| 25 | Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Snyk |
| 26 | Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | SOC 2, ISO 27001 | Andesite Human-AI SOC (Azimuth for Government) vs Wiz |
| 27 | BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | ISO 27001, HIPAA | — |
| 28 | OneTrust Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight. | Risk | SOC 2, ISO 27001 | — |
| 29 | Optro (formerly AuditBoard) AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance. | Compliance | SOC 2, ISO 27001 | — |
| 30 | SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | SOC 2, ISO 27001 | — |
| 31 | ServiceNow Now Assist Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules. | Business operations | SOC 2, ISO 27001 | — |
| 32 | UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | SOC 2, ISO 27001 | — |
| 33 | Agentforce for Public Sector Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. | Business operations | FedRAMP | — |
| 34 | Credo AI AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs. | Compliance | ISO 27001 | — |
| 35 | RegScale RegML AI agents (RegScale CCM) Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized. | Compliance | FedRAMP | — |
| 36 | CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs CloudSEK AI Agents |
| 37 | Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) |
| 38 | CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs CrowdStrike Charlotte AI |
| 39 | Cyble Blaze AI Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Cyble Blaze AI |
| 40 | Darktrace Cyber AI Analyst Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Darktrace Cyber AI Analyst |
| 41 | Dropzone AI SOC Analyst AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Dropzone AI SOC Analyst |
| 42 | Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Equixly Agentic AI Hacker (continuous API pentesting) |
| 43 | Ethiack Hackian (agentic AI pentesting) Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Ethiack Hackian (agentic AI pentesting) |
| 44 | Exaforce Exabots (agentic SOC) Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Exaforce Exabots (agentic SOC) |
| 45 | Horizon3.ai NodeZero (autonomous pentesting) Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Horizon3.ai NodeZero (autonomous pentesting) |
| 46 | Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Intruder AI Pentesting |
| 47 | Lumos Albus (identity governance agent) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Lumos Albus (identity governance agent) |
| 48 | Microsoft Entra Conditional Access Optimization Agent Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Microsoft Entra Conditional Access Optimization Agent |
| 49 | Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Mindflow AI Agents (agentic SecOps/ITOps automation) |
| 50 | Plerion Pleri (AI security engineer) Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Plerion Pleri (AI security engineer) |
| 51 | Qevlar AI Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Qevlar AI |
| 52 | Sekoia Elevate (AI SOC agents) Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Sekoia Elevate (AI SOC agents) |
| 53 | Sophos MDR AI Agents (Triage and Case Investigation) Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Sophos MDR AI Agents (Triage and Case Investigation) |
| 54 | Sysdig Agentic AI (Sysdig Secure AI agents) Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Sysdig Agentic AI (Sysdig Secure AI agents) |
| 55 | Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Tenable One (Hexa AI) |
| 56 | Torq AI SOC Platform (Socrates and HyperAgents) Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs Torq AI SOC Platform (Socrates and HyperAgents) |
| 57 | TrendAI Vision One Agentic SIEM and Companion Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant. | Security | — | Andesite Human-AI SOC (Azimuth for Government) vs TrendAI Vision One Agentic SIEM and Companion |
| 58 | Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | — |
| 59 | Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | — |
| 60 | Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — |
| 61 | Caseware Verity agents (Disclosure Checklist and Risk Suggestion) Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review. | Compliance | — | — |
| 62 | Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | — |
| 63 | Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | — |
| 64 | Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | — |
| 65 | Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | — |
| 66 | DataGrail Vera (AI privacy agent) AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval. | Risk | — | — |
| 67 | DataSnipper Alwin Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off. | Compliance | — | — |
| 68 | Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | — |
| 69 | Feedzai Farol AI Agent AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review. | Risk | — | — |
| 70 | Fenergo KYRA (Fen-AI agentic workforce) Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes. | Risk | — | — |
| 71 | Fieldguide Field Agents Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator. | Compliance | — | — |
| 72 | First AML AI Screening Agent Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age. | Risk | — | — |
| 73 | FIS AML Investigations Agent Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed. | Risk | — | — |
| 74 | GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | — |
| 75 | GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | — |
| 76 | Hawk AI agents (AML Investigative, CDD and Screening Agents) Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop. | Risk | — | — |
| 77 | Hummingbird AI Agents (Research and Review Agents) AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval. | Risk | — | — |
| 78 | IDfy AI Agents Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance. | Risk | — | — |
| 79 | Ketch Agent Network Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports. | Risk | — | — |
| 80 | Kodex AI regulatory compliance agents Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent. | Compliance | — | — |
| 81 | Leah (formerly ContractPodAi) Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations. | Business operations | — | — |
| 82 | Luci AI Agent Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions. | Risk | — | — |
| 83 | MindBridge AI Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams. | Risk | — | — |
| 84 | MineOS Mira AI Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles. | Compliance | — | — |
| 85 | Modulos AI governance agents (Scout, Risk Agent, Control Assessment Agent) AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team. | Compliance | — | — |
| 86 | Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | — |
| 87 | Privado Wren (AI privacy analyst agent) AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals. | Risk | — | — |
| 88 | ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. | Risk | — | — |
| 89 | Saidot Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments. | Compliance | — | — |
| 90 | Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | — |
| 91 | Signzy Agentic CKYC Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening. | Risk | — | — |
| 92 | Silent Eight Iris 7 AI Agents Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems. | Risk | — | — |
| 93 | SonarQube AI CodeFix Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | — |
| 94 | SpotDraft Sidebar AI agents and VerifAI AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word. | Business operations | — | — |
| 95 | Taktile AI agents (onboarding, sanctions and adverse-media agents) Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review. | Risk | — | — |
| 96 | Tookitaki FinCense APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation. | Risk | — | — |
| 97 | Transcend Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do. | Compliance | — | — |
| 98 | Unit21 AI Agents for fraud and AML AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval. | Risk | — | — |
| 99 | Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | — |
| 100 | Whistic Automation Orchestrator (agentic assessments) Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Risk | — | — |
| 101 | Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | — |
| 102 | ZeroPath (AI-native SAST and autofix) AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | — |
| 103 | Zoven AI Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide. | Risk | — | — |
Ranking is mechanical (shared dataset tags), not a quality judgement. Framework tags indicate relevance, not certification.