Noma Named a Market Shaper in Gartner® Emerging Market Quadrant for AI Application Security - Startup Vendors

Recognition places Noma in the quadrant Gartner defines as "Full-Spectrum, Context-Aware Agentic Security," as enterprises move to secure and govern AI agents at runtime

NEW YORK, Sept. 23, 2026 /PRNewswire/ -- Noma, the market-leading enterprise AI and agent security platform, today announced it has been recognized as a Market Shaper in the Gartner® Emerging Market Quadrant (EMQ) for AI Application Security – Startup Vendors. Noma was placed in the Market Shapers quadrant, which Gartner characterizes as "Full-Spectrum, Context-Aware Agentic Security."

According to the report, "Vendors in this quadrant move beyond the mandatory features of AI application security to focus on analyzing the full spectrum of AI agents' behaviors, such as user requests, user intent, agents' instructions, intent, memory, skills, tool use, data access, and system modification actions. They compare an agent's intended instructions and permissions with its real behavior to identify deviations or misuse, and they use comprehensive scanning of code repositories and deployment pipelines to map all connections and potential risks."

As enterprises move AI agents into production across cloud platforms, SaaS applications, and developer endpoints, security teams face a new class of risk. Agents choose which tools to call, chain actions across long sessions, and operate with permissions that no one continuously verifies against what the agent was asked to do. Security vendors are adapting. Gartner states: "They are refining their mechanisms for determining and enforcing least-privilege principles and intent drift detection, which is a security monitoring capability for agentic AI systems that tracks whether an agent's actions remain aligned with the user's original stated goal as the agent operates autonomously over several steps."

"Securing agents comes down to two questions: what is this agent supposed to do, and what is it actually doing right now," said Niv Braun, CEO and Co-Founder of Noma. "Answering them takes context that no single-layer tool has: the agent's posture, what it is connected to, its blast radius, and its intent, compared against its real behavior at runtime. We built Noma so enterprises can define policy for every agent in one place, enforce it across the infrastructure they already run, and let agents work at full speed without acting outside their boundaries."

We believe Noma's placement reflects four capabilities that distinguish its agent security and governance platform:

• Coverage of every agent, wherever it runs. Noma secures endpoint agents such as Claude Code and Cursor, SaaS agents built in Copilot Studio and Agentforce, and cloud and homegrown agents on Bedrock, Azure, and Databricks, all from one platform. Noma is deployed on more than 2.6 million endpoints.
• A unified agent control plane. Enterprises define policy once, in Noma's AI Constitution, and Noma enforces it across every agent type and every category of risk: agents that make mistakes, agents that drift from their instructions, and agents manipulated by an adversary. Policy spans risky behavior and threats, access and identity, and business operations.
• Context for the right runtime decision. Noma's Runtime Context Engine combines posture (what an agent is connected to, its permissions, its blast radius, and its baseline behavior) with intent (what the agent was asked to do and what it is actually doing across a session). Runtime response ranges from steering an agent mid-session to masking sensitive data, blocking a single action, or terminating the agent's operation.
• Architecture flexibility. Through open enforcement, Noma decouples the security and governance control plane from AI infrastructure. Policy is enforced through native integrations with gateways including Kong, Amazon Bedrock AgentCore, LiteLLM, TrueFoundry, and MCP gateways; native hooks inside Claude Code, Cursor, and Copilot; SDKs and APIs for homegrown agents; and direct partner integrations with Databricks and Microsoft.

Noma operates under multiyear enterprise license agreements with Fortune 500 and Global 2000 organizations across financial services, pharma, insurance, and technology. Databricks is both a strategic partner and an early investor in the company, and Noma's direct integrations with Databricks, Microsoft, and AWS extend its enforcement into the AI infrastructure enterprises already run.

This recognition follows Noma's designation as a Cool Vendor in the Cool Vendors™ in AI Security. Noma has also been named in Gartner research including the Market Guide for Guardian Agents, the Innovation Guide for AI Agents, the Innovation Insight for AI Application Security, the Market Overview for AI Usage Control, Innovation Insight: AI Bills of Materials (AIBOMs) Strengthen AI Governance, Emerging Tech: The Future of AI Security Is in Securing Agent Actions, Not Prompts, and Agent 365: Strong for Microsoft Agents, but Users Still Need Platform-Agnostic Governance and Security.

Gartner recommended actions for Market Shapers is "Deploy these tools for complex, homegrown multiagent applications that require deep runtime monitoring and security testing." We believe Noma gives those organizations the agent security and governance to run agents at scale, with policy defined once and enforced at runtime across every agent and every environment.

Learn more at noma.security or request a demo.

Gartner Disclaimer

Gartner, Emerging Market Quadrant for AI Application Security – Startup Vendors, Meghan Hollis, Dionisio Zumerle, Dennis Xu, Marissa Schmidt, 16 September 2026.

Gartner, Cool Vendors™ in AI Security, Jeremy D'Hoinne, Bart Willemsen, Dennis Xu, Avivah Litan, 24 September 2025.

Gartner, Market Guide for Guardian Agents, Avivah Litan, Daryl Plummer, Carlton Sapp, Dionisio Zumerle, Tom Coshow,  Max Goss, Lauren Kornutick, 25 February 2026.

Gartner, Innovation Guide for AI Agents, Arun Chandrasekaran, Leinar Ramos, Tom Coshow, 22 January 2026.

Gartner, Innovation Insight for AI Application Security, Dionisio Zumerle, Jeremy D'Hoinne, Meghan Hollis, 08 January 2026.

Gartner, Market Overview for AI Usage Control, Ashish Suraj Bhan, Peter Firstbrook, John Watts, 20 August 2026.

Gartner, Innovation Insight: AI Bills of Materials (AIBOMs) Strengthen AI Governance, Manjunath Bhat, Angela Zhao, Aaron Lord, 27 May 2026.

Gartner, Emerging Tech: The Future of AI Security Is in Securing Agent Actions, Not Prompts, Mark Wah, David Senf, 20 February 2026.

Gartner, Agent 365: Strong for Microsoft Agents, but Users Still Need Platform-Agnostic Governance and Security, Avivah Litan, Dan Wilson, Dionisio Zumerle, Sarah Davies, 28 May 2026.

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

About Noma

Noma is an AI security platform that helps enterprises discover, govern, and protect AI agents across every environment where they run. Noma covers homegrown applications on AWS Bedrock and Azure, SaaS agent platforms like Microsoft Copilot Studio and Salesforce AgentForce, and coding assistants and MCP servers on developer machines. Four products in one platform: discovery and posture (AI-SPM), access control, adversarial testing (Red Teaming), and runtime detection and response (AI-DR). Backed by $130M+ in funding. AWS, Microsoft, and Databricks are strategic partners. Trusted by Fortune 500 companies across financial services, pharma, insurance, and technology. Learn more at https://noma.security/ and follow us on LinkedIn.

Media Contact

ICR for Noma
[email protected] 

SOURCE Noma Security