Best AI Security markBest AI Security

Tool review · Checked against vendor sites, October 2026

Neo review (2026): approval holds and an agent-level audit trail

The verdict

Neo has the deepest inventory and audit trail among the newer specialists: it keeps a live inventory of agents, models, skills, MCP servers and extensions on every endpoint, intercepts each agent action to allow, block, redirect or hold it for human approval, and ties every action to the human or agent that caused it. It uses its own endpoint sensor, and it has no public documentation portal or pricing.

Rank =3 of 13

Best for approval holds and an agent-level audit trail

Visit Neo

About this profile

Neo Security, Inc., at neo.ai; not Pulumi Neo.

What does Neo do?

  • Live inventory of agents, models, skills, MCP servers and extensions on every endpoint, with risk scores from its Neoverse knowledge base.
  • Intercepts agent actions at the endpoint and allows, blocks, redirects or holds them for verified human approval before they run.
  • Policies built with a built-in LLM, such as Block secret reads or Hold exports over 10 MB, with an audit mode before enforcement.
  • Ties every action to the human or agent that caused it, in what Neo calls an immutable audit chain, with alerts to a SIEM.
  • Its platform page names Claude Code, Gemini CLI, GitHub Copilot, OpenAI Codex, ChatGPT Desktop, Perplexity, Mistral Le Chat, Slack AI, Notion AI and Salesforce Agentforce. Cursor is not named.

Source: neo.ai · Neo platform · Neo launch announcement (20 Jul 2026) · Read 2026-10-13

How does Neo deploy?

A lightweight endpoint sensor with no kernel module, no reboot and no OS hooks; analysis stays on the device. It is a new sensor rather than a rollout through existing EDR, and OS support is not listed on the pages we read.

Source: neo.ai · Neo platform · Neo launch announcement (20 Jul 2026) · Read 2026-10-13

How does Neo score?

HIGHEST IN GUIDE
Endpoint and agent visibilityWeight 22%9/10

Live inventory of agents, models, skills, MCP servers and extensions on every endpoint, with risk scores from its Neoverse knowledge base.

MCP and tool-call controlWeight 20%8/10

Intercepts agent actions at the endpoint and allows, blocks or holds them for approval before they run.

Policy granularityWeight 15%8/10

Policies built with a built-in LLM, such as Block secret reads or Hold exports over 10 MB; actions are allow, block, redirect or hold for verified human approval, with an audit mode before enforcement.

HIGHEST IN GUIDE
Agent vs human identity and auditWeight 12%8/10

Ties every action to the human or agent that caused it, in what Neo calls an immutable audit chain, with alerts to a SIEM.

Deployment footprintWeight 13%6/10

A lightweight endpoint sensor with no kernel module, no reboot and no OS hooks; analysis stays on the device. It is a new sensor rather than a rollout through existing EDR, and OS support is not listed on the pages we read.

Coverage beyond the endpointWeight 8%6/10

Its platform page names desktop and SaaS AI such as ChatGPT Desktop, Slack AI, Notion AI and Salesforce Agentforce alongside coding agents; cloud workloads and red teaming are not described.

Maturity and transparencyWeight 10%5/10

Came out of stealth on 20 July 2026 with $100M from Andreessen Horowitz and Bessemer; no documentation portal or pricing on neo.ai.

Total

How we score

Where is Neo strongest?

  • Hold for verified human approval as a policy action, alongside allow, block and redirect.
  • Attribution of every action to the human or agent that caused it.
  • Inventory that covers agents, models, skills, MCP servers and extensions.
  • Audit mode before enforcement.

What should buyers check before choosing Neo?

  • It is a new sensor to deploy rather than a rollout through existing EDR or MDM.
  • OS support is not listed on the pages we read.
  • Cursor is not named on its platform page.
  • No documentation portal or pricing on neo.ai.

Who should shortlist Neo?

Shortlist Neo if you want each agent action tied to a person or agent, with human approval holds for risky actions, and you are prepared to roll out a new endpoint sensor.

What does Neo cost?

Contact sales. Neo does not publish pricing.

Frequently asked questions

Is Neo the same as Pulumi Neo?

No. This review covers Neo Security, Inc., at neo.ai.

Who backs Neo?

Neo came out of stealth on 20 July 2026 with $100M from Andreessen Horowitz and Bessemer, with Craft Ventures and Merlin Ventures. It is based in Boston; Nick Warner is CEO and Eran Shirazi is a co-founder.

Does Neo deploy through EDR?

No. Neo uses its own lightweight endpoint sensor, with no kernel module, no reboot and no OS hooks.

Related

Head to head

Sources