Sun.Security makes a security platform for organisations that are adopting AI agents and need to keep them under control as they scale. Sun sits in the path of every AI agent and keeps each one aligned with the purpose it was built for, so security teams can allow agent use without losing sight of what agents are doing.
It is aimed at security teams whose organisations already have agents running in many places, often set up without review, and who need a way to say yes to them safely.
At A Glance
| Vendor | Sun.Security |
|---|---|
| Category | AI agent security platform |
| Identities covered | AI agents and the tools, MCPs and connections they use |
| Deployment | SaaS, deployed on AWS and listed on AWS Marketplace |
| Agentic AI | Agent discovery, purpose-based posture management, runtime enforcement |
| Certifications | SOC 2 Type 2, ISO/IEC 27001, GDPR |
| Market classification | Agentic AI Identity |
What Sun.Security Does
Agents running on laptops, in cloud accounts and inside SaaS applications can pick up unvetted MCP servers and tools, act on hallucinated reasoning, or be steered by injected input. Sun.Security treats each agent’s intended purpose as the baseline for control, rather than a fixed list of permitted actions. Once the platform knows what an agent is for, anything outside that purpose can be stopped before it happens, and the same record shows the business how agents are being used and what they deliver.
Products
Discovery
Discovery answers the first question most security teams have: which agents exist here? It starts by finding the agentic tools in use across the organisation, then the agents built on them, across workstations, cloud and SaaS. Unmanaged and shadow agents are included, along with each agent’s interactions with tools, data and systems.
Posture Management
Posture management builds a profile of each agent’s intended purpose from its instructions, system prompt, tools, data, connections and real usage. That profile becomes the yardstick for judging whether a later action is normal.
Runtime Control
Runtime control enforces the profile. Every tool call, connection and resource draw is checked against the agent’s purpose before it executes, giving deterministic, real-time enforcement at the point of action.
Business Intelligence Graph
The business intelligence graph tracks agent usage, actions and outcomes, so security and business leaders can measure risk, adoption and return on investment from the same data.
How It Works
Sun is delivered as SaaS and deployed on AWS. Rather than scanning agents after the fact, the platform places itself in the path between each agent and the tools, data and systems it calls, so every request passes through a policy decision first.
| Component | What it does |
|---|---|
| Inventory | Discovery feeds a running inventory of agentic tools and agents from workstations, cloud environments and SaaS applications. |
| Purpose model | Agent context from that inventory is turned into a purpose model per agent. |
| Decision point | Each outbound action from an agent is evaluated against its purpose model before it reaches its target, and the outcome is recorded for the business intelligence graph. |
Identities And Systems Covered
| AI agents | Managed, unmanaged and shadow agents across the organisation. |
|---|---|
| Agentic tools and MCPs | The agentic tools agents are built on and the MCP servers and tools they call. |
| Environments | Workstations, cloud, including AWS, and SaaS applications. |
| Agent context | Instructions, system prompts, tools, data and connections used to model each agent’s purpose. |
Company Background
| Company | Sun Security, with the platform sold as Sun. |
|---|---|
| Recognition | Included in Gartner Cool Vendors in Agentic AI Security and in the Gartner Market Guide for Guardian Agents (2026). |
| Assurance | SOC 2, pentest and data flow reports are available on request through the Trust Center. |
| Partnerships | AWS Partner. |
Note: This overview is compiled from Sun.Security’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.