Forge.AI

What Forge.AI does

Forge.AI operates an enterprise agent governance platform that functions as a unified control plane for discovering, monitoring, and enforcing policy across AI agents operating within enterprise environments. The company's core technology is an Agent Behavior Data Lakehouse that ingests agent traces and fuses them with process, network, and identity signals into a queryable record, with inline analysis via a small language model in under 50ms per action and escalation to reasoning models for off-baseline behavior. The product surface spans Agent Discovery and Inventory, Non-Human Identity (NHI) Governance, Model Context Protocol (MCP) and Skills Governance, Gateway Policy Enforcement, a Per-Platform Attribution Engine, and Policy Analysis Agents that run an automated hardening loop. The platform integrates with 20+ enterprise security and identity systems including CrowdStrike, Palo Alto Networks, Okta, Microsoft Entra, SailPoint, Databricks, and Snowflake, and ships industry-specific policy defaults for Financial Services (SR 11-7, NYDFS Part 500, FINRA 24-09, CFPB Circular 2023-03, DORA), Healthcare, Aviation, Technology, and Public Sector.

The company sells via an enterprise SaaS subscription model with quote-based, negotiated pricing accessed through 'Book a demo' and 'Get Access' CTAs, supported by a free AI Security Posture Assessment as a demand generation tool. The go-to-market motion is direct enterprise field sales targeting Global 2000 CISOs and security teams. The legal entity is Forge Inc., a subsidiary of a37 Inc., incorporated in Delaware. The company is venture-backed by Greylock Partners, Palantir, and Amplify Partners, with notable individual investors including Frederic Kerrest (Okta cofounder), Jeetu Patel (Cisco President), Lip-Bu Tan (Intel CEO), and Anu Bharadwaj (Atlassian President). The company holds SOC 2 Type II certification and maintains a GDPR-compliant Data Processing Agreement, and operates from San Francisco (per the careers page) with infrastructure hosted on AWS.

Forge serves enterprises operating AI agents in regulated, money-moving, or safety-critical workflows where boards, regulators, and customers require explainability, attribution, and policy enforcement over autonomous actions. Primary use cases include governance of trading and underwriting agents in financial services, clinical decision support in healthcare, and operational agents in aviation and the public sector. The company's strategic positioning is that hand-written security rules cannot keep pace with the non-determinism of modern agents, and that the only durable defense is a control plane that fuses cross-surface telemetry into real-time attribution and adaptive policy.

Name

Forge.AI

Legal name

Forge Inc.

Website

https://forge.ai

Company type

Private

Founded year

2025

Operating status

Operating

Headcount range

11–50 employees

Short description

Forge.AI provides an enterprise agent governance control plane that discovers AI agents, governs non-human identities and MCPs, and enforces runtime policy by fusing agent traces with process, network, and identity telemetry. It sells enterprise SaaS to Global 2000 buyers in Financial Services, Healthcare, Aviation, Technology, and Public Sector.

Ownership category

akta.pro rank

Product category

AI Security and Agent Governance Software

NAICS

Software Publishers (513210)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

akta.pro secondary industries

Identity, Access & Secrets Management for AI Systems (IAM for agents/models) (HDAAAKAJ), AI Observability, Monitoring & Evaluation Platforms (Drift, Quality, Safety) (HDAEANAF), Audit, Explainability & Accountability Tooling (traceability, reporting) (HDAAAKAL), Regulatory Readiness & Audit Automation (e.g., EU AI Act, NIST AI RMF, ISO/IEC 42001) (HDAAAMAE)

Keywords

• Agent governance platform
• Non-human identity management
• AI security software
• MCP governance tools
• Enterprise AI compliance

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription: Enterprise SaaS platform with subscription-based pricing. Access via 'Get Access' contact form and 'Book a demo' suggesting enterprise sales cycle. Subscription terms with 30-day notice for termination and auto-renewal provisions described in Terms of Service.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Forge.AI sells an enterprise agent governance platform that provides a single control plane for discovering, governing, and enforcing policy across AI agents, their non-human and human-delegated identities, and their MCP and gateway connections. The platform ingests traces from existing EDR, network, identity, and AI gateway infrastructure and fuses them with process and identity signals to deliver real-time inventory, behavioral baselining, and runtime policy enforcement including redaction, blocking, and approval routing for regulated industries.

Product overview

Forge.AI is an enterprise agent governance platform that operates as a unified control plane for discovering, governing, and enforcing policy across all AI agents, their identities, and MCP connections. The core Forge Control Plane integrates with existing enterprise infrastructure (EDR, network, identity providers, and AI gateways) to provide real-time visibility into agent behavior without requiring new endpoint agents. The platform includes Agent Discovery & Inventory for fleet visibility, Identity Governance for managing NHIs and human-delegated identities, MCPs and Skills Governance for vetting tool connections, and Gateway Policy Enforcement for runtime controls. Supporting infrastructure includes an Agent Behavior Data Lakehouse for fusing trace data with process, network, and identity signals, Policy Analysis Agents for automated policy hardening, and a Per-Platform Attribution Engine for correlation across systems. Forge also offers a free AI Security Posture Assessment service. The platform supports industry-specific compliance including Finance (SR 11-7, NYDFS Part 500, FINRA 24-09, DORA), Healthcare, Aviation, Technology, and Public Sector regulations.

Differentiator

Problem solved

Functional benefit

Products and services

• Forge Control Plane

Quantifiable outcome

• Inline analysis completes in <50ms per action
• +1 more outcomes

Named customers1 record

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration19 records

AI capability7 records

Feature9 records

Partnerships

26 partnerships are on record, tiered core.

• OpenAIcoreTechnology or IntegrationIntegration partner for Claude Code (Anthropic) agent visibility. Listed as agent type in product UI alongside Claude, Cursor, GitHub Copilot, Devin, and others. Sub-processor for LLM inference.
• AnthropiccoreTechnology or IntegrationSub-processor for large language model inference. Claude Code agent supported for visibility and governance. Listed prominently in agent logos section.
• CursorcoreTechnology or IntegrationAI coding agent (OpenClaw) integrated and supported for visibility and governance. Listed in agent logos section.
• GitHub CopilotcoreTechnology or IntegrationAI coding assistant integrated and supported for visibility and governance. Listed in agent logos section.
• Devin (Cognition)coreTechnology or IntegrationAI software engineer agent integrated and supported for visibility and governance. Listed in agent logos section.
• CrowdStrikecoreTechnology or IntegrationEDR integration partner for endpoint telemetry. Plugs into existing CrowdStrike deployment for process and agent activity visibility.
• SentinelOnecoreTechnology or IntegrationEDR integration partner for endpoint telemetry. Plugs into existing SentinelOne deployment.
• Microsoft DefendercoreTechnology or IntegrationEDR integration partner for endpoint telemetry via Microsoft Defender.
• Palo Alto NetworkscoreTechnology or IntegrationNetwork security integration partner for network telemetry and egress monitoring.
• CloudflarecoreTechnology or IntegrationNetwork integration partner and sub-processor for CDN, DNS, and web application firewall. Also integration for Cloudflare AI Gateway.
• NetskopecoreTechnology or IntegrationNetwork security integration partner for cloud access security broker (CASB) visibility.
• OktacoreTechnology or IntegrationIdentity provider integration for identity registry and human/NHI identity resolution. Primary IDP integration.
• Microsoft EntracoreTechnology or IntegrationIdentity provider integration for identity registry and human/NHI identity resolution.
• Ping IdentitycoreTechnology or IntegrationIdentity provider integration for identity registry and human/NHI identity resolution.
• SailPointcoreTechnology or IntegrationIdentity governance and administration (IGA) integration for identity lifecycle and entitlement management.
• SaviyntcoreTechnology or IntegrationIdentity governance and administration (IGA) integration for identity lifecycle and entitlement management.
• LiteLLMcoreTechnology or IntegrationAI gateway integration partner for model proxy and observability across LLM providers.
• OpenRoutercoreTechnology or IntegrationAI gateway integration partner for unified API access to multiple LLM providers.
• DatabrickscoreTechnology or IntegrationData platform integration for agent attribution across Databricks queries and data operations. Platform-specific correlation for identity fields.
• SnowflakecoreTechnology or IntegrationData platform integration for agent attribution across Snowflake queries. Platform-specific correlation for USER_NAME identity field.
• GleancoreTechnology or IntegrationEnterprise search platform integrated as agent type for visibility and governance.
• n8ncoreTechnology or IntegrationWorkflow automation platform integrated as agent type for visibility and governance.
• WorkatocoreTechnology or IntegrationEnterprise integration platform integrated as agent type for visibility and governance.
• BoomicoreTechnology or IntegrationIntegration platform integrated as agent type for visibility and governance.
• Amazon Web Services (AWS)coreTechnology or IntegrationInfrastructure sub-processor for cloud hosting, compute, and storage. All Forge services run on AWS in the United States.
• SupabasecoreTechnology or IntegrationInfrastructure sub-processor for database hosting and management. Located in the United States.

Scale indicators3 records

Recent moves3 records

Expansion highlights6 records

Direct peers

• Astrix Security: Astrix focuses specifically on non-human identity (NHI) security and agent governance, overlapping directly with Forge's NHI inventory, least-privilege cascade, and identity-attribution wedge.
• Prompt Security: Prompt Security provides an AI security platform covering prompt-injection defense, data leakage, and governance for enterprise AI usage, comparable to Forge's runtime enforcement and redaction of unsafe agent outputs.
• Lakera: Lakera offers AI safety, guardrails, and red-teaming for LLM applications, comparable to Forge's behavioral baseline and policy enforcement for enterprise AI systems.
• Securiti: Securiti provides data + AI governance, privacy automation, and compliance tooling, overlapping with Forge's privacy, audit, and regulatory readiness layers across regulated industries.
• Veza: Veza provides an identity platform purpose-built to govern access for both human and non-human identities, comparable to Forge's NHI + human-delegated identity governance wedge.

Emerging players

• Nudge Security: Nudge Security offers SaaS security posture management and discovery of AI/agent accounts, overlapping with Forge's agent inventory and shadow-agent discovery capabilities.
• Reco: Reco provides SaaS security posture and AI usage governance for enterprises, partially overlapping with Forge's shadow-agent discovery and AI governance scope.

Broad incumbents

• CrowdStrike: CrowdStrike is a dominant endpoint and identity security incumbent with the telemetry, enterprise footprint, and stated AI security roadmap to compete with or absorb Forge's agent visibility layer.
• Palo Alto Networks: Palo Alto Networks offers a broad enterprise security platform spanning network, cloud, and AI workloads; its data and network telemetry already feed Forge but it could natively ship agent security.
• Okta: Okta is the dominant identity incumbent whose IDP and identity governance products Forge integrates with; Okta has publicly signalled expansion into AI/agent identity, making it both a critical partner and a potential competitor.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/forgesecurity
• Xx.com/forge_ai

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds3 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Forge.AI