Custos
An AI agent security and governance gateway product that inserts an independent governance layer between AI agents and enterprise tools. It provides centralized identity authentication, access policy enforcement, approval workflows, and auditable logging capabilities. The product supports automatic tool discovery through OpenAPI specifications, enabling organizations to manage and control agent interactions with enterprise systems.
Timeline (last 90 days)
Custos is a security and governance gateway positioned between AI agents and the tools they call, providing centralized identity authentication, access policies, approval, and auditability capabilities.
The core idea of Custos is to insert an independent governance layer between AI agents and enterprise tools, centralizing decision-making authority over tool calls into a central control plane.
Custos can automatically discover and identify tools exposed by a service by reading its OpenAPI specification, eliminating the need to manually define each operation one by one.
In a Custos demo, after connecting to an order API, the system discovered the get_order operation.
In Custos, discovering a tool does not equate to authorization to use it; whether a tool is actually available is determined by policy.
Custos allows the creation of policies to precisely define which operations are permitted, who can access them, and under what conditions.
Custos provides detailed information on each event through audit events, including the context of the request and the associated security decisions.
Custos's credential management, organization-level settings, API keys, and more can all be handled uniformly within the same control plane.
All Facts (8)
Custos's credential management, organization-level settings, API keys, and more can all be handled uniformly within the same control plane.
50%UnverifiedThe core idea of Custos is to insert an independent governance layer between AI agents and enterprise tools, centralizing decision-making authority over tool calls into a central control plane.
50%UnverifiedCustos can automatically discover and identify tools exposed by a service by reading its OpenAPI specification, eliminating the need to manually define each operation one by one.
50%UnverifiedCustos is a security and governance gateway positioned between AI agents and the tools they call, providing centralized identity authentication, access policies, approval, and auditability capabilities.
50%UnverifiedIn Custos, discovering a tool does not equate to authorization to use it; whether a tool is actually available is determined by policy.
50%UnverifiedCustos allows the creation of policies to precisely define which operations are permitted, who can access them, and under what conditions.
50%UnverifiedCustos provides detailed information on each event through audit events, including the context of the request and the associated security decisions.
50%UnverifiedIn a Custos demo, after connecting to an order API, the system discovered the get_order operation.
50%