Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.
Best TX-RAMP compliance AI agents
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies.
Official hub with sources and tag rules: TX-RAMP framework hub. Tag only when Texas DIR's TX-RAMP Certified Cloud Products list (updated 13 Oct 2026) shows the listed product (or the documented government boundary) at Level 1 or Level 2. Provisional and platform-only entries are shown on the hub but not tagged. DIR notes publishing issues: products missing from the list may not have lost certification, so this hub never says a vendor is not TX-RAMP certified.
Key facts (official sources)
Last checked 2026-10-18.
- Run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing services that process the data of Texas state agencies. Source
- Applies to state agencies, institutions of higher education and public community colleges (Texas Government Code 2054.003(13)); only cloud computing services as defined in Texas Government Code 2054.0593(a) are in scope. Source
- Level 1: public/non-confidential information or low-impact systems (Level 1 assessment, or evidence of StateRAMP Category 1 / FedRAMP Low). Level 2: confidential/regulated data in moderate or high impact systems (Level 2 assessment, or StateRAMP Category 2 / FedRAMP Moderate). Source
- Provisional status lets an agency contract for a product for up to 18 months without full certification; the product must be certified within that period. Source
- The certified-products spreadsheet was last updated 13 Oct 2026. DIR notes publishing issues: products missing from the list may not have lost certification (verify with TX-RAMP@dir.texas.gov). Source
Listed: agents tagged TX-RAMP in our dataset, compliance-category first, then by number of framework tags. Tags mean relevance, not certification; check each vendor's claims. Order is mechanical, not a paid ranking.
AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.
Continuous controls monitoring platform whose RegML AI agents monitor controls, collect evidence, draft control documentation and trigger remediation for FedRAMP, CMMC and NIST programmes; RegScale CCM is FedRAMP High authorized.
AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.
A
Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.
Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.
Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.
AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.
Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.
Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized.
Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized.
Cyber risk and third-party risk management platform with published CRPM pricing page.
Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus.
Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate).
Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions.
AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst.
Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.
Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation.
Vendor platform certified; agent scope not stated by the vendor
These TX-RAMP registry records are not tagged on the listing (platform-only or a status that is not Authorized / Level 1 / Level 2). Full sources are on the TX-RAMP hub.
- Appian Agent Studio (AI agents) — Appian Cloud: Level 2 (TX985366) · vendor platform; agent scope not stated
- Black Duck Signal (agentic AI AppSec) — Black Duck Polaris: Level 2 (TX1910179) · vendor platform; agent scope not stated
- Black Kite AI Agent — Black Kite: Level 1 (TX1464698) · vendor platform; agent scope not stated
- Claude Code security review — Claude (Claude for Enterprise): Level 2 (TX1880972) · vendor platform; agent scope not stated
- CrowdStrike Charlotte AI — Falcon Platform: Level 2 (TX985428) · vendor platform; agent scope not stated
- Darktrace Cyber AI Analyst — Active AI Security Platform: Provisional (provisional expiry 2027-05-08) (TX1896215) · vendor platform; agent scope not stated
- DataSnipper Alwin — DataSnipper: Level 2 (TX1839020) · vendor platform; agent scope not stated
- Fieldguide Field Agents — Fieldguide: Level 2 (TX1906508) · vendor platform; agent scope not stated
- GitHub Copilot Autofix — GitHub Enterprise Cloud: Level 2 (TX988014) · vendor platform; agent scope not stated
- GitLab Duo Vulnerability Resolution — GitLab Dedicated for Government: Level 2 (TX1549412) · vendor platform; agent scope not stated
- Harvey Agents — Harvey.ai: Level 2 (TX1988168) · vendor platform; agent scope not stated
- LEGALFLY agents (Review, Legal Radar and Agent Studio) — LEGALFLY: Level 2 (TX1845403) · vendor platform; agent scope not stated
- SAFE TPRM AI Co-Worker — SAFE: Level 2 (TX1741314) · vendor platform; agent scope not stated
- SecurityScorecard — SecurityScorecard Security Ratings: Provisional (TX1535552) · vendor platform; agent scope not stated
- ServiceNow Now Assist — ServiceNow Government Community Cloud: Level 2 (TX985554) · vendor platform; agent scope not stated
- Snyk — Snyk Container: Level 1 (TX1510094) · vendor platform; agent scope not stated
- Sophos MDR AI Agents (Triage and Case Investigation) — Sophos Cloud: Level 2 (TX1138700) · vendor platform; agent scope not stated
- Spellbook Associate — Spellbook: Level 2 (TX1820375) · vendor platform; agent scope not stated
- TrendAI Vision One Agentic SIEM and Companion — Trend Micro Vision One for Government: Level 2 (TX1443251) · vendor platform; agent scope not stated
- TrustCloud TrustLens (agentic third-party risk assessments) — TrustCloud Platform: Level 1 (TX1583514) · vendor platform; agent scope not stated
- UiPath Autopilot / agents — Automation Cloud Public Sector: Level 2 (TX1082286) · vendor platform; agent scope not stated
- Veracode Fix — Veracode Online Security Platform for Government: Level 2 (TX1009331) · vendor platform; agent scope not stated
- Whistic Automation Orchestrator (agentic assessments) — Whistic - Assess: Level 1 (TX1435648) · vendor platform; agent scope not stated
- Workiva Agent Studio (finance, audit and GRC agents) — Workiva Platform: Level 2 (TX985589) · vendor platform; agent scope not stated
Use-case comparisons
- AI SOC and security-analyst agents — 20 listings
- TPRM and vendor-risk AI agents — 12 listings
- Privacy operations AI agents — 7 listings
- US public-sector and FedRAMP AI agents — 15 listings
- Cloud security (CNAPP) AI agents — 6 listings
- AI governance agents and platforms — 8 listings
Popular comparisons
- Wiz vs Orca Security
- Credo AI vs Optro (formerly AuditBoard)
- Credo AI vs RegScale RegML AI agents (RegScale CCM)
- Credo AI vs Secureframe
- Optro (formerly AuditBoard) vs RegScale RegML AI agents (RegScale CCM)
- Optro (formerly AuditBoard) vs Secureframe
- RegScale RegML AI agents (RegScale CCM) vs Secureframe
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Andesite Human-AI SOC (Azimuth for Government)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Dropzone AI SOC Analyst
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Orca Security
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs SentinelOne Purple AI (agentic AI security analyst)