Does Harmonic decide on AI agent actions before they run?

Partly. The Command tier adds MCP client and server discovery, agent permissions for read, write and execute, and MCP server tool controls. Warn or ask: Matches.

PRODUCT NOTES · HARMONIC SECURITY

Harmonic Security: AI endpoint control facts (2026)

Short answer

Harmonic Security protects data in everyday AI use across the browser, desktop apps and developer tools such as Claude Code and GitHub Copilot, and MCP gateways, with block, warn or log, and rolls out through Intune, JAMF, Kandji or Group Policy. It names three tiers publicly but no prices, and the full prompt audit log is an add-on. A record that separates a person from an agent is not described.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Visit Harmonic's site

Where do Harmonic's controls sit?

DEV Filled marker: described on the product pages we read
DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
DEV Dashed marker: not in our sources (it may exist; we did not find it)

The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.

The four product control types, plus policy only.
Type	Status	What the pages say	Source
On-device control	Partly described	Deployment options include desktop apps and AI agents, rolled out through device management; the on-device component is not described in detail.	Source: Harmonic Security pricing (re-read) · Read 11 Oct 2026
Browser extension	Described	Browser extensions are a listed surface, with block, warn or log actions.	Source: Harmonic Security homepage · Read 27 Sep 2026
Network or SSE proxy	Not in our sources	Not described on the pages we read.	None
AI or MCP gateway	Described	MCP gateways are a listed surface, and Harmonic Command governs at the MCP layer and at the tool surface.	Source: Harmonic Security: Command · Read 27 Sep 2026
Policy only	No product needed	Policy is your own work whichever product you choose.	None

How does Harmonic decide on an AI action?

Harmonic: decisions
Decides on a tool call before it runs	PartlyThe Command tier adds MCP client and server discovery, agent permissions for read, write and execute, and MCP server tool controls. Source: Harmonic Security pricing (re-read) · Read 11 Oct 2026
Can warn or ask instead of only blocking	MatchesWarn is one of three actions, with block and log. Source: Harmonic Security homepage · Read 27 Sep 2026
Can block an agent, tool or action	MatchesBlock is one of three actions. Source: Harmonic Security homepage · Read 27 Sep 2026
Has a watch-only or simulation mode	MatchesLog is one of three actions, for watching before enforcing. Source: Harmonic Security homepage · Read 27 Sep 2026

How does Harmonic reach devices, and which AI tools does it name?

Harmonic: rollout and named tools
How it reaches devices	Rolls out through Intune, JAMF, Kandji or Group Policy. Source: Harmonic Security homepage · Read 27 Sep 2026
Rolls out through EDR or device management you run	MatchesRolls out through Intune, JAMF, Kandji or Group Policy. Source: Harmonic Security homepage · Read 27 Sep 2026
Names the coding agents it covers	MatchesThe Guide tier adds desktop AI apps and developer tools, naming Claude Code, GitHub Copilot, ChatGPT Desktop and Microsoft 365 Copilot. Source: Harmonic Security pricing (re-read) · Read 11 Oct 2026
AI tools and surfaces named	Browser extensions, desktop apps and CLI tools, MCP gateways and an API. Source: Harmonic Security homepage · Read 27 Sep 2026
Built into	None
Works with	None in our sources

What else does Harmonic cover?

Harmonic: other coverage
Controls what goes into browser AI	MatchesBlock, warn or log on AI use in the browser. Source: Harmonic Security homepage · Read 27 Sep 2026
Records who or what took each action	Not in our sources
Also covers SaaS, cloud or homegrown AI	PartlyAn API is listed alongside device surfaces; SaaS or cloud agents are not described. Source: Harmonic Security homepage · Read 27 Sep 2026

What does Harmonic cost?

Three named tiers (Explore, Guide, Command) with no prices; a full prompt audit log is an add-on on Guide and Command.

Source: Harmonic Security pricing (re-read) · Read 11 Oct 2026

Where is Harmonic strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

Built to guide people as much as to stop them: block, warn or log.
Rolls out through Intune, JAMF, Kandji or Group Policy.
Covers the browser, desktop and CLI tools and MCP gateways in one product, and names its tiers publicly.

Limits

Tier names only, no prices, and the full prompt audit log is an add-on.
An activity record that separates a person from an agent is not described, and prompt injection protection is listed as coming soon.

What does Harmonic say about itself?

No vendor figures are quoted in these notes.

What has Harmonic announced recently?

28 Aug 2026
Summarised a Gartner Market Overview for AI Usage Control, quoting Gartner's prediction that by 2030 more than half of enterprises will use dedicated AI usage control technologies.
Source: Harmonic Security: Gartner AI usage control research · Read 27 Sep 2026

Who should shortlist Harmonic?

Consider Harmonic if your main risk is employees pasting sensitive data into AI tools and you would rather coach than block, or if you manage devices with Intune, JAMF, Kandji or Group Policy.

In our example finder profiles, Harmonic is in the first group for: Browser AI with customer data, coaching first, A handful of people using browser AI and Unmanaged devices, not sure what is in use.

Run the finder with your answers