Does Lasso decide on AI agent actions before they run?

Matches. Inspects every Claude Code tool call before it is executed. Warn or ask: Partly.

How does Lasso reach employee devices?

Several components: a browser extension and proxy integrations for usage control, an open-source MCP gateway, and Claude Code lifecycle hooks set through the enterprise management platform.

PRODUCT NOTES · LASSO SECURITY

Lasso Security: AI endpoint control facts (2026)

Short answer

Lasso Security spreads its controls across the most positions of the products here: a browser extension, proxy integrations, an open-source MCP gateway and Claude Code lifecycle hooks that inspect every tool call before it runs, plus discovery, posture management and red teaming for AI apps. That means several components to run, asking the user before an action is not described, and its only public price is a $20,000 a year AWS Marketplace listing for its chatbot product.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Visit Lasso's site

Where do Lasso's controls sit?

DEV Filled marker: described on the product pages we read
DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
DEV Dashed marker: not in our sources (it may exist; we did not find it)

The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.

The four product control types, plus policy only.
Type	Status	What the pages say	Source
On-device control	Partly described	Connects directly to Claude Code's lifecycle hooks via the enterprise management platform and inspects every tool call before it runs; a resident device agent is not described.	Source: Lasso Security: AI coding assistants · Read 27 Sep 2026
Browser extension	Described	AI usage control through a browser extension.	Source: Lasso Security: AI usage control · Read 27 Sep 2026
Network or SSE proxy	Described	Proxy integrations for AI usage control; the page says it works with Palo Alto Networks or CrowdStrike.	Source: Lasso Security: AI usage control · Read 27 Sep 2026
AI or MCP gateway	Described	An open-source MCP gateway that discovers MCP servers across Claude, Cursor and Windsurf and can block, alert or sanitize.	Source: Lasso Security: MCP security · Read 27 Sep 2026
Policy only	No product needed	Policy is your own work whichever product you choose.	None

How does Lasso decide on an AI action?

Lasso: decisions
Decides on a tool call before it runs	MatchesInspects every Claude Code tool call before it is executed. Source: Lasso Security: AI coding assistants · Read 27 Sep 2026
Can warn or ask instead of only blocking	PartlyAlert is an action; asking the user is not described. Source: Lasso Security: MCP security · Read 27 Sep 2026
Can block an agent, tool or action	MatchesBlock, alert or sanitize on MCP traffic. Source: Lasso Security: MCP security · Read 27 Sep 2026
Has a watch-only or simulation mode	PartlyAlert without blocking. Source: Lasso Security: MCP security · Read 27 Sep 2026

How does Lasso reach devices, and which AI tools does it name?

Lasso: rollout and named tools
How it reaches devices	Several components: a browser extension and proxy integrations for usage control, an open-source MCP gateway, and Claude Code lifecycle hooks set through the enterprise management platform. Source: Lasso Security: AI usage control · Read 27 Sep 2026
Rolls out through EDR or device management you run	PartlyClaude Code hooks are set through the enterprise management platform; the other components are a browser extension, a proxy and a gateway. Source: Lasso Security: AI coding assistants · Read 27 Sep 2026
Names the coding agents it covers	MatchesClaude Code lifecycle hooks, and MCP discovery across Claude, Cursor and Windsurf. Source: Lasso Security: AI coding assistants · Read 27 Sep 2026
AI tools and surfaces named	Browser AI use, MCP servers across Claude, Cursor and Windsurf, Claude Code, and AI apps. Source: Lasso Security: MCP security · Read 27 Sep 2026
Built into	None
Works with	The usage control page says it works with Palo Alto Networks. The usage control page says it works with CrowdStrike. Offers proxy integrations for AI usage control. Source: Lasso Security: AI usage control · Read 27 Sep 2026

What else does Lasso cover?

Lasso: other coverage
Controls what goes into browser AI	MatchesUsage control through a browser extension. Source: Lasso Security: AI usage control · Read 27 Sep 2026
Records who or what took each action	PartlyAudit-ready reports. Source: Lasso Security: AI usage control · Read 27 Sep 2026
Also covers SaaS, cloud or homegrown AI	MatchesDiscovery and AI-BOM, posture management, red teaming and runtime enforcement for AI apps. Source: Lasso Security homepage · Read 27 Sep 2026

What does Lasso cost?

Marketplace list price: Lasso for Employees, annual commit for GenAI chatbots, $20,000 for 12 months on AWS Marketplace. Other products: not published.

Source: AWS Marketplace: Lasso for Employees · Read 11 Oct 2026

Where is Lasso strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

The widest spread of control positions in this set: a browser extension, proxy integrations, an MCP gateway and Claude Code hooks.
Inspects each Claude Code tool call before it runs, and its MCP gateway is open source.
Covers AI apps beyond the device, with discovery, posture management and red teaming.

Limits

Several components to deploy and run.
Asking the user before an action is not described, and the only public price covers its chatbot product on AWS Marketplace.

What does Lasso say about itself?

No vendor figures are quoted in these notes.

What has Lasso announced recently?

9 Sep 2026
Introduced LEAP, a patent-pending guardrail classification architecture that Lasso says reaches GPU-class detection accuracy on an ordinary CPU.
Source: Lasso Security blog: introducing LEAP · Read 27 Sep 2026
2 Sep 2026
Lasso's newsroom lists a $30 million funding round led by ClearSky with Entrée Capital, announced alongside LEAP.
Source: Lasso Security newsroom · Read 11 Oct 2026

Who should shortlist Lasso?

Consider Lasso if you want controls in several places at once: browser, proxy, MCP gateway and coding agent hooks, or if you prefer an open-source MCP gateway you can inspect.

In our example finder profiles, Lasso is in the first group for: Browser AI and coding agents on managed devices, coaching first, Cloud workspaces behind an SSE, regulated data and Unmanaged devices, not sure what is in use.

Run the finder with your answers