AI Defense Stack

AI security posture management & discovery

Noma Security: agent and AI security platform with AI-SPM

Noma Security is an agent and AI security platform with AI-SPM from Noma Security. It is a commercial product offered as: SaaS, On-prem. Pricing model: not published.

  • Last reviewed
Visit Noma Security (opens in a new tab)
Commercial Layer 2: Discovery and posture

Best for

Security teams that need to find and govern agents, MCP servers and models spread across endpoints, SaaS and cloud

Consider instead if

  • You want agentless discovery of AI services inside your cloud accounts. See Wiz AI-SPM.

What Noma Security does

Noma Security sells an agent security and governance platform. Its AI-SPM product, per the vendor page, discovers agents, MCP servers, toolsets, skills and models by connecting to cloud and SaaS platforms, code repositories and endpoints through an existing EDR or MDM. It keeps a registry of allowed AI components, flags misconfigurations such as excessive agency and unauthenticated access, and maps findings to NIST AI RMF, the EU AI Act, ISO 42001, the OWASP LLM Top 10 and MITRE ATLAS. Separate offerings cover runtime behavior control, agent access control and red teaming. A supply chain page says Noma can scan models from open registries and supports both on-prem and SaaS deployments. The pages we opened list no prices.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Noma Security Source, checked October 21, 2026: noma.security (opens in a new tab)
Status
Active Source, checked October 21, 2026: noma.security (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: noma.security (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS, On-prem Source, checked October 21, 2026: noma.security (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: noma.security (opens in a new tab)
Website
noma.security Source, checked October 21, 2026: noma.security (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
trust.noma.security Source, checked October 21, 2026: trust.noma.security (opens in a new tab)
Attestations or disclosure
SOC 2 Type II; ISO 27001; HIPAA (listed by vendor); ISO/IEC 42001 Source, checked October 21, 2026: trust.noma.security (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where Noma Security fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Noma Security covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L2 Discovery Discovery and posture Primary Find the AI models, services, agents, MCP servers and AI apps in use, and check how each is configured and exposed. Follows its category, AI security posture management & discovery
L7 Agent access Agent and tool access Also covers Documents runtime approval or blocking of agent tool calls under policy. Sets a baseline of allowed agents, MCP servers and skills, approves or blocks tool calls, and scopes policies by user, IdP group or tool sensitivity; Judges each agent action in context at runtime and can block it, mask sensitive data, steer the agent, bring in a human or trigger a killswitch
L3 Supply chain Model and supply chain Also covers Documents scanning of models from open registries for vulnerabilities. Scans models from open registries for malicious artifacts, hidden instructions and known vulnerabilities

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Noma Security, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM02 Sensitive Information Disclosure Runtime controls can mask sensitive data when an agent action would expose it. Judges each agent action in context at runtime and can block it, mask sensitive data, steer the agent, bring in a human or trigger a killswitch
LLM03 Supply Chain Scans models from open registries and inventories models, MCP servers and skills. Discovers agents, MCP servers, toolsets, skills and models across endpoint, SaaS and cloud and keeps a registry of allowed AI components; Scans models from open registries for malicious artifacts, hidden instructions and known vulnerabilities
LLM06 Excessive Agency Flags excessive agency and sets a baseline of allowed agents, MCP servers and skills, with approve or block decisions on tool calls. Flags misconfigurations such as excessive agency, unsandboxed agents, secrets in agent instructions and unauthenticated access; Sets a baseline of allowed agents, MCP servers and skills, approves or blocks tool calls, and scopes policies by user, IdP group or tool sensitivity

Not mapped in our analysis: LLM08. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI security posture management & discovery, ranked within the category by Coverage Score.

Snyk Evo AI-SPM

Snyk

Commercial
  • SaaS
  • CLI

Maps AI models, agents, datasets and MCP servers across code and apps, scores model risk and enforces policy.

Best for: Teams that already use Snyk and want an inventory of AI models, agents and MCP servers tied to policy in the same platform

Coverage Score 64 out of 100
  • LLM03 Supply Chain
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • +1 more

Reviewed

Microsoft Defender for Cloud AI security posture management

Microsoft

Commercial
  • Cloud-native

Finds AI workloads across Azure, AWS and Google Cloud and flags risks with recommendations and attack paths.

Best for: Teams already using Defender for Cloud that want AI workloads in Azure, AWS and Google Cloud added to their posture view

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain

Reviewed

Wiz AI Security Posture Management (AI-SPM)

Google (Wiz)

Commercial
  • SaaS
  • Cloud-native

Finds AI services across cloud accounts without agents and maps misconfigurations and attack paths.

Best for: Cloud security teams that want agentless discovery of AI services and their risks inside a cloud security platform

Coverage Score 54 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM03 Supply Chain
  • LLM06 Excessive Agency

Reviewed

Noma Security FAQ

What does Noma AI-SPM discover?

The vendor page says it finds agents, MCP servers, toolsets, skills and models across endpoint, SaaS and cloud environments.

Does Noma scan models?

A supply chain page says Noma scans models from open registries for malicious artifacts, hidden instructions and known vulnerabilities.

Is Noma Security open source?

No. It is a commercial platform, and the site links no source repository.

Key facts you can cite

We have no commercial relationship with Noma Security.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.