PRODUCT NOTES
AI endpoint security product notes: facts, strengths and limits
Short answer
By The Device Desk · Endpoint AI Finder · Published 2026-10-11
Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.
Vendor pages read September and October 2026 · updated 2026-10-13
Which products have notes?
AI Access Security (Palo Alto Networks)
Palo Alto Networks' control for employee use of GenAI apps, linked from its Prisma Access and SASE pages: visibility into shadow AI across 4,000+ GenAI applications, control over their use, and protection against sensitive data loss and malicious responses.
- Decides on a tool call before it runs:
- Not in our sources
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Akamai Workforce Protector
Owner: Akamai (formerly LayerX; acquisition date not stated on the page)
Akamai Workforce Protector, formerly LayerX, is a browser extension for Chrome, Edge, Firefox and Safari that controls prompts, responses, agent actions and data exchanges across AI, SaaS, web and desktop applications, including agentic browsers and AI assistants, without proxies or a browser replacement.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Matches
- Price:
- Not published
Bay
An endpoint-first control layer for AI agents, coding assistants and MCP servers on employee devices. Bay describes itself as a fully preventive, agentless platform that classifies, governs and prevents risks across every AI agent and tool on enterprise endpoints.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Matches
- Price:
- Not published
Bloom Security
An endpoint security company built around "Securing the AI-Native Endpoint": discovery of the software, extensions and AI tools running on devices, with policy enforcement across package and extension marketplaces. Offices in Wilmington, Delaware and Tel Aviv.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Cloudflare AI Gateway
A gateway for AI applications: Cloudflare's documentation describes it as a way to observe and control AI apps, with analytics on requests, tokens and cost, logging, caching, rate limiting, request retry and model fallback across providers including Workers AI, Anthropic, Google Gemini, OpenAI and Replicate. It governs apps you build, not employees' devices.
- Decides on a tool call before it runs:
- Not in our sources
- Can warn or ask:
- Not in our sources
- Price:
- Not published
CrowdStrike Falcon Guardian
CrowdStrike's AI agent security product, described on 1 September 2026 as the evolution of Falcon AI Detection and Response (AIDR). It discovers shadow AI agents, connects agent activity to endpoint telemetry, governs which AI agents may run, protects prompts and sensitive data, and stops threats at runtime with containment, from endpoint to cloud and SaaS.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Ent
An intent-aware AI endpoint: one programmable policy for people and AI agents, with interventions from a soft nudge to a hard block, an on-device small language model that classifies sensitive data, and investigation timelines written in plain language. Use cases: insider risk, last-mile threats such as ClickFix, AI usage control and data security.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Matches
- Price:
- Not published
Glow Security
"The Endpoint AI Company": control over everything that runs on the endpoint, in three areas (Asset Intelligence, Software Control, Safe AI Adoption), plus an Anthropic integration that collects per-user Claude usage, skills, connectors and a compliance audit trail. Came out of stealth on 22 July 2026 with $180M; Tel Aviv and Palo Alto.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Partly
- Price:
- Not published
Harmonic Security
A data protection product for everyday AI use, sold as Explore, Guide and Command, covering browser extensions, desktop apps and CLI tools, MCP gateways and an API.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Matches
- Price:
- Three named tiers (Explore, Guide, Command) with no prices; a full prompt audit log is an add-on on Guide and Command.
Koi (Palo Alto Networks)
Owner: Palo Alto Networks (acquisition completed 14 April 2026)
Koi, now sold by Palo Alto Networks as Cortex Agentic Endpoint Security, gives visibility into models, MCPs and extensions on endpoints, removes insecure packages, extensions and AI tools in one click, and stops malicious actions.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Lasso Security
An AI security platform with discovery and an AI-BOM, posture management, automated red teaming and runtime enforcement at the proxy, API or AI gateway layer, plus usage control through a browser extension and an open-source MCP gateway.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Partly
- Price:
- Marketplace list price: Lasso for Employees, annual commit for GenAI chatbots, $20,000 for 12 months on AWS Marketplace. Other products: not published.
Neo
Agentic Software Control from Neo Security, Inc. (neo.ai, not Pulumi Neo): a live inventory of agents, models, skills, MCP servers and extensions on every endpoint, and runtime control that intercepts agent actions and allows, blocks or holds them for approval. Launched 20 July 2026 with $100M from Andreessen Horowitz and Bessemer; HQ Boston.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Matches
- Price:
- Not published
Noma Security
An AI security platform with AI-SPM, Agent Access Control, AI detection and response and AI red teaming, covering agents on endpoints, in SaaS and in homegrown apps.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Partly
- Price:
- Marketplace list price: $200,000 for a 12-month contract on AWS Marketplace. No pricing page on noma.security.
Onyx Security
"The Secure AI Control Plane for the Agentic Era": inline inspection of prompts, tool calls and model responses across browser AI, coding assistants, desktop AI agents, cloud workloads and MCP servers. Based in Tel Aviv and New York.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Matches
- Price:
- Not published
Pluto Security
"The first workspace security platform for the AI era": visibility, risk understanding and real-time guardrails for AI builders, developer tools and business workspaces. Founding team from Unit 8200, Microsoft and Palo Alto Networks; part of AWS, CrowdStrike and NVIDIA accelerators. Publishes research on Claude Code hooks, exposed MCP servers and Open VSX malware.
- Decides on a tool call before it runs:
- Partly
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Prompt Security (SentinelOne)
Owner: SentinelOne (acquisition announced 5 August 2025; SentinelOne's blog of 3 September 2025 is titled SentinelOne Acquires Prompt Security)
Prompt Security, now part of SentinelOne, inventories AI tools and code assistants, including unsanctioned shadow AI, through two local sensors, a browser extension and a dedicated AI endpoint agent, and is built into the SentinelOne Singularity Platform.
- Decides on a tool call before it runs:
- Not in our sources
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Sun Security
AI agent security that says it sits in the path of every AI agent across workstations, cloud and SaaS, with three capabilities: discovery, posture management that learns each agent's purpose, and runtime checks of every tool call, connection and resource draw against that purpose before it executes.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Zenity
An AI agent security platform covering AI observability, posture management, exposure management, runtime boundaries, agentic identity, MCP security and AI detection and response, with a long list of SaaS and cloud agent integrations.
- Decides on a tool call before it runs:
- Matches
- Can warn or ask:
- Partly
- Price:
- Not published
Zscaler Generative AI Security
Zscaler's controls for employee use of generative AI: prompt-level visibility, allow or block by app, DLP blocking across GenAI apps, browser isolation that disables cut, paste and download, and data security for Microsoft Copilot.
- Decides on a tool call before it runs:
- Not in our sources
- Can warn or ask:
- Not in our sources
- Price:
- Not published
Which head-to-heads are available?
AI Access Security (Palo Alto Networks)
- AI Access Security and Workforce Protector
- AI Access Security and Bay
- AI Access Security and Bloom
- AI Access Security and Cloudflare AI Gateway
- AI Access Security and Falcon Guardian
- AI Access Security and Ent
- AI Access Security and Glow
- AI Access Security and Harmonic
- AI Access Security and Koi
- AI Access Security and Lasso
- AI Access Security and Neo
- AI Access Security and Noma
- AI Access Security and Onyx
- AI Access Security and Pluto
- AI Access Security and Prompt Security
- AI Access Security and Sun
- AI Access Security and Zenity
- AI Access Security and Zscaler
Akamai Workforce Protector
- Workforce Protector and Bay
- Workforce Protector and Bloom
- Workforce Protector and Cloudflare AI Gateway
- Workforce Protector and Falcon Guardian
- Workforce Protector and Ent
- Workforce Protector and Glow
- Workforce Protector and Harmonic
- Workforce Protector and Koi
- Workforce Protector and Lasso
- Workforce Protector and Neo
- Workforce Protector and Noma
- Workforce Protector and Onyx
- Workforce Protector and Pluto
- Workforce Protector and Prompt Security
- Workforce Protector and Sun
- Workforce Protector and Zenity
- Workforce Protector and Zscaler
Bay
Bloom Security
Cloudflare AI Gateway
- Cloudflare AI Gateway and Falcon Guardian
- Cloudflare AI Gateway and Ent
- Cloudflare AI Gateway and Glow
- Cloudflare AI Gateway and Harmonic
- Cloudflare AI Gateway and Koi
- Cloudflare AI Gateway and Lasso
- Cloudflare AI Gateway and Neo
- Cloudflare AI Gateway and Noma
- Cloudflare AI Gateway and Onyx
- Cloudflare AI Gateway and Pluto
- Cloudflare AI Gateway and Prompt Security
- Cloudflare AI Gateway and Sun
- Cloudflare AI Gateway and Zenity
- Cloudflare AI Gateway and Zscaler
CrowdStrike Falcon Guardian
- Falcon Guardian and Ent
- Falcon Guardian and Glow
- Falcon Guardian and Harmonic
- Falcon Guardian and Koi
- Falcon Guardian and Lasso
- Falcon Guardian and Neo
- Falcon Guardian and Noma
- Falcon Guardian and Onyx
- Falcon Guardian and Pluto
- Falcon Guardian and Prompt Security
- Falcon Guardian and Sun
- Falcon Guardian and Zenity
- Falcon Guardian and Zscaler
Ent
Glow Security
Harmonic Security
Koi (Palo Alto Networks)
Lasso Security
Neo
Noma Security
Prompt Security (SentinelOne)
Sun Security
Zenity
Questions people ask
Why are the products not ranked?
Because the right product depends on the AI tools people use, your devices, where the work happens, your data, your current stack and whether you block or guide. The finder applies those; a single ranking would hide them.
Do any of these products publish prices?
No vendor site here publishes a list price. Marketplace list prices: Lasso Security (Marketplace list price: Lasso for Employees, annual commit for GenAI chatbots, $20,000 for 12 months on AWS Marketplace. Other products: not published.); Noma Security (Marketplace list price: $200,000 for a 12-month contract on AWS Marketplace. No pricing page on noma.security.). Tier names only: Harmonic Security (Three named tiers (Explore, Guide, Command) with no prices; a full prompt audit log is an add-on on Guide and Command). The other 16 quote through sales.
Why are Netskope, Island and Cato Networks not here?
We could not read enough of their AI pages for this edition to record facts. Cato Networks acquired Aim Security on 3 September 2025. The network or SSE proxy guide lists questions to ask any SSE vendor.