Alphabetical, not ranked. Membership includes primary and secondary research categories. These products have different scopes; inspect the evidence profile before comparing capabilities.
Primary category
AWS's set of composable services for running agents built with any framework, covering serverless execution with isolated sessions, persistent memory, a gateway that turns APIs into MCP tools, identity and credential management, and built-in observability. Documented governance is strongest on identity and authorization rather than approvals.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an AgentCore Gateway exposing two Lambda tools where the agent's inbound and outbound authorization is verified per request through AgentCore Identity.
Read sources and limitations →
Also covers this layer
Actions runtime that brokers agent tool calls to SaaS systems, handling OAuth and user token storage and applying per-action authorization so an agent acts within both the user's and its own scope. Pre- and post-tool-call hooks allow blocking or redaction, though the hosted tool catalogue is vendor-maintained.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an agent calling a Gmail tool through Arcade where the user consents via OAuth, a pre-tool-call hook blocks a send action, and the audit log records the decision.
Read sources and limitations →
Also covers this layer
Registry and monitoring console within Boomi Agentstudio where organisations register, tag, monitor and manage AI agents across providers - agents built in Boomi and third-party environments such as Amazon Bedrock - via configured provider connections. Agents appear because a provider account is connected, so unconnected environments remain invisible.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me registering an Amazon Bedrock provider account and then disabling one of its agents directly from Agent Control Tower, including the trust level and tags applied.
Read sources and limitations →
Primary category
German process-orchestration vendor's capability for embedding AI agents into BPMN processes, exposing BPMN activities inside ad-hoc sub-processes as LLM-selectable tools while human tasks and deterministic rules stay in the same model. Fine-grained authorization exists at cluster level; audit logging for agent decisions is not documented.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate a BPMN process where an AI agent selects tools inside an ad-hoc sub-process but a human task must complete before the payment activity runs.
Read sources and limitations →
Primary category
Open-source Python framework for orchestrating role-based agent crews, paired with CrewAI AMP, a hosted platform that deploys crews, exposes them via REST, streams events and shows execution traces. Human review is a framework-level pattern; platform documentation reviewed showed no approval console or audit-log feature.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate a crew deployed on CrewAI AMP where a task requires human review before the next agent runs, and show the execution trace for that run.
Read sources and limitations →
Also covers this layer
Sandbox infrastructure for executing AI-generated code, offering per-sandbox isolation with a dedicated kernel, filesystem and network stack plus API keys, limits, network limits and audit logs. Buyers should note the public repository states core development moved to a private codebase and the repo is unmaintained.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me a Daytona sandbox with network limits and audit logging enforced while an agent executes generated code, and clarify which components remain open source today.
Read sources and limitations →
Primary category
Open-source platform for building agents, agentic workflows, chatbots and RAG pipelines that can draw on private data and ship as web apps or APIs, with LLMOps monitoring and third-party tracing integrations. Documentation reviewed showed no approval workflow, role-based access control or audit-log capability.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me a Dify agentic workflow published as an API, and explain exactly what record exists of each model and tool call it made.
Read sources and limitations →
Also covers this layer
Apache-2.0 sandbox infrastructure that gives agents isolated cloud environments to execute model-generated code, process files and run tools, controlled from Python or JavaScript SDKs. Sandboxes bound where agent code runs, but E2B is an execution boundary rather than a policy decision point for tool authorization.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an agent running untrusted generated code in an E2B sandbox with filesystem and network limits, then show the same workload on a self-hosted E2B cluster.
Read sources and limitations →
Primary category
Google Cloud's renamed Vertex AI agent stack, combining a managed agent runtime with sessions, a memory bank, example store and evaluation service, and support for ADK, LangGraph, LlamaIndex and A2A agents. Governance evidence centres on registration through the Gemini Enterprise app and built-in tracing rather than approval workflows.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate deploying an ADK agent to the managed runtime, registering it in Gemini Enterprise, and inspecting its traces in Cloud Trace.
Read sources and limitations →
Also covers this layer
Centralized catalog in Gemini Enterprise Agent Platform for registering and governing AI agents, MCP servers, skills and endpoints. Agents can be registered automatically from supported runtimes or manually for custom deployments, and consumers can search the catalog and authenticate to registered tools. It governs registered assets; unregistered agents are out of scope.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an ADK agent auto-registered from its runtime, then demonstrate searching the registry and binding it to an authenticated endpoint.
Read sources and limitations →
Primary category
LangChain's runtime for running agents in production alongside the open-source LangGraph library. It provides durable execution, threads and runs, and middleware that pauses tool calls for human approval, edit or rejection. Governance beyond approvals and tracing is developer-configured rather than an administrative control surface.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an agent deployed on LangSmith Deployment pausing on a database-write tool call, and a reviewer editing the arguments before it resumes.
Read sources and limitations →
Primary category
Managed Microsoft platform for building, deploying and scaling agents, offering prompt agents configured in a portal, hosted container agents from frameworks such as Agent Framework and LangGraph, and direct Responses API use. Each hosted agent receives a dedicated Microsoft Entra identity plus managed endpoint, scaling and observability.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me a hosted agent deployed from a container that receives its own Entra identity, and the end-to-end trace of one of its runs.
Read sources and limitations →
Primary category
German workflow automation tool, source-available and self-hostable, whose AI Agent node connects a chat model to tools so the agent chooses which to call. Governance is workspace-level rather than agent-level: role-based access control across instance and project scopes, with no documented per-action approval or agent audit trail.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me an AI Agent workflow in a project where a Member role can execute but not edit it, and explain what record exists of each tool the agent called.
Read sources and limitations →
Primary category
Commercial platform built on the Conductor durable orchestration engine. Conductor Agents are authored in code or imported from frameworks, compiled into versioned workflow definitions, and composed with branching, schedules, human approval and cancellation, with each LLM call and tool invocation visible in the UI and API.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Show me a Conductor Agent deployed at a pinned version, invoked from a production workflow, with each LLM call and tool invocation visible in the execution view.
Read sources and limitations →
Primary category
Durable execution platform used to run stateful agent loops that call models and tools, wait on human decisions for days, and resume exactly where they stopped after failures. It supplies reliability primitives and full execution history rather than AI-specific policy, review consoles or data controls.
hybrid · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate an agent workflow that pauses for multi-day human approval via a Signal, survives a worker crash, and replays its full execution history.
Read sources and limitations →
Primary category
UiPath's cloud orchestration layer that coordinates AI agents, RPA robots and people in BPMN, Flow or case-management models, with DMN decision tables. Governance is process-centric: role-based access, versioning and auditing of process and decision changes, rather than per-tool-call approval policy for agents.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate a Maestro BPMN process where an agent step hands an exception to a person, and show the versioned, audited history of the decision table change.
Read sources and limitations →
Also covers this layer
Orchestration environment in Verint's CX platform for building and running a mixed workforce of human and AI agents: prebuilt and custom AI agents are connected to customer-experience workflows with explicit routing to humans when judgment is needed, plus centralized prompt and model governance. Scope is contact-centre work, not general enterprise task delegation.
commercial · Research snapshot 2026-09-06
- Ask for a demonstration
- Demonstrate a CX workflow where an AI agent hands off to a human agent, and show how the handoff condition and the governing prompt policy are configured.
Read sources and limitations →