Sold by: Onyx Security
Deployed on AWS
Onyx Security is the AI control plane for enterprise AI agents, tools, and applications. Discover and inventory every AI agent across SaaS, cloud, endpoint, browser, and coding environments; enforce policy in real time against prompt injection, data leakage, and unauthorized agent actions and other threats; and govern AI use at scale across the entire enterprise with natural language policies. Securing over millions of agents in production, Onyx gives security and technology teams the visibility and control to accelerate AI adoption without losing oversight.
Overview
The enterprise AI adoption is growing faster than security teams can track. Agents operate across SaaS copilots, cloud workloads, coding environments, browsers, and custom-built applications, often without governance or visibility. Onyx Security is the AI control plane that gives enterprises the observability, posture management, runtime enforcement, and governance needed to accelerate AI adoption securely and at scale, securing millions of agents in production today. The Onyx platform covers five integrated areas. AI Observability delivers real-time visibility into every agent, model, MCP server, tool, and AI-enabled application across your environment, including shadow AI. AI Security Posture Management automatically analyzes agent configurations, system prompts, and skills to identify vulnerabilities before they reach production. Onyx AI Guard provides inline runtime enforcement, blocking prompt injection, masking sensitive data, restricting unauthorized tool use, and applying natural language policies across agent conversations and API traffic. The Onyx MCP Gateway is the only purpose-built security control plane for Model Context Protocol traffic, providing visibility and real-time access controls for every MCP server connection. The Onyx Browser Extension extends enforcement across the most widely-used AI platforms at the browser level, with block, mask, and data rehydration capabilities. The Onyx Guardian Agent is a supervisory AI that continuously monitors agent activity, surfaces risks, and provides natural language-powered investigation and remediation across the full environment. Onyx integrates with the enterprise AI platforms where agents actually operate, covering SaaS copilots, cloud agent frameworks, AI gateways, and native AI applications, without requiring changes to those platforms. Policies are defined in natural language, security coverage aligns to MITRE, NIST, OWASP, and EU AI Act frameworks, and every AI interaction generates a full audit trail. Onyx gives security and technology teams the control to operate with confidence as AI agent adoption scales across the enterprise.
Highlights
- Automatically discover and inventory every AI agent, tool, model, MCP server, and AI-enabled application across SaaS, cloud, endpoint, browser, and coding environments, including shadow AI. Gain a unified view across your entire AI inventory, without deploying agents.
- Onyx AI Guard enforces policy inline across agent conversations and API traffic, blocking prompt injection, masking sensitive data, and restricting unauthorized tool use. The Onyx MCP Gateway adds a dedicated security layer for all MCP server traffic. The Browser Extension extends enforcement to AI in the browser, with block, mask, and data rehydration support.
- The Onyx Guardian Agent continuously monitors agent activity at scale across millions of sessions, surfaces posture risks, answers security team questions in natural language, and accelerates investigation and remediation. Define and enforce policies in natural language. Align coverage to MITRE, NIST, OWASP, and EU AI Act frameworks out of the box.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
OAIPP BASE | Onyx AI Protection Platform: Base Platform Discovery/Posture/Compliance | $300,000.00 |
OAIPP RUNTIME | Onyx AI Protection Platform: Runtime Module | $150.00 |
ONYX RED | Onyx AI Protection: Redteaming | $1.00 |
Dimensions summary
This contract offers three separate modules you can combine based on need. The OAIPP BASE module covers the base platform for AI agent discovery, posture scoring, and compliance. The OAIPP RUNTIME module adds runtime protection that inspects and enforces policy on agent actions. ONYX RED adds automated red teaming that continuously tests deployed agents. Each dimension is billed in units under a contract term. You select the modules that match your scope, so the platform scales as you add runtime enforcement or red teaming to the base platform.
Top-of-mind questions for buyers
The base module discovers AI agents across your environment, scores their runtime posture, and maps compliance. It evaluates each agent on deployment and continuously, rolling misconfigurations, excessive permissions, and credential handling into one risk view. Most environments produce a working AI inventory within 24 hours.
The modules bill independently in units under one contract. OAIPP BASE provides discovery, posture, and compliance. The OAIPP RUNTIME module adds inline inspection of prompts, tool calls, and responses, with actions to alert, block, mask, steer, or ask. ONYX RED runs automated attacks against deployed agents. You combine modules to match your scope.
ONYX RED continuously attacks deployed agents to surface what static reviews miss. It generates attack plans across reconnaissance, jailbreaking, and weaponization. Findings feed the same platform your team uses for runtime enforcement, keeping test and production on one policy record. You purchase it as a separate unit-based module.
onyx.security
Helpful?
Vendor refund policy
All fees and other amounts paid pursuant to Onyx MSA are non-refundable and without right of set off.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The Secure LLM Reference Architecture engagement helps organisations design secure AI and LLM application architectures on AWS. ControlPlane defines trust boundaries, runtime security controls, Lakera integration patterns, and deployment architectures for LLM, RAG, and agent-based systems running in cloud-native and Kubernetes environments.
AWS agent securely connecting workloads to endpoints within a VPC.
AWS agent securely connecting workloads to endpoints within a VPC.
The Lakera Implementation Accelerator is a structured engagement designed to help organizations deploy and operationalize AI runtime protection across LLM, RAG, and agent-based applications. It enables integration of Lakera with application architectures, APIs, and infrastructure while configuring runtime security policies and observability. The result is a controlled, low-risk path from pilot to production-ready AI security.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.