Noma Security
Type: full-code · Vendor: Noma Security · Status: active · Status in practice: emerging
Noma Security continuously compares a running agent's behavior against established baselines and enforces enterprise policy at the point of execution, flagging drift from the agent's purpose and blocking unauthorized actions before they complete.
Description. Noma is a runtime-protection platform that monitors prompts, responses, agent tool calls, MCP interactions, and agent-to-agent communication in real time. It enforces guardrail policies inline by blocking malicious tool calls and unauthorized function executions, and logs every interaction and policy decision.
Agent loop shape. Sits inline at the agent's execution boundary, baselining and monitoring each tool call and output and blocking policy-violating or drifting actions before they complete.
Primary use cases
- Detecting goal drift in long-running autonomous agents
- Blocking unauthorized agent tool calls and poisoned MCP servers at runtime
- Enterprise AI policy enforcement and audit
Key concepts
- Behavioral baselines → trajectory-anomaly-monitor — Established norms of agent behavior against which live activity is compared.
- Inline policy enforcement → policy-as-code-gate — Guardrail policies enforced at the point of execution, blocking violating actions.
- Goal-misalignment detection — Detection of drift between an agent declared objective and its executed decisions.
- Runtime action monitoring → sandbox-escape-monitoring — Real-time inspection of tool calls, MCP interactions, and agent-to-agent communication.
Patterns this full-code implements —
- ·Trajectory Anomaly Monitor
Continuously compares agent outputs against established baselines and flags any departure from the agent's intended purpose.
- ★Policy-as-Code Gate
Defines and enforces enterprise AI policies as guardrails, with enforcement at the point of execution.
- ★Sandbox Escape Monitoring
Identifies and blocks malicious tool calls, poisoned MCP servers, and unauthorized function executions.
- ★★Decision Log
Every interaction, policy decision, and response action is fully logged and searchable.
Anti-patterns avoided
References
Provenance
- Last analyzed:
- Last updated:
- Verification status: needs-verification