Vectogate
by Vectogate
A governance layer that makes autonomous AI agents controllable, auditable and compliant.
Vectogate is a Swiss-built governance platform that sits between autonomous AI agents and enterprise systems. It enforces least-privilege access, blocks unauthorized tool calls in real time and logs every agent action for audit. It is aimed at regulated enterprises that must show alignment with the EU AI Act, ISO/IEC 42001 and the NIST AI RMF before letting agents act on their own.
Vectogate is an AI agent governance platform from a Swiss startup of the same name. It was co-founded by CEO Josua Boos and CBO Alexander Schneider, and the company is incorporated as a Delaware C-Corp while operating from Switzerland. The platform was announced on 9 July 2026 and opened as a private beta for selected companies in the DACH region. It positions itself as a control layer between autonomous AI agents and the enterprise systems they access. The architecture has two layers. A skill layer guides an agent's reasoning before a tool call is executed, steering it toward permitted actions. A downstream enforcement layer then evaluates each action at runtime (which agent is acting, on whose behalf, against which resource, under which rule) and blocks in real time anything the guidance did not already prevent. Permissions follow default-deny and least-privilege principles and can be scoped per role, user and device, so an agent does not simply inherit its user's full access rights. Every tool call is logged with context and grouped into sessions, giving chain traceability across AI models, clouds and tool servers from a single dashboard. The vendor says the platform was designed from the outset around the NIST AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act, and it is targeting regulated sectors such as banking, insurance and pharmaceuticals. It is offered as SaaS or as an isolated on-premise installation. As of September 2026 there is no public pricing, documentation, named customer, disclosed funding or independent user review. That makes it an early-stage entrant in the fast-forming agent-security category rather than a proven product.
CISOs and AI governance leads at regulated European enterprises (banking, insurance, pharma) who are moving from chatbots to agents that act on internal systems and need provable control before they scale.
A single policy and audit layer that blocks unauthorized agent actions at runtime and produces the per-action trail regulators and incident responders expect.
At a Glance
- Category
- Governance & Security
- Pricing
- Contact for pricing
- Target Market
- CISOs, CIOs, AI Governance Leads, Compliance Officers
- Deployment
- Cloud-first, Self-hosted
- Headquarters
- Switzerland
Key Features
- ✓Skill layer guidance
Guides the agent's reasoning before a tool call executes, steering it toward permitted actions so fewer violations reach enforcement.
- ✓Runtime enforcement layer
Evaluates each agent action by agent, principal, resource and rule, and blocks unauthorized actions in real time as a safety net.
- ✓Granular default-deny permissions
Scopes access per role, user and device on least-privilege principles, so agents cannot silently inherit their user's full access rights.
- ✓Session-grouped audit logging
Logs every tool call with context and groups calls into sessions, giving chain traceability that cannot be reconstructed after an incident.
- ✓Unified multi-model dashboard
Gives one view across AI models, clouds and tool servers, showing which agents touch which systems and whether actions comply with policy.
- ✓SaaS or isolated on-premise
Deploys as a managed cloud service or as an isolated on-premise installation for organizations with strict data-protection or regulatory constraints.
Use Cases
- •EU AI Act traceability
A regulated firm logs every agent interaction with context so it can show auditors full traceability, which cannot be created retroactively.
- •Containing insider-style agent risk
Security restricts each agent to task-specific, least-privilege access, so a manipulated agent cannot act as an inside threat holding valid credentials.
- •Breach investigation within GDPR deadlines
After a suspected agent-driven data exposure, responders use session-grouped tool-call logs to explain what happened within the 72-hour GDPR notification window.
- •Governing collaboration-tool agents
An enterprise puts policy enforcement between agents running in tools like Slack and internal systems, so they can act without bypassing security rules.
Ideal For
Best For
- ✓Regulated DACH-region enterprises preparing for EU AI Act traceability obligations on agentic AI
- ✓Security teams that want default-deny, least-privilege permissions for agents instead of agents inheriting full user rights
- ✓Organizations running agents across several models, clouds and tool servers that need one audit dashboard
- ✓Companies with closed or data-sensitive environments that require an on-premise governance deployment
Not Ideal For
- ✗Buyers who need a production-proven, generally available product with reference customers today; Vectogate is in private beta with no named customers
- ✗Teams that need published pricing, public documentation or third-party certifications (SOC 2, ISO 27001) for procurement, none of which is public yet
- ✗Organizations only using simple chatbots or copilots where a human reviews every output, because the value lies in governing agents that act autonomously
Deployment
Market Analysis
Pros
- ✓Addresses a concrete gap: autonomous agents that inherit full user permissions and act without human review
- ✓Runtime enforcement with default-deny, least-privilege scoping per role, user and device, not just prompt-level guidance
- ✓Full per-action, session-grouped audit trail aligned to the EU AI Act, ISO/IEC 42001 and the NIST AI RMF
- ✓On-premise isolated deployment available alongside SaaS for regulated or closed environments
Cons
- ✗Private beta only (launched July 2026), with no named customers, so production maturity is unproven
- ✗No public pricing, documentation, API/SDK details or list of supported models and tool servers; the vendor site exposes almost no content
- ✗No independent user reviews (nothing on G2, Hacker News, Product Hunt or Reddit) and no published security certifications such as SOC 2 or ISO 27001
- ✗Go-to-market focused on DACH-region companies, so support and presence outside German-speaking Europe are unclear
Pricing
Private beta (early access)
Contact for pricing
- ✓Application-based early access via vectogate.ai
- ✓SaaS or on-premise deployment
- ✓Skill and enforcement layers
- ✓Audit logging and dashboard
No list pricing is published. The platform is in private beta, access is by early-access application, and neither the metering unit (agents, seats or tool calls) nor the terms of an on-premise licence has been disclosed.
Security & Compliance
Sources
This page was written from 7 sources, 6 on domains other than vectogate.ai.
- 1.vectogate.ai — vectogate.aivendor
- 2.helpnetsecurity.com — vectogate ai governance platform
- 3.news4hackers.com — vectogate launches ai agent security platform for autonomous
- 4.moneycab.com — schweizer gruender lancieren mit vectogate eine ai governanc
- 5.moneycab.com — josua boos co founder vectogate im interview
- 6.moneytoday.ch — ai agents erobern unternehmen wer kontrolliert die agenten
- 7.hn.algolia.com — search
Stay Ahead of the Curve
Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.
SubscribeRelated Products
Baselayer
Business identity, risk and fraud infrastructure that now verifies AI agents before they transact
SAS AI Navigator
SaaS AI governance inventory for models, agents and use cases, sold through Microsoft Marketplace
Rein Security
Runtime security for enterprise AI agents, deployed as a sidecar inside your own cloud
Armadin
Autonomous offensive security: AI agent swarms that chain your weak spots into proven attack paths before an attacker does