Noma Security
Noma Security is an enterprise platform for discovering, governing, testing, and protecting AI applications and agents.
What Noma Security is
Noma Security is an enterprise platform for discovering, governing, testing, and protecting AI applications and agents. It covers endpoint agents, internally built AI, and SaaS agent platforms, with API, web, and self-hosted access and a hybrid deployment model. AI-SPM finds agents, MCP servers, skills, and models, then maps their connections, permissions, and data access. Teams can specify which agents may use MCP servers, skills, and tools. AI-DR identifies prompt injection, data exfiltration, and scope violations, and can alert, block, mask data, or send activity to a human. Noma AI Red Team runs multi-turn attack campaigns and feeds findings into runtime policies. Open Enforcement applies controls through agent hooks, MCP gateways, AI gateways, agent SDKs, and direct APIs. Named environments include AWS Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI, Microsoft Copilot Studio, Salesforce AgentForce, and ServiceNow. The paid service lists pricing on request.
Good
- Discovers agents, MCP servers, skills, and models
- Detects prompt injection and data exfiltration
- Supports API, web, and self-hosted deployment
- Red teaming informs runtime policies
- Lists HIPAA, SOC 2 Type II, ISO certifications
Watch out
- Paid service with pricing on request
- Enterprise-focused product
- Trust documents require an active agreement
Who it suits
Noma suits organizations adopting AI applications and agents that need enterprise governance and runtime protection. It is aimed at teams working across endpoint, in-house, and SaaS agent environments.
Verdict
Noma Security brings asset discovery, access policies, red teaming, and runtime defenses into one enterprise AI security platform. Its hybrid deployment and broad enforcement options fit organizations managing varied agent environments.
Plans and prices
From Noma Security's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Enterprise | Priced on request | Request a demo; no public price or plan limits stated |
The facts
Each one read from Noma Security's own pages, with the date it was checked.
What it does
- Access control
- Noma lets teams define which agents may use MCP servers, skills, and tools, and enforce those policies when agents act.checked 8 Oct 2026
- AI asset discovery
- AI-SPM discovers agents, MCP servers, skills, and models and maps their connections, permissions, and data access.checked 8 Oct 2026
- Coverage
- The platform covers endpoint agents, homegrown AI, and SaaS agent platforms.checked 8 Oct 2026
- Enforcement options
- Open Enforcement applies policies through agent hooks, MCP gateways, AI gateways, agent SDKs, and direct APIs.checked 8 Oct 2026
- Integrations
- The platform page names AWS Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI, Microsoft Copilot Studio, Salesforce AgentForce, and ServiceNow as AI environments or frameworks used by teams it secures.checked 8 Oct 2026
- Intended customer
- Noma describes the product as an enterprise AI security and governance platform for organizations adopting AI applications and agents.checked 8 Oct 2026
- Purpose
- Noma describes its platform as helping organizations discover, govern, test, and protect AI and agents across the enterprise.checked 8 Oct 2026
- Runtime protection
- AI-DR detects threats such as prompt injection, data exfiltration, and scope violations, and can alert, block, mask data, or route activity to a human.checked 8 Oct 2026
- Support
- The Trust Center says its team typically responds to security questions within one business day and can prioritize urgent vendor reviews when given an evaluation timeline.checked 8 Oct 2026
- Trust certifications
- Noma’s Trust Center lists HIPAA, SOC 2 Type II, ISO 27001, and ISO/IEC 42001 among its active certifications and audits.checked 8 Oct 2026
- Trust documentation
- The Trust Center lists 104 security controls and 32 documents, and says documents are confidential under an active agreement.checked 8 Oct 2026
The company
- Founded
- A LinkedIn company listing states that Noma Security was founded in 2023.checked 8 Oct 2026
- Headquarters
- Noma’s contact page lists its address as 33 Irving Place, New York, 10003.checked 8 Oct 2026
- Red teaming
- Noma AI Red Team tests applications with multi-turn attack campaigns and feeds findings into AI-DR runtime policies.checked 8 Oct 2026
Alternatives to Noma Security
- 1
Enkrypt AI Guardrails
Free planWebAPISelf-hosted6.8From $1,608 a year - 2
GuardionAI
WebAPILinuxmacOS6.8 - 3
Azure AI Speech
Free planWebAPISelf-hosted6.7Free plan - 4
Silker AI Mobile Security
AndroidiOSWeb6.6From $19.50 a month - 5
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 6
Qpoint
Free planWebLinuxmacOSWindows6.5Free plan