Agentic ecosystem security startup Vorlon Inc. today launched Guardian, a real-time enforcement gateway that aims to block risky actions by artificial intelligence agents before a transaction completes rather than flagging them after the fact.

The product targets a gap Vorlon argues most agent security tools leave open. AI agents do not log in. They authenticate with OAuth tokens and application programming interface keys, chain actions across systems, and move sensitive data at machine speed with no human in the loop. As the company puts it, with agents, the activity is the threat, not the access.

Guardian sits at the protocol layer between agents and the systems they connect to, applying policy before any transaction goes through. Security teams can block actions that violate policy, mask sensitive data in transit before it reaches an unauthorized destination and downgrade an agent’s access to read-only where write access is not warranted. Policies are set both at the agent platform level and at each connected system, so a data lake holding personally identifiable information can run under stricter rules than a project management tool.

Vorlon says the gateway covers any application or data store with an API or a Model Context Protocol server and can be turned on in minutes. That includes homegrown and citizen-developed apps, legacy systems and tools built with AI coding assistants such as Anthropic PBC’s Claude Code and OpenAI Group PBC’s Codex. Many competing tools, the company contends, either watch the user prompt instead of the agent’s actions or work only in environments with native MCP support.

The launch comes amid sharp unease among security leaders. Vorlon’s “2026 Agentic Ecosystem Security Gap Report” found that 75.4% of chief information security officers rate AI agents a critical or significant risk, 99% are worried about an AI or software supply chain breach this year and fewer than 1% feel adequately protected.

The company points to a concrete failure to make its case. In April, an AI coding agent deleted the entire production database and all backups of a service called PocketOS in nine seconds, ignoring explicit rules against destructive operations. Guardian’s read-only enforcement would have stopped the writes regardless of what the model decided, Vorlon said.

Guardian draws on DataMatrix, the patented simulation engine Vorlon introduced in April 2025 that maintains a live behavioral model of every agent, app, identity, integration and data flow in an environment. The engine discovers shadow agents and tools automatically, which Vorlon says lets teams add enforcement without building an inventory by hand.

“Enterprises have spent years building security programs around the assumption of governing access equaling governing risk,” noted co-founder and Chief Executive Amir Khayat. “AI agents broke that assumption. They operate through legitimate access, at machine speed, across systems no single team fully owns.”

Guardian, he said, is the enforcement layer the agentic era has been missing. “It acts before the transaction completes, not after the damage is done,” he added.

Vorlon, founded in 2022 and backed by Accel, integrates with security information and event management, security orchestration, information technology service management and data loss prevention platforms, including Netskope Inc., Microsoft Purview and Google DLP. Guardian is available now.

Image: Vorlon