Freedom251 › Security Management software

Noma Security

Paid APISelf-hostedWeb

Visit Noma Security Alternatives Pricing

What Noma Security is

Noma Security is an enterprise platform for discovering, governing, testing, and protecting AI applications and agents. It covers endpoint agents, internally built AI, and SaaS agent platforms. The platform is available through API, self-hosted, and web options, with a hybrid deployment model.

Its AI-SPM capability discovers agents, MCP servers, skills, and models, then maps how they connect and what permissions and data they can access. Teams can define which agents may use MCP servers, skills, and tools, and enforce those rules while agents act. AI-DR detects prompt injection, data exfiltration, and scope violations. It can alert, block activity, mask data, or route activity to a human. Noma AI Red Team runs multi-turn attack campaigns and feeds findings into AI-DR runtime policies. Open Enforcement applies policies through agent hooks, MCP gateways, AI gateways, agent SDKs, and direct APIs.

Named environments and frameworks include AWS Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI, Microsoft Copilot Studio, Salesforce AgentForce, and ServiceNow. Noma Security is headquartered in New York, New York, United States. Its Enterprise plan is paid, and pricing is available on request.

Who it suits

Noma Security suits enterprises adopting AI applications and agents that need to discover AI assets, govern access, test applications, and protect activity at runtime. It may fit teams working across endpoint agents, homegrown AI, and SaaS agent platforms that need policy enforcement options.

What it does well

Discovers agents, MCP servers, skills, and models.
Maps AI asset connections, permissions, and data access.
Can block, mask data, alert, or route activity to a human.
Red-team findings feed into runtime policies.
Supports agent hooks, gateways, SDKs, and direct APIs.
Trust Center lists HIPAA, SOC 2 Type II, ISO 27001, and ISO/IEC 42001.

What to know first

The product is paid, with pricing available on request.
Trust documents are confidential under an active agreement.
No public Enterprise plan limits are stated.

Plans

Plan	Billed and limits	Price
Enterprise	Request a demo; no public price or plan limits stated	On request

As noma.security lists them, read 8 Oct 2026. The maker's own page has the final word.

Getting started

Visit the Noma Security website.
Request a demo to discuss the Enterprise plan.
Choose API, self-hosted, or web access as appropriate.
Discuss enforcement options such as agent hooks, gateways, SDKs, or direct APIs.

Verdict

Choose Noma Security if your organization needs enterprise AI discovery, access governance, testing, and runtime protection across its AI environments. Look elsewhere if you need a public price or plan limits to assess the cost before contacting the company.

Questions

How is Noma Security priced?

It is a paid product with pricing on request. The Enterprise plan has no public price stated.

Which platforms and deployment options does it offer?

The listed platforms are API, self-hosted, and web. Its deployment model is hybrid.

Which AI environments and frameworks are named?

They include AWS Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI, Microsoft Copilot Studio, Salesforce AgentForce, and ServiceNow.

What security certifications and audits are listed?

Noma’s Trust Center lists HIPAA, SOC 2 Type II, ISO 27001, and ISO/IEC 42001 among its active certifications and audits.

Can buyers review Noma’s trust documents?

The Trust Center lists 104 security controls and 32 documents. The documents are confidential under an active agreement.

Where is Noma Security headquartered?

It is headquartered in New York, New York, United States.

Facts from Noma Security's own pages

Access control: Noma lets teams define which agents may use MCP servers, skills, and tools, and enforce those policies when agents act. · noma.security, 8 Oct 2026
AI asset discovery: AI-SPM discovers agents, MCP servers, skills, and models and maps their connections, permissions, and data access. · noma.security, 8 Oct 2026
Coverage: The platform covers endpoint agents, homegrown AI, and SaaS agent platforms. · noma.security, 8 Oct 2026
Enforcement options: Open Enforcement applies policies through agent hooks, MCP gateways, AI gateways, agent SDKs, and direct APIs. · noma.security, 8 Oct 2026
Founded: A LinkedIn company listing states that Noma Security was founded in 2023. · linkedin.com, 8 Oct 2026
Headquarters: Noma’s contact page lists its address as 33 Irving Place, New York, 10003. · noma.security, 8 Oct 2026
Integrations: The platform page names AWS Bedrock, Azure AI Foundry, Databricks, LangChain, CrewAI, Microsoft Copilot Studio, Salesforce AgentForce, and ServiceNow as AI environments or frameworks used by teams it secures. · noma.security, 8 Oct 2026
Intended customer: Noma describes the product as an enterprise AI security and governance platform for organizations adopting AI applications and agents. · noma.security, 8 Oct 2026
Purpose: Noma describes its platform as helping organizations discover, govern, test, and protect AI and agents across the enterprise. · noma.security, 8 Oct 2026
Red teaming: Noma AI Red Team tests applications with multi-turn attack campaigns and feeds findings into AI-DR runtime policies. · noma.security, 8 Oct 2026
Runtime protection: AI-DR detects threats such as prompt injection, data exfiltration, and scope violations, and can alert, block, mask data, or route activity to a human. · noma.security, 8 Oct 2026
Support: The Trust Center says its team typically responds to security questions within one business day and can prioritize urgent vendor reviews when given an evaluation timeline. · trust.noma.security, 8 Oct 2026
Trust certifications: Noma’s Trust Center lists HIPAA, SOC 2 Type II, ISO 27001, and ISO/IEC 42001 among its active certifications and audits. · trust.noma.security, 8 Oct 2026
Trust documentation: The Trust Center lists 104 security controls and 32 documents, and says documents are confidential under an active agreement. · trust.noma.security, 8 Oct 2026