The verdict
We review nine tools that find and control AI agents, coding assistants and MCP servers on employee devices. Bay ranks first on our endpoint-weighted rubric (7.9), followed by Noma Security (7.5), with Zenity and Onyx tied at 7.4. None of the nine publishes list prices.
| Tool | Owner | How it reaches devices | Pricing | Score |
|---|---|---|---|---|
| Bay | Not acquired | Through existing EDR or MDM (ephemeral binary) | Not published | 7.9 |
| Noma Security | Not acquired | Through existing EDR or MDM | Not published | 7.5 |
| Onyx Security | Not acquired | Endpoint agent, browser extension, API, gateway | Not published | 7.4 |
| Zenity | Not acquired | Agent hooks and MCP gateway; method not published | Not published | 7.4 |
| Harmonic Security | Not acquired | Intune, JAMF, Kandji or Group Policy | Tier names only | 7.1 |
| Koi | Palo Alto Networks | Cortex XDR module or standalone agent | Not published | 7.1 |
| Lasso Security | Not acquired | Browser extension, proxy, gateway, Claude Code hooks | Not published | 6.6 |
| Prompt Security | SentinelOne | Part of Singularity Platform; method not published | Not published | 6.6 |
| Bloom Security | Not acquired | Not published | Not published | 6.0 |
Rank 1
Editors' pick for endpoint agent control
Endpoint-first control for AI agents, coding assistants and MCP servers, with Allow, Ask or Deny decisions on each tool call and session context. Deploys through existing EDR or MDM; limited public documentation so far.
Rank 2
Best for endpoint plus SaaS and homegrown agents
Covers AI agents on endpoints, in SaaS and in homegrown apps, with discovery through existing EDR or MDM. A good fit when the endpoint is one of several places your agents run.
Rank =3
Best for inline control across many AI surfaces
Inline inspection of prompts, tool calls and responses with five enforcement actions, across browser, desktop, coding and cloud AI. Uses endpoint agents and browser extensions.
Rank =3
Best for SaaS and Microsoft agent estates
Broad agent security across SaaS, cloud and coding agents, with pre-execution blocking through agent hooks and an MCP gateway. Endpoint deployment detail is not published.
Rank =5
Best for data protection in everyday AI use
Data protection for everyday AI use, deployed through Intune, JAMF, Kandji or Group Policy, with an MCP gateway for agents. Strongest on coaching users rather than only blocking.
Rank =5
Palo Alto Networks (acquisition completed 14 April 2026)
Best for Palo Alto Cortex customers
Visibility and prevention for models, MCPs, extensions and packages on the endpoint, now part of Palo Alto Networks Cortex. The natural option for Cortex XDR customers.
Rank =7
Best for MCP gateway and Claude Code hooks
Tool-call inspection through Claude Code hooks and an open-source MCP gateway, plus usage control and red teaming. Several components to deploy.
Rank =7
SentinelOne (acquisition announced 5 August 2025)
Best for SentinelOne customers
Discovery and protection for employee and developer AI use, built into the SentinelOne Singularity Platform. Deployment detail is thin on public pages.
Rank 9
Best for endpoint software and extension inventory
Deep inventory of everything running on the endpoint, including AI tools, extensions and packages. Enforcement at the tool-call level and deployment are not documented yet.
Scores are editorial assessments on seven weighted criteria. Compare two tools: Bay vs Noma Security, Bay vs Koi, Harmonic Security vs Prompt Security.
On public pages reviewed in September 2026, Bay and Noma Security state they deploy through existing EDR or MDM without a new endpoint agent, and Harmonic Security rolls out through Intune, JAMF, Kandji or Group Policy. Koi runs as a Cortex XDR module or standalone agent, and Onyx uses endpoint agents and browser extensions.
Koi by Palo Alto Networks (completed 14 April 2026) and Prompt Security by SentinelOne (announced 5 August 2025).