CrowdStrike
Charlotte AI and AgentWorks
EARLYUNKNOWNUNKNOWN
AFFIRMED — AgentWorks allows teams to define data and control agent behavior inside Falcon.
Confirmed topic projection
Security Agent Governance
Authorization, auditability, runtime policy, and governed action boundaries.
Systems in this topic
D3 Security
D3 Morpheus
EMERGINGUNKNOWNUNKNOWN
AFFIRMED — Morpheus records system and human actions in a unified incident audit trail.
Google Threat Hunt Agent
EARLYUNKNOWNUNKNOWN
CONDITIONAL — Preview access is limited to Enterprise Plus customers.
Microsoft
Security Alert Triage Agent
EARLYUNKNOWNUNKNOWN
AFFIRMED — Administrators can review feedback and pause or remove the triage agent.
Reviewed analysis
Action authority is the comparison buyers actually need
A governed comparison of read-only, recommendation, approval-gated, and bounded-autonomous security agents.
Closed-loop response is a governance configuration, not a binary feature
Cisco, Palo Alto, SentinelOne, Conifers, and D3 expose different control models.
NONE_FOUND and UNKNOWN prevent false certainty
Missing validation and unresolved product detail answer different questions.