{"family":"security","name":"Security, Governance & Identity","count":42,"license":"CC-BY-4.0","systems":[{"id":"acuvity-now-proofpoint--acuvity-ai","name":"Acuvity (now Proofpoint)","url":"https://acuvity.ai/ai-runtime-security/","section":"Memory governance, privacy & safety","tier":1,"status":"acquired","last_verified_at":"2026-10-23","type":"MCP / Shadow-AI runtime enforcement","license":"","latest_release":"","deployment":"on-prem or cloud (Proofpoint enterprise deployment); agentless approach","pricing":"enterprise pricing via Proofpoint (not public); contact sales","mcp_support":"Yes — Secure MCP servers (Model Context Protocol) is a core capability; protects MCP-based agent integrations","a2a_support":"no data — searched proofpoint.com/us/platform/ai-security, acuvity.ai/, acuvity.ai/integrations/, acuvity.ai/blog/; A2A protocol not advertised","backend_storage":"custom","llm_lock":"","github":"","storage":"n/a","retrieval":"agentic","persistence":"session","update":"read-only","unit":"prompt","governance":"auditable","conflict":"n/a","description":"Acquired by Proofpoint (closed 2026-02-12). Runtime enforcement targeting memory poisoning, unauthorised execution, identity spoofing per the OWASP LLM threat list. Visibility/control over MCP servers and locally-installed AI tools — the infrastructure layer where memory is most exposed.","cited_cells":39,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/acuvity-now-proofpoint--acuvity-ai"},{"id":"amazon-bedrock-guardrails--aws-amazon-com","name":"Amazon Bedrock Guardrails","url":"https://aws.amazon.com/bedrock/guardrails/","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/amazon-bedrock-guardrails--aws-amazon-com"},{"id":"arthur-engine--gh-arthur-ai-arthur-engine","name":"Arthur Engine","url":"https://github.com/arthur-ai/arthur-engine","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"MIT","latest_release":"last commit 2026-10-28","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/arthur-ai/arthur-engine (93★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source service from Arthur AI for enforcing guardrails in LLM and agent workflows, with real-time detection of PII leakage, hallucination, prompt injection and toxicity. It also provides trace-based evaluation and observability for agentic applications.","cited_cells":15,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/arthur-engine--gh-arthur-ai-arthur-engine"},{"id":"auth0-for-ai-agents--auth0-com","name":"Auth0 for AI Agents","url":"https://auth0.com/ai/docs/overview","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Auth0's identity layer for AI agents, covering user authentication, calling first- and third-party APIs on a user's behalf through delegated authorization, asynchronous human-in-the-loop approval (CIBA), fine-grained authorization for RAG, and auth for MCP.","cited_cells":11,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/auth0-for-ai-agents--auth0-com"},{"id":"azure-ai-content-safety-prompt-shields--learn-microsoft-com","name":"Azure AI Content Safety Prompt Shields","url":"https://learn.microsoft.com/en-us/azure/ai-services/content-safety/concepts/jailbreak-detection","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.","cited_cells":10,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/azure-ai-content-safety-prompt-shields--learn-microsoft-com"},{"id":"cloudflare-mcp-server-portals--developers-cloudflare-com","name":"Cloudflare MCP server portals","url":"https://developers.cloudflare.com/cloudflare-one/access-controls/ai-controls/mcp-portals/","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Cloudflare One feature that puts multiple MCP servers behind a single HTTP endpoint secured by Cloudflare Access, with customized tools and per-user policies for MCP clients.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/cloudflare-mcp-server-portals--developers-cloudflare-com"},{"id":"crowdstrike-falcon-guardian-formerly-pangea-ai-guard--crowdstrike-com","name":"CrowdStrike Falcon Guardian (formerly Pangea AI Guard)","url":"https://www.crowdstrike.com/en-us/platform/falcon-guardian-aidr/","section":"Guardrails & AI security","tier":3,"status":"acquired","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/crowdstrike-falcon-guardian-formerly-pangea-ai-guard--crowdstrike-com"},{"id":"descope-agentic-identity-hub--descope-com","name":"Descope Agentic Identity Hub","url":"https://www.descope.com/use-cases/ai","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Identity provider for AI agents and MCP servers that adds auth, consent, SSO, access control and policy to AI systems. It also manages purpose-built agent credentials for downstream connections and keeps a directory of an organization's agents.","cited_cells":10,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/descope-agentic-identity-hub--descope-com"},{"id":"docker-mcp-catalog-toolkit-gateway--docs-docker-com","name":"Docker MCP Catalog, Toolkit & Gateway","url":"https://docs.docker.com/ai/mcp-catalog-and-toolkit/","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary; mcp-gateway MIT","latest_release":"last commit 2026-10-26","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/docker/mcp-gateway (1616★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Docker's catalog of containerized MCP servers with a Desktop toolkit and an open-source MCP Gateway (docker mcp CLI plugin). An enterprise gateway authenticates users, scopes servers and tools, applies per-call policy and supplies credentials.","cited_cells":18,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/docker-mcp-catalog-toolkit-gateway--docs-docker-com"},{"id":"enkrypt-ai--enkryptai-com","name":"Enkrypt AI","url":"https://www.enkryptai.com/","section":"Memory governance, privacy & safety","tier":1,"status":"acquired","last_verified_at":"2026-10-29","type":"Three-point RAG / memory pipeline guardrails","license":"","latest_release":"","deployment":"SaaS for self-serve tiers; Enterprise offers VPC / on-prem deployment","pricing":"Explore free; Launch $149/mo ($134/mo annual); Scale $1,499/mo ($1,349/mo annual); Enterprise custom","mcp_support":"yes — MCP server scanning (Launch tier) and MCP Gateway + Registry (Scale/Enterprise)","a2a_support":"no data — searched enkryptai.com, enkryptai.com/platform/capabilities/ai-risk-removal, docs.enkryptai.com; A2A protocol not advertised","backend_storage":"custom","llm_lock":"","github":"","storage":"n/a","retrieval":"injection","persistence":"session","update":"read-only","unit":"policy","governance":"auditable","conflict":"n/a","description":"Applies guardrails at three points: (1) before write to vector DB, (2) before query reaches embedding model, (3) before response. Detects malicious instructions in stored memory before retrieval; scans for PII/PHI in/out. Text + image + voice modalities. Acquired by Anaconda (2026-08-04); Enkrypt AI is now sold as Anaconda's AI security and guardrails product.","cited_cells":42,"third_party_cells":6,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/enkrypt-ai--enkryptai-com"},{"id":"ghost-beacon--gh-moecanales-agent-oracle-beacon","name":"Ghost Beacon","url":"https://github.com/moecanales/agent-oracle-beacon","section":"MCP gateways & registries","tier":4,"status":"active","last_verified_at":"2026-10-31","type":"MCP tool server (GitHub-Issue rollover, board-game rules, transcript scan, A2A checks)","license":"MIT","latest_release":"v5.0 per README (2026-10-28); no GitHub releases published","deployment":"Self-hosted — runs locally over stdio via npx; static JSON shards served from GitHub Pages","pricing":"Free — MIT, no hosted plan","mcp_support":"yes — ships an MCP server (mcp-server.js) with 9 tools; install with npx -y github:moecanales/agent-oracle-beacon","a2a_support":"A2A discovery and DNS/TLS check tooling only; no verified A2A agent card of its own","backend_storage":"searched not found","llm_lock":"searched not found","github":"moecanales/agent-oracle-beacon — 0 stars, 1 fork, first commit 2026-10-22, last commit 2026-10-31","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Zero-dependency Node.js MCP server (npx -y github:moecanales/agent-oracle-beacon) exposing nine tools: GitHub-Issue context rollover and comment-mutex extraction (GBR-2500), board-game rules lookup over bundled CC0 datasets, an agent transcript scanner, and A2A discovery with DNS/TLS checks. Submitted by its author (issue #194); GBR-2500 (issue #299) is one of its tools in the same repository, not a separate system.","cited_cells":28,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/ghost-beacon--gh-moecanales-agent-oracle-beacon"},{"id":"glama-mcp--glama-ai","name":"Glama MCP","url":"https://glama.ai/mcp/servers","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Searchable directory of more than 112,000 MCP servers with license, quality and maintenance grades, plus an MCP directory API and connectors for agents.","cited_cells":7,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/glama-mcp--glama-ai"},{"id":"google-cloud-model-armor--cloud-google-com","name":"Google Cloud Model Armor","url":"https://cloud.google.com/security/products/model-armor","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/google-cloud-model-armor--cloud-google-com"},{"id":"guardrails-ai--guardrailsai-com","name":"Guardrails AI","url":"https://guardrailsai.com/","section":"Guardrails & AI security","tier":3,"status":"acquired","last_verified_at":"2026-10-29","type":"Framework","license":"Apache-2.0","latest_release":"last commit 2026-08-26","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/guardrails-ai/guardrails (7568★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.","cited_cells":14,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/guardrails-ai--guardrailsai-com"},{"id":"hiddenlayer-aisec-platform-2-0--hiddenlayer-com","name":"HiddenLayer AISec Platform 2.0","url":"https://www.hiddenlayer.com/platform","section":"Memory governance, privacy & safety","tier":1,"status":"active","last_verified_at":"2026-10-22","type":"Model Genealogy + AIBOM (supply-chain layer)","license":"","latest_release":"","deployment":"Agentless, model-agnostic; connectors for cloud, CI/CD, SIEM/SOAR, API gateways, MLOps (specific SaaS/on-prem options not stated)","pricing":"enterprise pricing; contact sales; no public pricing","mcp_support":"Yes — Agentic and MCP Security use-case (Use case 04); protects agents and MCP-based systems from prompt injection / unsafe tool use","a2a_support":"no data — searched hiddenlayer.com, hiddenlayer.com/platform, docs.hiddenlayer.com; A2A protocol not advertised","backend_storage":"custom","llm_lock":"","github":"","storage":"n/a","retrieval":"n/a","persistence":"long-term","update":"read-only","unit":"model","governance":"auditable","conflict":"n/a","description":"AI security platform with four modules: AI asset discovery, supply-chain/model integrity validation, continuous attack simulation, and runtime detection/response, including protection of agents and MCP-based systems.","cited_cells":41,"third_party_cells":2,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/hiddenlayer-aisec-platform-2-0--hiddenlayer-com"},{"id":"hyperconsciousness-hc--gh-louis030195-hyperconsciousness","name":"Hyperconsciousness (hc)","url":"https://github.com/louis030195/hyperconsciousness","section":"Memory governance, privacy & safety","tier":3,"status":"active","last_verified_at":"2026-10-23","type":"Framework","license":"MIT","latest_release":"last commit 2026-10-21","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/louis030195/hyperconsciousness (8★)","storage":"append-only","retrieval":"exact-match","persistence":"long-term","update":"append-only","unit":"document|file","governance":"user-controllable|auditable","conflict":"append-only","description":"Developer-alpha encrypted, append-only knowledge store for humans and agents, with CLI/MCP access and scoped, expiring grants. Traction: Submitted via intake issue #181","cited_cells":16,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/hyperconsciousness-hc--gh-louis030195-hyperconsciousness"},{"id":"ibm-contextforge-mcp-gateway--ibm-github-io","name":"IBM ContextForge MCP Gateway","url":"https://ibm.github.io/mcp-context-forge/","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"Apache-2.0","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/IBM/mcp-context-forge (4720★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source registry and proxy that federates MCP, A2A and REST/gRPC APIs behind one endpoint with centralized discovery, guardrails, governance and plugins.","cited_cells":15,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/ibm-contextforge-mcp-gateway--ibm-github-io"},{"id":"invariant-guardrails--invariantlabs-ai","name":"Invariant Guardrails","url":"https://invariantlabs.ai/blog/guardrails","section":"Guardrails & AI security","tier":3,"status":"acquired","last_verified_at":"2026-10-29","type":"Framework","license":"Apache-2.0","latest_release":"last commit 2026-01-12","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/invariantlabs-ai/invariant (475★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Contextual guardrailing layer for agentic and MCP applications that sits at the LLM and MCP level. It enforces deterministic rules over tool calls, data flow, secrets, PII, code and loops.","cited_cells":14,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/invariant-guardrails--invariantlabs-ai"},{"id":"keycard--keycard-ai","name":"Keycard","url":"https://www.keycard.ai/","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Runtime auth for agents that gives each agent its own identity and issues just-in-time, scoped credentials after verifying the workload, the user it acts for, and policy.","cited_cells":10,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/keycard--keycard-ai"},{"id":"kong-ai-gateway--konghq-com","name":"Kong AI Gateway","url":"https://konghq.com/products/kong-ai-gateway","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"Apache-2.0 (Kong Gateway OSS); enterprise features proprietary","latest_release":"last commit 2026-10-19","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/Kong/kong (44321★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Kong's gateway for governing LLM, MCP and agent-to-agent (A2A) traffic in one place. It controls access, data leakage and token usage for LLM calls, and generates and secures MCP servers for agents.","cited_cells":13,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/kong-ai-gateway--konghq-com"},{"id":"lakera-guard-lakera-red--lakera-ai","name":"Lakera Guard / Lakera Red","url":"https://www.lakera.ai/ai-agent-security","section":"Memory governance, privacy & safety","tier":1,"status":"acquired","last_verified_at":"2026-10-29","type":"Real-time prompt-injection + poisoning screen","license":"","latest_release":"","deployment":"REST API (SaaS cloud) or self-hosted Enterprise deployment","pricing":"Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection)","mcp_support":"no data — MCP referenced in Lakera blog as a threat-research topic only; no native MCP integration advertised (searched lakera.ai, docs.lakera.ai, lakera.ai/blog)","a2a_support":"no data — searched lakera.ai/lakera-guard, docs.lakera.ai, docs.lakera.ai/lakera-guard/integrations; A2A protocol not advertised","backend_storage":"custom","llm_lock":"","github":"","storage":"proprietary","retrieval":"injection","persistence":"session","update":"read-only","unit":"attack","governance":"auditable","conflict":"n/a","description":"Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning. Treats memory as untrusted: anything written to or read from memory is adversarial until proven clean. Lakera Red provides \"Agent Breaker\" gamified red-teaming.","cited_cells":43,"third_party_cells":4,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/lakera-guard-lakera-red--lakera-ai"},{"id":"lunar-dev-mcpx--lunar-dev","name":"Lunar.dev MCPX","url":"https://www.lunar.dev/","section":"MCP gateways & registries","tier":3,"status":"acquired","last_verified_at":"2026-10-29","type":"Product","license":"MIT (open-source gateway); enterprise proprietary","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/TheLunarCompany/lunar (506★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Enterprise MCP and AI gateway (MCPX) that secures and governs AI applications and agents with policy enforcement, cost management and observability. Boomi acquired Lunar.dev in July 2026.","cited_cells":13,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/lunar-dev-mcpx--lunar-dev"},{"id":"mem0-security-openmemory--mem0-ai","name":"Mem0 Security / OpenMemory","url":"https://trust.mem0.ai/","section":"Memory governance, privacy & safety","tier":1,"status":"active","last_verified_at":"2026-10-29","type":"SOC 2 + HIPAA + zero-trust + BYOK","license":"Apache-2.0","latest_release":"v2.2.1 (2026-09-25)","deployment":"SaaS cloud; Enterprise VPC; OpenMemory hosted or self-hosted (Docker)","pricing":"Hobby free (10K adds/1K retrievals/mo); Starter $19/mo; Pro $249/mo; Enterprise custom","mcp_support":"native (first-party)","a2a_support":"no data — searched mem0.ai/security, docs.mem0.ai, docs.mem0.ai/platform/overview; A2A protocol not advertised","backend_storage":"hybrid","llm_lock":"","github":"mem0ai/mem0 — ~67.3k stars, last release 2026-09","storage":"vector|graph","retrieval":"similarity|graph-traversal","persistence":"long-term","update":"extraction","unit":"fact","governance":"auditable","conflict":"llm-arbitrate","description":"Commercial Mem0 ships SOC 2 / HIPAA, zero-trust access controls, BYOK encryption, real-time monitoring, audit logs and workspace governance as defaults (Trust Center at trust.mem0.ai). For privacy-first deployments the self-hosted path is now the Mem0 open-source server (REST API + dashboard via Docker Compose with pgvector Postgres, admin setup wizard, per-user API keys, request audit log). As of Oct 2026 OpenMemory itself is a hosted MCP service and its old local Docker variant is no longer in the repo.","cited_cells":66,"third_party_cells":4,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/mem0-security-openmemory--mem0-ai"},{"id":"merge-agent-handler--merge-dev","name":"Merge Agent Handler","url":"https://www.merge.dev/merge-agent-handler","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Production MCP connectors that link AI agents to thousands of enterprise tools, with guided user authentication, data-access controls and observability built in.","cited_cells":10,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/merge-agent-handler--merge-dev"},{"id":"meta-llama-protections-llama-guard-prompt-guard-llamafirewall--dev-meta-ai","name":"Meta Llama Protections (Llama Guard, Prompt Guard, LlamaFirewall)","url":"https://dev.meta.ai/llama/llama-protections","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"Llama 3.2 Community License (Llama Guard / Prompt Guard models); LlamaFirewall and Code Shield MIT","latest_release":"last commit 2026-10-12","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/meta-llama/PurpleLlama (4450★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Meta's open system-level safeguards from the Purple Llama project: Llama Guard content-moderation classifiers, Prompt Guard prompt-injection and jailbreak detectors, Code Shield insecure-code filtering, and LlamaFirewall, a scanner framework for securing multi-step agentic operations.","cited_cells":12,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/meta-llama-protections-llama-guard-prompt-guard-llamafirewall--dev-meta-ai"},{"id":"microsoft-agent-governance-toolkit--gh-microsoft-agent-governance-toolkit","name":"Microsoft Agent Governance Toolkit","url":"https://github.com/microsoft/agent-governance-toolkit","section":"Memory governance, privacy & safety","tier":2,"status":"active","last_verified_at":"2026-10-22","type":"Cross-Model Verification Kernel + Agent OS","license":"MIT","latest_release":"v4.1.0 (2026-06-11)","deployment":"library/SDK integration; multi-language (Python TypeScript Rust Go .NET); LangChain/CrewAI/Google ADK integrations","pricing":"free / open source (MIT)","mcp_support":"Yes — MCP Security Scanner (tool poisoning, typosquatting, hidden instructions); A2A/MCP Protocol Bridge in Agent Mesh","a2a_support":"Yes — Agent Mesh provides A2A/MCP/IATP protocol bridges (per agentmesh-platform docs); zero-trust identity + trust scoring","backend_storage":"custom (Microsoft 365)","llm_lock":"","github":"microsoft/agent-governance-toolkit — ~6.1k stars","storage":"append-only","retrieval":"agentic","persistence":"session","update":"read-only","unit":"policy","governance":"auditable","conflict":"llm-arbitrate","description":"Cross-Model Verification Kernel (CMVK) requires majority-voting agreement across multiple model calls before a memory-influenced action. Agent OS package intercepts every action (memory included) at sub-millisecond latency. MIT licensed.","cited_cells":53,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/microsoft-agent-governance-toolkit--gh-microsoft-agent-governance-toolkit"},{"id":"microsoft-mcp-gateway--gh-microsoft-mcp-gateway","name":"Microsoft MCP Gateway","url":"https://github.com/microsoft/mcp-gateway","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"MIT","latest_release":"last commit 2026-10-27","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/microsoft/mcp-gateway (899★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Reverse proxy and management layer for MCP servers on Kubernetes, providing session-aware stateful routing and lifecycle management.","cited_cells":13,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/microsoft-mcp-gateway--gh-microsoft-mcp-gateway"},{"id":"nango--nango-dev","name":"Nango","url":"https://nango.dev/","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"Elastic-2.0","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/NangoHQ/nango (13034★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Code-first integration platform that connects products and AI agents to 1,000+ APIs. It handles end-user OAuth, MCP and tools, syncs, webhooks and a request proxy.","cited_cells":14,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/nango--nango-dev"},{"id":"nvidia-nemo-guardrails--docs-nvidia-com","name":"NVIDIA NeMo Guardrails","url":"https://docs.nvidia.com/nemo/guardrails/about-nemo-guardrails-library/overview","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"Apache-2.0","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/NVIDIA-NeMo/Guardrails (7394★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source Python library for adding programmable guardrails to LLM-based applications and agents. It blocks, alters or validates unsafe, off-topic, malicious or policy-violating user inputs and model responses using configuration files, Colang flows and built-in rails.","cited_cells":16,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/nvidia-nemo-guardrails--docs-nvidia-com"},{"id":"obot--obot-ai","name":"Obot","url":"https://obot.ai/","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"MIT","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/obot-platform/obot (1136★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source AI control plane and MCP platform that connects agents to MCP servers through one OAuth setup. It enforces policy on what agents can do and records full audit logs of tool calls and LLM requests.","cited_cells":14,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/obot--obot-ai"},{"id":"official-mcp-registry--registry-modelcontextprotocol-io","name":"Official MCP Registry","url":"https://registry.modelcontextprotocol.io/","section":"MCP gateways & registries","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"Apache-2.0 (transitioning from MIT)","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/modelcontextprotocol/registry (7419★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Community-driven registry service and API run by the Model Context Protocol project, where publishers list MCP servers under namespaced, versioned entries for clients and downstream catalogs to discover.","cited_cells":12,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/official-mcp-registry--registry-modelcontextprotocol-io"},{"id":"okta-cross-app-access-xaa--okta-com","name":"Okta Cross App Access (XAA)","url":"https://www.okta.com/solutions/cross-app-access/","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Okta-backed protocol for secure agent-to-app and app-to-app access, letting enterprise IT admins manage and audit which agents connect to which applications instead of relying on shared credentials or embedded tokens.","cited_cells":7,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/okta-cross-app-access-xaa--okta-com"},{"id":"owasp-agent-memory-guard--owasp-org","name":"OWASP Agent Memory Guard","url":"https://owasp.org/www-project-agent-memory-guard/","section":"Memory governance, privacy & safety","tier":3,"status":"active","last_verified_at":"2026-10-22","type":"Declarative YAML policies + SHA-256 baselines","license":"Apache-2.0","latest_release":"v0.3.1 (2026-08-25)","deployment":"local deployment; Python; run against local memory stores","pricing":"free / open source","mcp_support":"","a2a_support":"","backend_storage":"","llm_lock":"","github":"OWASP/www-project-agent-memory-guard — ~185 stars, last commit 2026-08","storage":"file","retrieval":"exact-match","persistence":"long-term","update":"read-only","unit":"file","governance":"auditable","conflict":"n/a","description":"Open-source runtime defense. Enforces YAML policies on every memory read/write. SHA-256 baselines detect tampering, injection, sensitive-data leakage, protected-key modification, rapid-change anomalies. Forensic snapshots + rollback. Reference impl for OWASP ASI06 (Memory Poisoning).","cited_cells":40,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/owasp-agent-memory-guard--owasp-org"},{"id":"paragon-actionkit--useparagon-com","name":"Paragon ActionKit","url":"https://www.useparagon.com/actionkit","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"One API and MCP server that gives an AI agent product 1,000+ integration actions, with Paragon's embedded UI handling end users' authentication to their external apps.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/paragon-actionkit--useparagon-com"},{"id":"pipedream-connect--pipedream-com","name":"Pipedream Connect","url":"https://pipedream.com/connect","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary; components repo under Pipedream Source Available License","latest_release":"last commit 2026-10-28","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/PipedreamHQ/pipedream (11763★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Integration layer for AI agents with managed per-user auth and 10,000+ prebuilt tools across 3,000+ APIs. It is exposed through a remote MCP server, an SDK or a raw API proxy.","cited_cells":14,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/pipedream-connect--pipedream-com"},{"id":"presidio--presidio-dataprivacystack-org","name":"Presidio","url":"https://presidio.dataprivacystack.org/","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"MIT","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/data-privacy-stack/presidio (11579★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.","cited_cells":12,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/presidio--presidio-dataprivacystack-org"},{"id":"prompt-security-sentinelone--sentinelone-com","name":"Prompt Security (SentinelOne)","url":"https://www.sentinelone.com/platform/securing-ai-prompt/","section":"Guardrails & AI security","tier":3,"status":"acquired","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"AI security platform that controls employee AI tool usage, protects homegrown AI apps and autonomous agents, and redacts sensitive data and enforces policy across AI services. It is now offered by SentinelOne, and prompt.security links to SentinelOne's product page.","cited_cells":8,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/prompt-security-sentinelone--sentinelone-com"},{"id":"pyrit--microsoft-github-io","name":"PyRIT","url":"https://microsoft.github.io/PyRIT/","section":"Guardrails & AI security","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Framework","license":"MIT","latest_release":"last commit 2026-10-29","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/microsoft/PyRIT (4712★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Microsoft's Python Risk Identification Tool, an open framework for automated and human-led red teaming of generative AI systems. It runs multi-turn attack strategies such as Crescendo and TAP against any model or HTTP target.","cited_cells":12,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/pyrit--microsoft-github-io"},{"id":"smithery--smithery-ai","name":"Smithery","url":"https://smithery.ai/","section":"MCP gateways & registries","tier":3,"status":"dead","last_verified_at":"2026-10-31","type":"Product","license":"proprietary; CLI AGPL-3.0","latest_release":"last commit 2026-05-31","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"https://github.com/smithery-ai/cli (849★)","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Public directory of MCP servers, now part of Arcade.dev. Until 2026-10-31 it was also a connection layer (hosted MCP proxy, Connect, Toolbox, managed credentials, API, CLI and SDKs); those shut down that day, and verified servers' registry pages now list direct MCP URLs.","cited_cells":14,"third_party_cells":1,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/smithery--smithery-ai"},{"id":"stytch-connected-apps--stytch-com","name":"Stytch Connected Apps","url":"https://stytch.com/connected-apps","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"Turns an app into an OAuth 2.0/OIDC identity provider so AI agents and MCP clients can be authorized against it. It handles token issuance, validation and revocation with user-controlled, token-based permissions.","cited_cells":10,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/stytch-connected-apps--stytch-com"},{"id":"workos-authkit-for-mcp--workos-com","name":"WorkOS AuthKit for MCP","url":"https://workos.com/mcp","section":"Agent identity & auth","tier":3,"status":"active","last_verified_at":"2026-10-29","type":"Product","license":"proprietary","latest_release":"searched not found","deployment":"searched not found","pricing":"searched not found","mcp_support":"searched not found","a2a_support":"searched not found","backend_storage":"searched not found","llm_lock":"searched not found","github":"","storage":"","retrieval":"","persistence":"","update":"","unit":"","governance":"","conflict":"","description":"WorkOS AuthKit acts as an OAuth 2.1 authorization server for MCP servers, giving AI agents scoped access to an app with PKCE, scopes and tool permissions. WorkOS Connect can provide only the MCP OAuth flows in front of an existing user system.","cited_cells":9,"third_party_cells":0,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/workos-authkit-for-mcp--workos-com"},{"id":"zep-governance-posture--getzep-com","name":"Zep — governance posture","url":"https://www.getzep.com/product/agent-memory/","section":"Memory governance, privacy & safety","tier":1,"status":"active","last_verified_at":"2026-10-22","type":"Bi-temporal KG = structural provenance","license":"","latest_release":"","deployment":"SaaS cloud; self-hosted (Graphiti OSS); Enterprise: BYOC VPC","pricing":"Free 10k credits/mo; Flex ~$125/mo (50k credits); Flex Plus ~$375/mo (200k credits); Enterprise custom (third-party tracker, prices inconsistent — confirm on getzep.com/pricing)","mcp_support":"native (first-party) — Graphiti MCP","a2a_support":"no data — searched getzep.com/product/agent-memory, help.getzep.com, docs.getzep.com; A2A protocol not advertised","backend_storage":"Postgres + Neo4j","llm_lock":"","github":"","storage":"graph","retrieval":"graph-traversal","persistence":"long-term","update":"append-only","unit":"fact|episode","governance":"auditable","conflict":"bi-temporal","description":"Bi-temporal knowledge graph preserves full lineage of every stored fact — every memory write traceable and auditable by graph schema, not bolted-on logging. SOC 2 Type II; HIPAA BAA available; BYOK + VPC-isolated deployment for data residency.","cited_cells":46,"third_party_cells":6,"page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/zep-governance-posture--getzep-com"}]}