Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) alternatives
Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) is listed under Security. These 261 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
All category-sharing alternatives
| Agent | Category | Shared framework tags | Pair page | Add |
|---|---|---|---|---|
 7AI agentic security platform Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE). | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs 7AI agentic security platform | |
 Abnormal AI Security Mailbox (Abnormal AI for Government) Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Abnormal AI Security Mailbox (Abnormal AI for Government) | |
 Adaptive Security Agentic Email Security and Phish Triage API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Adaptive Security Agentic Email Security and Phish Triage | |
 Aikido Attack AI Pentesting Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Aikido Attack AI Pentesting | |
 AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) | |
| A Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Andesite Human-AI SOC (Azimuth for Government) | |
 Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) Agent-led managed SOC on the Aurora Superintelligence Platform: a 'Swarm of Experts' of oversight, authoritative and process agents runs triage, investigation, response, threat hunting, threat intel and detection engineering, with Arctic Wolf's human experts in the loop for novel cases and critical decisions. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) | |
 Attic IVON (Agentic MDR for Microsoft 365) Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Attic IVON (Agentic MDR for Microsoft 365) | |
 AWS Continuum for penetration testing (formerly AWS Security Agent) AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs AWS Continuum for penetration testing (formerly AWS Security Agent) | |
 C1 Autonomous Worker and C1 Agents (identity governance AI agent, formerly ConductorOne) Governed AI agent on C1's identity platform that carries out identity work end to end from a plain-language request (revoking stale admin grants, building access reviews, assembling audit evidence on who reached production, finding orphaned entitlement owners), acting only within the operator's own permissions and logging every action. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs C1 Autonomous Worker and C1 Agents (identity governance AI agent, formerly ConductorOne) | |
 Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) Check Point's API-based, prevention-first email and collaboration security (Harmony Email & Collaboration, formerly Avanan) for Microsoft 365, Gmail, Teams, Slack and file-sharing apps. Check Point says autonomous AI agents investigate threats, correlate activity into campaigns, prioritise incidents and orchestrate remediation. Check Point Infinity Platform for Government (which includes Harmony Email) is FedRAMP Moderate and GovRAMP Authorized at platform level; Check Point Harmony is TX-RAMP Level 2 — none of those registry rows name the AI agents. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) | |
 CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs CloudSEK AI Agents | |
 Co-Brain Questionnaire Agent (security questionnaire automation) German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Co-Brain Questionnaire Agent (security questionnaire automation) | |
 Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Conveyor | |
| Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) | |
 CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs CrowdStrike Charlotte AI | |
 Cyble Blaze AI Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Cyble Blaze AI | |
 D3 Morpheus (agentic AI SOC platform) Agentic SOC platform that autonomously triages, investigates and responds across the full alert lifecycle, grading every verdict by its evidence and deferring to a human when uncertain. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs D3 Morpheus (agentic AI SOC platform) | |
 Darktrace Cyber AI Analyst Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Darktrace Cyber AI Analyst | |
| AI agent in Datadog Cloud SIEM that autonomously investigates security signals and returns evidence-backed Benign or Suspicious verdicts. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Datadog Bits AI Security Analyst | |
 Doppel agentic social engineering defense (Email Security, Phishing Triage and agentic takedowns) Social engineering defense platform where AI agents triage employee-reported phishing, remove malicious mail automatically, tune email detection policies and trace phishing back to its sending infrastructure and links to execute takedowns, alongside brand-impersonation takedowns across web, social, ads and app stores. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Doppel agentic social engineering defense (Email Security, Phishing Triage and agentic takedowns) | |
 Dropzone AI SOC Analyst AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Dropzone AI SOC Analyst | |
 Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Equixly Agentic AI Hacker (continuous API pentesting) | |
 Ethiack Hackian (agentic AI pentesting) Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Ethiack Hackian (agentic AI pentesting) | |
 Exaforce Exabots (agentic SOC) Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Exaforce Exabots (agentic SOC) | |
 Fortinet FortiSOC (agentic AI SOC platform with FortiAI-Assist) Cloud-delivered SOC platform (SIEM, SOAR, UEBA, ITDR, threat intelligence and case management in one SaaS) whose agentic AI investigates and correlates alerts across assets and identities, then recommends or executes response actions under analyst oversight. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Fortinet FortiSOC (agentic AI SOC platform with FortiAI-Assist) | |
 Google Security Operations Triage and Investigation Agent AI agent in Google Security Operations that autonomously investigates SIEM alerts and returns a verdict, confidence score, timeline and next steps. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Google Security Operations Triage and Investigation Agent | |
 Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Hadrian Nova (agentic pentesting) | |
 Horizon3.ai NodeZero (autonomous pentesting) Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Horizon3.ai NodeZero (autonomous pentesting) | |
 Hoxhunt Respond (automated phishing incident response) Finnish human-risk platform whose Respond module automatically investigates every employee-reported email, groups related reports into one campaign incident, suppresses safe and duplicate reports, and removes confirmed malicious messages from all affected inboxes without waiting for an analyst. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Hoxhunt Respond (automated phishing incident response) | |
 Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) Amsterdam-built autonomous SOC platform whose Virtus agents triage every alert through a 7-stage pipeline, return a verdict with confidence and evidence, and hand cases to an investigation agent, with sovereign/on-prem AI options. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) | |
 Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Intruder AI Pentesting | |
 Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) API-based email security for Microsoft 365 and Google Workspace that runs three AI agents: a Phishing SOC Agent for L2-style forensic investigation of suspicious emails, a Red Teaming Agent that models attacks aimed at your organisation and hardens detection, and a Phishing Simulation Agent. Plans include agentic autonomous remediation. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) | |
 Keepnet Incident Responder AI agent (phishing incident response and agentic security awareness) Human risk management platform whose AI agent reviews user-reported emails, opens investigations and proposes next steps in Incident Responder, with every action held in a human approval queue; the same agent builds and runs phishing simulations and awareness training. Per-user pricing is published. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Keepnet Incident Responder AI agent (phishing incident response and agentic security awareness) | |
 KnowBe4 AIDA (AI Defense Agents) Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes). | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs KnowBe4 AIDA (AI Defense Agents) | |
 Lumos Albus (identity governance agent) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Lumos Albus (identity governance agent) | |
 ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents) Prebuilt AI agents in ManageEngine Endpoint Central that triage EDR events (MITRE ATT&CK mapping, prioritized next steps), investigate device problems and diagnose failed patches, plus Agent Studio for custom endpoint agents. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents) | |
 ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) AI agents inside ManageEngine's Log360 Cloud SIEM: an Investigation Agent that runs multi-stage alert investigations and writes an investigation report, prebuilt Alert Correlation and User Activity Review agents, and a no-code Agent Studio for custom SOC agents. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) | |
 Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) Cloud workspace security for Google Workspace and Microsoft 365 with an AI agent that triages, clusters and remediates user-reported phishing across the organisation, plus an OAuth Remediation Agent that investigates third-party app and AI-agent grants and can revoke tokens on its own. Per-user pricing is published. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) | |
 Maze AI Agents (Maze Cloud and Maze Code) UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Maze AI Agents (Maze Cloud and Maze Code) | |
 Microsoft Entra Conditional Access Optimization Agent Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Microsoft Entra Conditional Access Optimization Agent | |
 Microsoft Security Copilot Phishing Triage Agent (Defender) Security Copilot agent in Microsoft Defender that autonomously triages user-reported phishing, resolves false positives and explains each verdict. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Microsoft Security Copilot Phishing Triage Agent (Defender) | |
 Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Mindflow AI Agents (agentic SecOps/ITOps automation) | |
 Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Mondoo | |
 NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response) Japanese managed AI SOC service in which NTT DOCOMO BUSINESS's own AI Agent periodically reviews Microsoft Sentinel incidents, correlates endpoint, network and authentication logs and writes an analysis report back, and Sentinel's managed SOAR playbooks then respond to the alerts automatically, with NTT security experts on call. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs NTT DOCOMO BUSINESS WideAngle AI SOC (AI Agent log analysis with managed SOAR auto-response) | |
 Opal Paladin AI identity agent in Opal that reviews access requests, investigates context and approves, denies or escalates with recorded reasoning. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Opal Paladin | |
 Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Orca Security | |
 Patrowl Agentic AI Penetration Testing Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Patrowl Agentic AI Penetration Testing | |
 Phished AI security agents (Report Triage, Orchestration, Simulation and Real-Time Protection agents) Belgian human-risk platform with a suite of AI agents that run the phishing training programme (orchestration, simulation, brand, supplier and deepfake simulation agents), triage every reported email with a verdict and a drafted reply, and check clicked links in an isolated environment in real time. New content needs admin approval and every action is logged. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Phished AI security agents (Report Triage, Orchestration, Simulation and Real-Time Protection agents) | |
 Plerion Pleri (AI security engineer) Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Plerion Pleri (AI security engineer) | |
 Proofpoint Satori agents (Abuse Mailbox Agent and DLP Triage Agent) Agentic AI layer inside Proofpoint's platform. The Satori Abuse Mailbox Agent classifies every user-reported email that needs manual review (phish, malware, spam or clean) and can trigger configured quarantine or tagging workflows. A DLP Triage Agent does the same for data-loss alerts, with guardrails, chat explanations and audit logs. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Proofpoint Satori agents (Abuse Mailbox Agent and DLP Triage Agent) | |
 Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) Agentic AI SOC platform whose agents investigate every alert end to end, respond through scoped Agent Actions autonomously or with sign-off, hunt threats and tune detections. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) | |
 Qevlar AI Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Qevlar AI | |
 Reliance Cyber RADAR UK agentic MDR platform on Google Security Operations with specialist AI agents for detection engineering, triage, response and self-healing, under human oversight. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Reliance Cyber RADAR | |
 ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate). | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) | |
 RunSybil Sybil (AI offensive security / autonomous pentesting) AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs RunSybil Sybil (AI offensive security / autonomous pentesting) | |
 SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs SafeBase | |
 Securonix Sam, the AI SOC Analyst (Agentic Mesh) An AI SOC analyst built into the Securonix Unified Defense SIEM that triages, correlates and enriches alerts, writes investigation summaries and prepares cases, coordinated by the Agentic Mesh of specialized agents under human approval. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Securonix Sam, the AI SOC Analyst (Agentic Mesh) | |
| S Sekoia Elevate (AI SOC agents) Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Sekoia Elevate (AI SOC agents) | |
 SentinelOne Purple AI (agentic AI security analyst) Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs SentinelOne Purple AI (agentic AI security analyst) | |
 Simbian AI Pentest Agent An autonomous AI agent for on-demand, ongoing penetration testing that adapts its testing logic in real time and focuses findings on each customer's business context, developed with LRQA's pentesting methodology. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Simbian AI Pentest Agent | |
 Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Snyk | |
 Sophos MDR AI Agents (Triage and Case Investigation) Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Sophos MDR AI Agents (Triage and Case Investigation) | |
 StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt) AI-native email security for Microsoft 365 and Google Workspace in which a multi-LLM reasoning engine (TRACE) investigates each email's intent against your business context and blocks attacks. Three classes of agents give employees plain-English verdicts in Outlook and Gmail, send pre-investigated, MITRE-mapped cases to the SOC, and hunt and remediate across mailboxes. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt) | |
 Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) Email security platform whose AI agents triage user-reported and flagged emails end to end (ASA, with passive or active auto-remediation modes) and write backtested detections for new attacks (ADÉ), which default to one-click human approval and can auto-activate when they clear a precision threshold. Runs as SaaS or self-hosted in AWS, including GovCloud. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) | |
 Swimlane AI SOC (Intelligent Deep Agents on Turbine) Swimlane's AI SOC product, built on its Turbine automation platform, uses autonomous 'deep agents' to plan and run alert investigations, with explainable decisions, auditable actions and AI-generated plans that analysts can review and turn into playbooks. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Swimlane AI SOC (Intelligent Deep Agents on Turbine) | |
 Synack Sara AI Pentesting Synack's Autonomous Red Agent (Sara) for agentic pentesting, with exploitable findings validated by the Synack Red Team. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Synack Sara AI Pentesting | |
 Sysdig Agentic AI (Sysdig Secure AI agents) Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Sysdig Agentic AI (Sysdig Secure AI agents) | |
 Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Tenable One (Hexa AI) | |
 Torq AI SOC Platform (Socrates and HyperAgents) Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Torq AI SOC Platform (Socrates and HyperAgents) | |
 TrendAI Vision One Agentic SIEM and Companion Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs TrendAI Vision One Agentic SIEM and Companion | |
 Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) | |
 WedgeX AI SOC Agent Australian AI SOC agent that enriches, investigates and recommends escalate/close actions on alerts, proposing containment for human approval. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs WedgeX AI SOC Agent | |
 Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Wiz | |
 Wolfia Questionnaire Agent (security questionnaires and trust center) Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Wolfia Questionnaire Agent (security questionnaires and trust center) | |
 YesWeHack Agentic Pentest On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs YesWeHack Agentic Pentest | |
 Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment) AI-first security operations product launched September 2026. Specialized autonomous AI agents triage alerts, investigate root cause, assign evidence-backed verdicts and trigger response workflows, and Zscaler's inline Zero Trust controls can automatically isolate users, block command-and-control traffic and cut off lateral movement. | Security | — | Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) vs Zscaler Agentic SOC (specialized AI agents for triage, investigation and inline containment) | |
 6clicks Hailey AI Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. | Compliance | — | — | |
| Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. | Business operations | — | — | |
 Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | — | |
 AiPrise AI agents (AML Agent, Website Agent and Document Agent) KYC/KYB and compliance platform whose AI agents review AML screening hits (sanctions, PEP, adverse media) and recommend a decision under the customer's AML policy, check business websites for legitimacy and risk with ongoing monitoring, and review documents, with an analyst confirming the outcome. | Risk | — | — | |
 Akitra Andromeda AI compliance agents AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. | Compliance | — | — | |
 Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | — | |
 Anecdotes Agentic GRC (Agent Library and Agent Studio) Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM. | Compliance | — | — | |
 Appian Agent Studio (AI agents) Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized. | Business operations | — | — | |
 AppZen AI agents (Autonomous AP, Expense Audit and AI Agent Studio) Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions. | Business operations | — | — | |
 Archer Evolv AI Operators (Evolv Foundation and Evolv Workplace) Governed GRC agents ('AI Operators') inside the Archer system of record: identity-bound, scope-limited, human-supervised agents for control generation and assurance, regulatory change, reportable-event review and record hygiene; the Archer Evolv product is TX-RAMP Level 2 certified. | Compliance | — | — | |
 Athereon LAiKA (AI agent for ISMS, risk and questionnaires) German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything. | Compliance | — | — | |
 AuditFile Agentic AI Orchestrator Suite (audit agents) Multi-agent orchestration for financial-statement audits: an orchestrator staffs engagements with long-running agents that draft disclosure-checklist answers, categorise trial balances, generate PBC request lists, prepare and perform procedures and draft workpapers, all ending in a human sign-off queue. | Compliance | — | — | |
 Auditoria AI agents (AP Helpdesk, AP Invoices, AP Accruals, AP Vendor Watch, AP Statement Reconciliation, AR Collections, AR Remittances) AI agents that run accounts payable and receivable work inside finance's own ERP and inboxes: they answer vendor emails, capture and code invoices, chase accruals, monitor supplier bank, tax ID and sanctions data, reconcile vendor statements, and run collections and remittance matching within policy guardrails. | Business operations | — | — | |
| Agentic process automation platform for building goal-driven AI agents that use the Process Reasoning Engine to reason, bring in a human where needed and orchestrate bots, APIs, documents and other agents, with built-in governance and guardrails. | Business operations | — | — | |
 Avokaado Avo AI (governed contract agents) Contract lifecycle platform whose Avo AI turns each contract type into a governed agent (NDA, Vendor, Procurement and KYC Agents) that drafts, negotiates, approves and analyses within your playbooks, with every action scored and logged. | Business operations | — | — | |
 Beam AI self-learning agents (finance and operations agent suites) Agentic automation platform that turns SOPs into self-learning production agents, with prebuilt finance agents for invoice reconciliation, accounts receivable and financial compliance and reporting. | Business operations | — | — | |
 Behavox Digital Employees (AI agents for compliance surveillance alert review) AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision. | Compliance | — | — | |
 BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | — | — | |
 Black Duck Signal (agentic AI AppSec) Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP. | Code security | — | — | |
 Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — | |
 BlackLine Verity AI agents (Verity Prepare multi-agent reconciliation, Verity Accruals and other close agents) Suite of specialised AI agents in BlackLine's financial close platform; Verity Prepare (GA July 2026) is a multi-agent system that ingests supporting documents, matches transactions, isolates anomalies, explains variances and assembles audit-ready reconciliation packages for human approval, and Verity Accruals automates the accruals process. | Business operations | — | — | |
 Box AI Agents (Box Agent, Extract, Classification and custom agents; Box for Government) Permissions-aware AI agents on Box's content platform: the Box Agent plans multi-step work across files, Extract agents turn documents into structured metadata, a Classification agent labels sensitive content, and Box AI Studio builds custom agents; Box AI sits inside Box's FedRAMP High boundary per the Marketplace listing. | Business operations | — | — | |
 Bretton AI agentic back-office platform (formerly Greenlite AI) Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged. | Risk | — | — | |
 Caseware Verity agents (Disclosure Checklist and Risk Suggestion) Audit-engagement agents inside Caseware: the Disclosure Checklist Agent drafts cited Yes/No/N-A checklist responses from financial statements, and the Risk Suggestion Agent drafts engagement-specific risks for auditor review. | Compliance | — | — | |
| AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision. | Risk | — | — | |
 Cav Compliance OS agents (formerly Caveonix) Agentic cyber assurance and continuous compliance platform whose AI agents collect evidence, test controls, find gaps against 50+ frameworks (FISMA, NIST 800-53, FedRAMP, CMMC) and generate ATO artifacts; the platform is FedRAMP High authorized. | Compliance | — | — | |
 Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | — | |
 Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | — | |
| Agentic investigation tool built on Thomson Reuters CLEAR public-records data. From a plain-language question it plans and runs searches across CLEAR data and the open web, resolves conflicting records and returns concise cited findings with a record of the searches it ran, for AML, fraud, program-integrity and law-enforcement investigators. | Risk | — | — | |
 CleverChain AI agents (VERA autonomous due diligence and LUMA screening) KYB, KYC, AML and third-party due-diligence platform where the VERA agent runs end-to-end investigations (ownership chain, business activity, sanctions and adverse media) into a cited, policy-mapped report, and LUMA handles AML screening and ongoing monitoring, with analysts approving high-risk decisions. | Risk | — | — | |
 Co-Brain Legal Agent (playbook contract review and redlining) German legal agent that detects contract type, jurisdiction and parties, applies the company's playbook to every clause, flags deviations with page-cited reasoning and produces playbook-compliant redlines in Word, Outlook and Teams. | Business operations | — | — | |
| Agentic legal AI from Thomson Reuters that plans and executes multi-step legal work (research, document analysis, drafting and verification) grounded in Westlaw and Practical Law, including a Drafting Agent in Word that reviews agreements against playbooks. | Business operations | — | — | |
 Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | — | |
 ComplyAdvantage AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions. | Risk | — | — | |
 Complyance GRC AI Agents Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. | Compliance | — | — | |
 Credo AI AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs. | Compliance | — | — | |
 Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | — | |
 Cycode AI Teammates (Exploitability, Remediation and Change Impact agents) Cycode's AppSec AI agents that assess the exploitability of findings, generate fixes, analyse change impact and query the risk graph inside the Cycode platform. | Code security | — | — | |
 Cypago Agentic Workflows Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. | Compliance | — | — | |
 Data Adhikaar DPDPA agents (ten-agent compliance fabric) India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades. | Risk | — | — | |
 DataGrail Vera (AI privacy agent) AI privacy agent built into DataGrail's privacy platform that autofills privacy and AI-risk assessments, classifies cookies, detects AI risk, suggests processing activities and troubleshoots DSR integration errors, acting only with user approval. | Risk | — | — | |
 DataSnipper Alwin Agentic automation platform for audit and finance in which agents run end-to-end procedures over evidence and return traceable workpapers for human review and sign-off. | Compliance | — | — | |
 Definely Enhance Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight. | Business operations | — | — | |
 Devin Cognition’s autonomous coding agent. Listed here only for documented Snyk MCP/CLI scanning and SonarQube/Snyk/Checkmarx IDE plugins — not as a dedicated security product. | Code security | — | — | |
 Docusign Iris agents and Agent Studio (Intelligent Agreement Management) Agents in Docusign IAM that review agreements against company standards and playbooks, suggest edits, request approvals, monitor contracts for risks and obligations, and can be built as custom agents in Agent Studio and used as steps in Workflow Builder. | Business operations | — | — | |
 Dotfile Autonomy (KYB/AML review agents) Specialised AI agents that pre-investigate KYB cases end to end (documents, UBOs, AML screening hits, online reputation), auto-approve routine cases under the customer's policy and escalate edge cases with a full audit trail. | Risk | — | — | |
 Drata Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. | Compliance | — | — | |
 Egerie Jerry (agentic Cyber GRC platform) European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. | Compliance | — | — | |
 Endor Labs security agents (agentic triage and remediation) Pre-built AppSec agents that read Endor findings against your source, write SAST fixes or file exceptions, pick safe dependency upgrades and open PRs, and answer malware-exposure and CI/CD posture questions inside your coding agents. | Code security | — | — | |
 Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | — | |
 Expenzing FinCat (autonomous AP scrutiny, expense processing and fraud-control agents) Indian spend-management vendor's AI suite (launched Sep 2, 2026). An autonomous AP Scrutinizer runs 20+ vendor-compliance, arithmetic and anomaly checks on every invoice and confidence-scores it for straight-through processing or human review. Fraud Control Agents scan expense receipts for doctored or fake documents. | Business operations | — | — | |
 Factory Droids Factory’s Droid coding agents. Listed here only because Factory’s own pages document Snyk Studio integration for scan/fix/verify inside Droid workflows. | Code security | — | — | |
 Feedzai Farol AI Agent AI agent embedded in Feedzai's RiskOps Studio that analyses fraud rules, retrieves and summarises alert data for investigations, and drafts SAR narratives for investigator review. | Risk | — | — | |
 Fenergo KYRA (Fen-AI agentic workforce) Governed agentic workforce on Fenergo's client lifecycle (CLM/KYC) platform: agents complete routine KYC steps, resolve routine screening hits, process documents and source client data, with humans approving outcomes. | Risk | — | — | |
| Agent workforce for audit and advisory firms: agents plan engagements, run testing through to workpapers, review conclusions against evidence and draft financial statements, coordinated by Field Orchestrator. | Compliance | — | — | |
 First AML AI Screening Agent Search and review agents that run the AML screening lifecycle — finding matches, assessing them against the entity profile, and re-checking hits as cases age. | Risk | — | — | |
 FIS AML Investigations Agent Governed AI agent for bank AML alert triage, case investigation and SAR narrative drafting, with analyst confirmation required before any case is closed, escalated or filed. | Risk | — | — | |
 Flank (autonomous legal agents) Supervised AI agents for enterprise in-house legal teams that run high-volume contracting work end-to-end (drafting, playbook review and redlining of counterparty paper, NDAs, infosec forms), with lawyers approving high-risk steps. | Business operations | — | — | |
 FloQast Transform AI agents (accounting close agents built from finished work, plus prebuilt agents) Close-management platform whose Transform AI agents run accounting workflows end to end (reconciliations, journal entries, close tasks); Transform can rebuild a finished close into a governed, documented agent tested against approved numbers, and each agent needs accountant sign-off before it runs. | Business operations | — | — | |
 FlowForma Assure (AI agents for vendor risk assessment) Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed. | Risk | — | — | |
 freee AI agents for accounting firms (freee 顧問先管理 AIエージェント and freee Agent Hub) Japanese accounting-firm agents from freee: prebuilt bookkeeping, rule-maintenance, monthly-check and tax-return-check agents that run client workflows autonomously and return only exceptions to staff, plus freee Agent Hub, a no-code builder for scheduled custom accounting agents. | Business operations | — | — | |
| AI agents in Freshworks' Freshservice ITSM that resolve employee IT and HR requests end-to-end (access provisioning, password resets, device setup, onboarding, leave queries) across Teams, Slack, Microsoft 365 Copilot and the portal, with an Agent Studio to build and govern pre-built and custom agents. | Business operations | — | — | |
 Genie AI legal agents Legal AI agents that draft, review, redline and negotiate agreements against company rules, playbooks and negotiation guardrails, with published self-serve plans. | Business operations | — | — | |
 Genpact Transaction Monitoring Analyst (Banking Analyst Suite) Generally available agentic AML module for banks: a central orchestrator coordinates specialised agents that gather data, analyse transactions and customer behaviour, review prior alerts and deliver a decision-ready Level 1 alert recommendation with documented rationale, with analysts making every final decision. | Risk | — | — | |
 GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | — | |
 GitHub Copilot coding agent GitHub Copilot’s coding agent. Listed here only for the official workflow that assigns Dependabot security alerts to Copilot (or other agents) to open a draft fix PR. | Code security | — | — | |
 GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | — | |
 Halo AI Agents (service management with FedRAMP GRC module) ITSM/ESM platform (formerly HaloITSM) with AI agents: conversational agents for end users and fulfillers, and process agents (Dispatch, 1st Line Support, Major Incident, Knowledge, Change Management) that act on their own within role-based permissions. The platform, including a FedRAMP/CMMC GRC module, is FedRAMP 20x Moderate. | Business operations | — | — | |
 Harvey Agents Purpose-built legal AI agents that split large legal tasks, work in parallel and return cited, review-ready output for law firms and in-house teams. | Business operations | — | — | |
 Hawk AI agents (AML Investigative, CDD and Screening Agents) Agentic AI overlay for AML teams: agents that gather data, summarise cases, flag typologies, draft SAR narratives and triage screening hits, with a human in the loop. | Risk | — | — | |
| Agentic AI triage and auto-fix for SAST findings in HCL AppScan: an LLM pass reviews each finding's accuracy and severity, filters false positives, and a deterministic codemod framework writes fixes in repos and pull requests. | Code security | — | — | |
 Hummingbird AI Agents (Research and Review Agents) AI agents for financial-crime compliance: a Research Agent that gathers and synthesises subject evidence and a Review Agent that fills out case reviews per your procedures, on an agent orchestration platform with analyst approval. | Risk | — | — | |
 Hypatos agentic GBS workforce (finance back-office agents) Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning. | Business operations | — | — | |
 Hyperproof AI-powered GRC platform for program management, evidence, audits and multi-framework compliance. | Compliance | — | — | |
 IBM watsonx Orchestrate (incl. watsonx Orchestrate for Government) IBM's agent platform to build, deploy, orchestrate and govern AI agents (IBM, custom and partner agents for HR, procurement and other domains); watsonx Orchestrate for Government is in scope of IBM Data Services for Government, FedRAMP Moderate. | Business operations | — | — | |
 Icertis Vera agents (Redline, Risk Review, Playbook Creation, Composer, Fulfillment and Insights agents) Contract AI agents in the Icertis contract intelligence platform that review third-party paper against a playbook, score risk Red/Amber/Green with plain-language explanations, generate playbook-aligned redlines in Microsoft Word, create playbooks and track obligations. | Business operations | — | — | |
 IDfy AI Agents Governed AI agents for KYC/KYB onboarding, credit underwriting, due diligence and DPDP-oriented privacy compliance in regulated finance. | Risk | — | — | |
 IndiSec DPDPA compliance agents (Veda AI privacy analyst) India DPDP Act compliance platform where assessment, obligation, consent, notification and evidence agents (plus the Veda AI privacy analyst) run gap assessments, track obligations, draft notices and assemble evidence, with lawyers and the customer approving every gate. | Risk | — | — | |
 INETCO BullzAI Investigate (agentic AI fraud investigation agents) Payment-fraud prevention platform for banks, processors and payment service providers whose agentic AI fraud agents collate transaction data, triage alerts, prioritise high-risk cases and give explainable risk scores and recommendations, running on a proprietary small language model that can be deployed on-premise. | Risk | — | — | |
 Ironclad Agent and specialized contracting agents CLM platform with Ironclad Agent, a conversational front door that routes requests to specialized agents (Intake, Contract Review, Playbook, Renewal, Search, Analytics, Workflow Designer and others) working inside live contracting workflows with human-in-the-loop review. | Business operations | — | — | |
 Juro AI Review Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks. | Business operations | — | — | |
 KaitoSec AI agents (agentic ISMS and GRC platform) German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval. | Compliance | — | — | |
| Indian autonomous DevSecOps agent that scans each commit, generates a secure patch and opens a human-approved pull request. | Code security | — | — | |
 Ketch Agent Network Agent layer behind Ketch's privacy platform that self-populates data maps, runs always-on gap analysis between regulations, your commitments and live systems, and proposes reviewable configuration changes, DPIAs and RoPA exports. | Risk | — | — | |
 Kodex AI regulatory compliance agents Generative-AI agents for financial-services regulatory compliance: a Screening Agent for horizon scanning and alerts, a Gap Analysis Agent that maps rules such as DORA, PSD3 and MiCAR against your policies, and a Reports Agent. | Compliance | — | — | |
 Leah (formerly ContractPodAi) Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations. | Business operations | — | — | |
 LeCHECK AI agent (Word add-in that runs the contract-review workflow) AI agent in Lisse's LeCHECK contract-review service (Microsoft Word add-in, from Aug 21, 2026). It runs the steps of a legal professional's contract review in order (risk check, proposed clause edits, comments, format check), and the reviewer applies its suggestions with a click. | Business operations | — | — | |
| Agentic AI platform with pre-built 'AI Colleagues' that auto-resolve employee IT, HR, finance and procurement back-office requests through 200+ enterprise connectors. | Business operations | — | — | |
 LEGALFLY agents (Review, Legal Radar and Agent Studio) Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks. | Business operations | — | — | |
 LegalOn Agents Specialised AI agents for in-house legal teams that build review playbooks, handle intake requests, translate contracts and triage low-risk agreements, under attorney control. | Business operations | — | — | |
 Legartis Legal Agent (agentic Legal AI Workspace) Swiss legal AI workspace whose Legal Agent triages incoming contracts, reviews them against company playbooks, routes deviations above set limits to the business, Legal or Finance, and takes contracts from template draft through approvals and negotiation to signature. | Business operations | — | — | |
 Legora Agent Agent at the core of Legora's legal AI platform that plans, executes, reviews and delivers multi-step legal work with autonomous tool use and firm-specific skills. | Business operations | — | — | |
 Lexis+ with Protégé (agentic legal AI) LexisNexis's legal AI platform: Protégé Work presents a plan and then executes skills and workflows (contract comparison, playbook-based review, due diligence, compliance review), and purpose-built drafting agents produce review-ready contracts, motions and briefs grounded in LexisNexis content. | Business operations | — | — | |
 Light agents (Internal Audit, Bill, Contract and Accrual Agents) Agentic ERP for multi-entity finance teams: executive agents (Bill, Contract, Accrual) do accounting work, audit agents check their output and instructions against written accounting and approval policies, and materiality-based approval controls decide what needs a controller or CFO. | Business operations | — | — | |
| Litera's legal AI agent for law firms: it reviews and redlines contracts against the firm's playbook, applies changes across closing sets and chains Litera's deterministic engines (comparison and others) as skills at workflow milestones. | Business operations | — | — | |
 LogicGate Risk Cloud AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting. | Risk | — | — | |
 Luci AI Agent Explainable AI agent for financial-crime investigations that prepares cases, runs triage and supports SAR-oriented workflows while institutions keep governance decisions. | Risk | — | — | |
 Luminance Agent Lumi and Autonomous Negotiation Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations. | Business operations | — | — | |
 ManageEngine ServiceDesk Plus Zia Agents (L1 service desk, Entra ID user manager, PIR and KB agents, Agent Studio) AI agents in ManageEngine ServiceDesk Plus (Enterprise edition) that pick up and resolve L1 tickets, manage Microsoft Entra ID users, draft post-incident reviews and publish KB articles, with a no-code Agent Studio and a multi-agent orchestrator. ManageEngine is Zoho Corp's IT-management division. ServiceDesk Plus Cloud is TX-RAMP Level 1; that registry row names the cloud help-desk product, not the Zia agents. | Business operations | — | — | |
 Medius autonomous AP (agentic AI and Supplier Conversations) Accounts payable platform that uses agentic AI to capture and code invoices, decide matches, routing and approvals, approve payments for trusted vendors, check for fraud (including AI-generated receipts) and answer supplier invoice and payment emails automatically. | Business operations | — | — | |
 MindBridge AI Autonomous financial-oversight platform that analyses 100% of transactions to surface anomalies, control failures and fraud risk for finance and audit teams. | Risk | — | — | |
 Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents) French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human. | Compliance | — | — | |
 MineOS Mira AI Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles. | Compliance | — | — | |
 MNTSQ AI Agent (contract review, drafting and matter-management agent in MNTSQ CLM) Legal AI agent built into the Japanese MNTSQ CLM. It agrees a review policy with the lawyer from the deal background, then reviews the contract against a playbook co-developed with Nagashima Ohno & Tsunematsu, redlines and comments directly in Microsoft Word, and drafts matter-management comments. | Business operations | — | — | |
 Modulos AI governance agents (Scout, Risk Agent, Control Assessment Agent) AI governance platform whose agents discover AI systems, assess controls against evidence, quantify AI risk in euros and investigate changes on a schedule, while decisions on the record stay with your team. | Compliance | — | — | |
 Moveworks Enterprise AI assistant platform that automates employee support and business operations workflows across IT, HR and related systems. | Business operations | — | — | |
 n8n AI agents (agentic workflow automation) Workflow automation platform where agents are first-class: you describe an agent, n8n drafts its instructions and tools, and agents with triggers and memory call 500+ integrations and existing workflows, alone or as coordinated multi-agent systems. It can be self-hosted. | Business operations | — | — | |
 New Odyssey Pegasus Compliance Agent (DSAR agent) Packaged DSAR agent that handles intake, jurisdiction deadlines, identity checkpoints, discovery across connected HRIS/CRM/ticketing/file systems, third-party PII redaction and response drafting, with a person approving the release. | Risk | — | — | |
 Noru Agentic Compliance (GRC agents) EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept. | Compliance | — | — | |
 noze DataGovern (on-premise compliance agents for NIS2, GDPR and the AI Act) Italian on-premise platform whose AI agents read company documents and procedures, map them to NIS2, GDPR, AI Act, CRA and DORA obligations, flag gaps and risks with the source linked, and pre-fill registers, evidence and one remediation plan; a person approves every proposal and each confirmed gap becomes an owned task. | Compliance | — | — | |
 Numeric agentic subledgers (close and accounting agents) Close-management and accounting platform whose agents turn source records (leases, commission plans, card spend, payables) into subledgers, propose the accounting treatment for approval, build schedules and derive journal entries automatically. | Business operations | — | — | |
 OneTrust Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight. | Risk | — | — | |
 OpenHands Vulnerability Fixer (agent platform with security integrations) Agent platform with security integrations, not a dedicated AppSec scanner: OpenHands' open-source Vulnerability Fixer runs Trivy scans or ingests Snyk, Veracode or Checkmarx reports, then has OpenHands agents write and test fixes and open GitHub PRs. | Code security | — | — | |
 Optro (formerly AuditBoard) AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance. | Compliance | — | — | |
 Oracle Nexus for financial crime investigations (Nexus Case Flow and Nexus Reach agents) Oracle's financial-crime case management with agentic AI that pre-investigates AML, fraud, sanctions and KYC cases unprompted, gathers evidence and entity context, runs adverse-media scans and drafts investigation narratives for human review. | Risk | — | — | |
 Orcha AI agents for finance (Accounts Payable, Receivables, Approvals, Close & Reconciliation and more) Berlin 'agentic ERP' whose finance agents capture, validate, GL-code, 3-way-match and post vendor invoices (with VAT checks, fraud/anomaly and sanctions screening), handle receivables, approvals and daily bank/intercompany/VAT reconciliation inside DATEV, SAP, Dynamics or Xero, escalating low-confidence decisions to a person. | Business operations | — | — | |
 osapiens Agent Factory (supplier and supply-chain compliance agents) Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails. | Risk | — | — | |
 Oscilar Agent Hub (AML, sanctions, fraud and onboarding agents) Risk-decisioning platform with 30+ orchestrated agents on a shared risk memory, including AML L1 review, sanctions screening dispositions, adverse media, EDD dossier, SAR narrative, fraud L1 review, fraud-network and KYB review agents, where every recommendation is confirmed by a human analyst. | Risk | — | — | |
 Payhawk AI agents (Financial Controller, Procurement, Payments and more) Spend-management AI agents that enforce spend policy, collect and match receipts, chase approvals, code transactions for month-end close and handle procurement, travel and payment requests. | Business operations | — | — | |
 Pega AI agents (Pega Cloud for Government) Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized. | Business operations | — | — | |
 Pennylane Autopilot (autonomous bookkeeping and pre-review for accounting firms and SMEs) French accounting platform's Autopilot runs activated bookkeeping workflows end to end (document requests and reminders, document processing, bank reconciliation, VAT preparation) and pre-reviews year-end diligence with documented conclusions, while accountants supervise exceptions from a control centre. | Business operations | — | — | |
 Phoenix Purple (Phoenix Security) UK AI code-security agent platform with reachability-validated scanning, PR scanning, IDE/agent integrations and an agent that writes risk-tiered fix PRs. | Code security | — | — | |
 Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | — | |
 Privado Wren (AI privacy analyst agent) AI privacy agent that runs privacy assessments end to end: it monitors tools like Jira, CLM and procurement for new activity, triggers the right PIA/DPIA/TIA/RoPA, researches risk, populates assessments with evidence and routes approvals. | Risk | — | — | |
 ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. | Risk | — | — | |
 RegScale RegML AI agents (RegScale CCM) Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized. | Compliance | — | — | |
 Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | — | — | |
 Riskonnect AI Agent Library (Agentforce 360 for Riskonnect) Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents. | Risk | — | — | |
 RiskXchange The Agency (32 AI agents for third-party risk) AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor. | Risk | — | — | |
 SAFE TPRM AI Co-Worker Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding. | Risk | — | — | |
 Saidot Agent-first AI governance platform: a knowledge graph of AI risks, controls and policies, an Agent Catalogue, and MCP servers that let customers' agents draft risk assessments. | Compliance | — | — | |
 SAP Joule Agents and Joule Studio Prebuilt SAP AI agents that execute multistep finance, HR, procurement and service tasks across SAP and non-SAP systems, coordinated by role-based Joule Assistants, with custom agents built in Joule Studio and governed in SAP AI Agent Hub. | Business operations | — | — | |
 Sardine agentic fraud and AML ops agents Fraud and AML platform with named agents that disposition screening alerts, run enhanced due diligence and business verification, analyse networks, draft SAR narratives, tune monitoring rules and build dispute packages. | Risk | — | — | |
 Scrut Automation Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs. | Compliance | — | — | |
 Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | — | — | |
 Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | — | — | |
 SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | — | — | |
 Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | — | |
 Serrala AI agents (governed AP, AR and payments agents in the Serrala Finance Platform) Purpose-built finance agents inside the Serrala Finance Platform that interpret context, decide the next best action within defined policies and execute AP, AR and payments tasks across systems (for example resolving AP price variances and matching and allocating unmatched incoming payments), with human-in-the-loop oversight and an auditable record of every action. | Business operations | — | — | |
 ServiceNow Now Assist Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules. | Business operations | — | — | |
 Shufti Transaction Trust Monitoring (agentic FRAML engine) Agentic fraud and AML (FRAML) transaction monitoring in which governed AI agents score transactions, triage and investigate alerts and draft regulator-format SAR/STR reports, with the MLRO approving every filing. | Risk | — | — | |
 Signzy Agentic CKYC Agentic KYC operations layer that validates, auto-cures and submits CKYCRR 2.0 records to CERSAI, plus broader AI-powered KYC, KYB and AML screening. | Risk | — | — | |
 Silent Eight Iris 7 AI Agents Policy-bound AI agents that adjudicate sanctions, PEP, adverse-media, transaction-monitoring, CDD, trade and fraud alerts on top of a bank's existing screening and monitoring systems. | Risk | — | — | |
 SonarQube AI CodeFix Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | — | |
 spektr AI agents (Case AI, KYB AI and compliance agents) Compliance platform for onboarding, monitoring and case work where AI agents run sanctions, PEP, adverse-media and alert investigations, resolve ownership (UBO) gaps and review documents, returning a cited verdict and recommended action for an analyst to decide. | Risk | — | — | |
 Spellbook Associate AI agent for transactional lawyers that plans and executes multi-document drafting, review and redlining projects inside the Spellbook suite. | Business operations | — | — | |
 Sphinx AI compliance analysts (KYC, KYB and AML agents) AI analyst agents for financial-crime compliance that run KYC and KYB onboarding reviews, disposition sanctions, PEP and adverse-media alerts, perform enhanced due diligence and rescreenings, and draft SAR/UAR filings with audit-ready decision logs. | Risk | — | — | |
 SpotDraft Sidebar AI agents and VerifAI AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word. | Business operations | — | — | |
 StackHawk Wingman (find-fix-verify security for AI coding agents) Security plugin for AI coding agents (Claude Code, Cursor, GitHub Copilot, Codex, Antigravity) that runs dynamic tests against the running app during the coding session, has the agent triage and fix what it finds, then rescans to prove the fix before the pull request. Published at US$10 per user per month. | Code security | — | — | |
 Stacks accounting agents Agentic financial close workspace where AI agents handle reconciliations, journal entries, anomaly detection and reporting while accounting teams review the work. | Business operations | — | — | |
| Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions. | Compliance | — | — | |
 SymphonyAI SRI Agents (Symphony Risk Intelligence) Financial-crime agents on SymphonyAI's agent-native Symphony Risk Intelligence platform: manager and specialist agents that prepare TM and screening investigations, enrich watchlist records, track threat and regulatory intelligence, and run KYC/EDD workflows. | Risk | — | — | |
 Taktile AI agents (onboarding, sanctions and adverse-media agents) Agentic decision platform for banks and insurers with a library of pre-built agents, including Adverse Media Investigation, Business Ownership Intelligence and Sanctions and Watchlist Match Review agents, that run inside decision flows with human review. | Risk | — | — | |
 Tembo Agent orchestration platform (not a dedicated AppSec scanner) that opens auto-fix PRs from Snyk vulnerability scans and Sentry production errors. | Code security | — | — | |
 Themis AI Investigator (AML/KYB due-diligence agents) A coordinated team of AML-trained AI agents that runs enhanced due-diligence and KYB investigations in minutes: registry and web collection, officer/UBO screening, adverse-media analysis and transparent red/amber/green risk grading, with analysts keeping the final decision. | Risk | — | — | |
 Tookitaki FinCense APAC AML and fraud platform that combines community typologies with purpose-built AI agents for detection, screening, customer risk and investigation. | Risk | — | — | |
 Transcend Data privacy infrastructure for DSRs, consent and data governance, plus Transcend Rails policy-as-code controls for what AI agents may do. | Compliance | — | — | |
 TrustCloud TrustLens (agentic third-party risk assessments) Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring. | Risk | — | — | |
 Trustero AI (GRC agents) AI GRC platform whose agents collect and map evidence, test controls continuously, assess policies against frameworks, run natural-language 'TI Playbooks' and answer security questionnaires. | Compliance | — | — | |
 UiPath Autopilot / agents Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration. | Business operations | — | — | |
 Unique AI financial agents (KYC, due diligence and research agents) Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs. | Business operations | — | — | |
 Unit21 AI Agents for fraud and AML AI agents that run fraud and AML alert triage and investigations: they pull transaction history, check watchlists, run open-source research, assemble evidence, draft narratives and recommend dispositions for analyst approval. | Risk | — | — | |
 UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | — | — | |
| Brazilian risk and compliance decisioning platform whose AI agents read the full KYC/KYB dossier, compare it with current regulation, flag risks such as adverse-media homonyms, and suggest a justified decision with a confidence level for the analyst to validate, with continuous re-analysis when a monitored person or company changes. | Risk | — | — | |
 Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | — | — | |
 Veeam PrivacyOps AI agents (Consent Agent, DSR and Assessment agents) Privacy-operations agents on Veeam's DataAI Command Platform: a generally available Consent Agent that builds, tests, monitors and auto-remediates consent across sites and downstream systems, plus announced DSR intake-form and assessment-autofill agents. | Risk | — | — | |
 Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | — | |
 VISO TRUST AI Agent (agentic third-party risk management) TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team. | Risk | — | — | |
 Vivox AI compliance agents (Rachel, AI compliance analyst) Pre-trained AI agents for AML, KYB/KYC and financial crime that take on Level 1 analyst work: sanctions and PEP alert reviews, adverse media monitoring, corporate registry and UBO analysis, and narrative report writing. | Risk | — | — | |
 Vulcan Justinian (AI agent for government legal, regulatory and permitting work; VulcanGov) AI agent for US government knowledge workers, grounded in a large corpus of federal and state statutes, regulations, court cases and fiscal data. It runs 50-state research in parallel with citations, monitors legal changes, reviews permit applications against the code, drafts memos and comment responses, and builds internal tools inside the agency boundary. | Compliance | — | — | |
 Whistic Automation Orchestrator (agentic assessments) Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Risk | — | — | |
 Wordsmith AI legal agents AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning. | Business operations | — | — | |
 Workato Agent Studio and Genies (enterprise AI agents) Workato's agent layer on its integration and automation platform: Agent Studio builds AI agents ('genies') that understand context and execute skills built from Workato workflows and recipes, with prebuilt genies for IT, sales, HR, support and other functions. | Business operations | — | — | |
 WorkFusion AI Agents (Evelyn, Tara, Evan, Isaac, Edward, Kayla) Named AI agents that act as L1/L2 AML analysts: they review and disposition sanctions, PEP and watchlist alerts, transaction screening and monitoring alerts, adverse media, EDD and KYC work, escalating or closing cases with justification. | Risk | — | — | |
 Workiva Agent Studio (finance, audit and GRC agents) No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps. | Compliance | — | — | |
 Xelix AP control centre (agentic AP: statements, transactions and helpdesk agents) UK accounts-payable control software that bolts onto ERPs and uses 20+ autonomous AI agents to catch duplicate payments, overpayments and invoice fraud before the pay-run, reconcile supplier statements and answer vendor queries. | Business operations | — | — | |
 Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | — | |
 Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | — | — | |
 Zefort Agent (agentic CLM assistant for contract review, redlining and follow-up; beta) Agent built into the Zefort contract-management platform that takes assigned contract work (reviewing and redlining agreements, comparing contract sets, finding risks or missing information) and turns findings into suggested updates to metadata, parties, binders, tasks and reminders that a person approves before they are applied. | Business operations | — | — | |
 Zenoo AI investigation agents (Screening Resolver, Case Narrator and others) Ten specialised AML investigation agents that screen, research, analyse and validate each onboarding or transaction alert, write a cited case narrative and hand the decision to a human analyst; a Red Team Agent challenges every finding. | Risk | — | — | |
| AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | — | |
 Zip risk agents (Risk Orchestration and procurement Superagents) Procurement-embedded third-party risk agents that screen and score vendors, fast-track low-risk ones, route high-risk ones for deeper review, analyse surveys and documents for key risks, and schedule re-assessments by risk tier. | Risk | — | — | |
 Zoho Zia Agents (Agent Studio, Agent Store prebuilt agents and Agent Marketplace) Zoho's agentic AI platform: 100+ prebuilt Zia Agents in the Agent Store for sales, support, HR and operations across Zoho apps, plus a no-/low-code Agent Studio to build custom agents with tools, knowledge bases, guardrails and multi-agent setups. | Business operations | — | — | |
 Zoven AI Bengaluru-built fraud, AML and KYC/KYB platform where AI agents run investigation SOPs case by case and draft cited verdicts for analysts to decide. | Risk | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.