Does Noma decide on AI agent actions before they run?

Partly. Runtime inspection of the event, the session, the identity behind the agent and the data it reaches; decisions on individual tool calls are described less specifically. Warn or ask: Partly.

How does Noma reach employee devices?

Discovers endpoint agents through your existing EDR or MDM, with no new endpoint agent to deploy.

PRODUCT NOTES · NOMA SECURITY

Noma Security: AI endpoint control facts (2026)

Short answer

Noma Security covers AI agents on endpoints, in SaaS and in homegrown apps. On devices it discovers agents such as Claude Code, Cursor and Codex with their MCP servers and skills through your existing EDR or MDM, without a new endpoint agent, and blocks unauthorized ones. Warn or ask actions and a simulation mode are not described, and its only public price is a $200,000 a year AWS Marketplace listing.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Visit Noma's site

Where do Noma's controls sit?

DEV Filled marker: described on the product pages we read
DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
DEV Dashed marker: not in our sources (it may exist; we did not find it)

The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.

The four product control types, plus policy only.
Type	Status	What the pages say	Source
On-device control	Described	Discovers endpoint agents such as Claude Code, Cursor and Codex with their MCP servers and skills, blocks unauthorized and malicious ones, and inspects activity at runtime.	Source: Noma Security: endpoint agents · Read 27 Sep 2026
Browser extension	Not in our sources	Not described on the pages we read.	None
Network or SSE proxy	Not in our sources	Not described on the pages we read.	None
AI or MCP gateway	Not in our sources	Not described on the pages we read.	None
Policy only	No product needed	Policy is your own work whichever product you choose.	None

How does Noma decide on an AI action?

Noma: decisions
Decides on a tool call before it runs	PartlyRuntime inspection of the event, the session, the identity behind the agent and the data it reaches; decisions on individual tool calls are described less specifically. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Can warn or ask instead of only blocking	PartlyStates that runtime decisions can route to a human. Source: Noma Security: endpoint agents (re-read) · Read 13 Oct 2026
Can block an agent, tool or action	MatchesBlocks unauthorized and malicious agents. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Has a watch-only or simulation mode	Not in our sources

How does Noma reach devices, and which AI tools does it name?

Noma: rollout and named tools
How it reaches devices	Discovers endpoint agents through your existing EDR or MDM, with no new endpoint agent to deploy. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Rolls out through EDR or device management you run	MatchesThrough your existing EDR or MDM, with no new endpoint agent. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Names the coding agents it covers	MatchesNames Claude Code, Cursor and Codex. Source: Noma Security: endpoint agents · Read 27 Sep 2026
AI tools and surfaces named	Endpoint agents such as Claude Code, Cursor and Codex with their MCP servers and skills, plus SaaS and homegrown agents. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Built into	None
Works with	None in our sources

What else does Noma cover?

Noma: other coverage
Controls what goes into browser AI	Not in our sources
Records who or what took each action	PartlyKeeps a live registry of allowed agents, MCP servers and skills and inspects the identity behind each agent. Source: Noma Security: endpoint agents · Read 27 Sep 2026
Also covers SaaS, cloud or homegrown AI	MatchesCovers endpoint, SaaS and homegrown agents. Source: Noma Security homepage · Read 27 Sep 2026

What does Noma cost?

Marketplace list price: $200,000 for a 12-month contract on AWS Marketplace. No pricing page on noma.security.

Source: AWS Marketplace: Noma Security Platform · Read 11 Oct 2026

Where is Noma strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

Endpoint agents, SaaS agents and homegrown agents in one platform.
Discovery through the EDR or MDM you already run, with no new endpoint agent.
Names the coding agents it finds: Claude Code, Cursor and Codex.

Limits

A watch-only or simulation mode is not described on the pages we read.
Decisions on individual tool calls are described less specifically than discovery, and the only public price is a $200,000 a year marketplace listing.

What does Noma say about itself?

What has Noma announced recently?

23 Sep 2026
Said Gartner placed it as a Market Shaper in the Full-Spectrum, Context-Aware Agentic Security category of an Emerging Market Quadrant for AI Application Security, Startup Vendors.
Source: Noma Security blog: Gartner Market Shaper · Read 27 Sep 2026
26 Aug 2026
Launched Noma Power for Amazon Kiro, which shows AI asset inventory, exposure and findings inside the Kiro coding environment.
Source: Noma Security blog: Noma Power for Amazon Kiro · Read 27 Sep 2026
31 Jul 2025
Announced a $100M Series B led by Evolution Equity Partners.
Source: Noma Security blog: $100M Series B · Read 11 Oct 2026

Who should shortlist Noma?

Consider Noma if agents run on laptops, in SaaS and in apps you build, and you want one place to see them, or if you want discovery through existing EDR or MDM without a new agent.

In our example finder profiles, Noma is not in the first group; your own answers may differ.

Run the finder with your answers