WSO2 Agent Manager
by WSO2
Open-source control plane for governing AI agents across any framework, model or cloud
WSO2 Agent Manager is an Apache 2.0-licensed control plane that lets enterprises deploy, secure, observe and govern AI agents built on any framework, including LangChain, CrewAI, AWS Strands and the Microsoft Agent Framework, from a single console. It is aimed at platform, architecture and security teams facing agent sprawl, giving every agent its own revocable identity, enforced guardrails and an end-to-end OpenTelemetry trace on infrastructure the organisation controls.
WSO2 Agent Manager is an open-source control plane for enterprise AI agents. It was announced on 5 May 2026, entered beta in June 2026 and reached general availability as version 1.0.0 in September 2026 under the Apache 2.0 licence. It is built by WSO2, the Santa Clara-headquartered open-source integration vendor behind WSO2 API Manager and WSO2 Identity Server, founded in 2005, employing roughly 1,200 people across offices in the US, UK, Germany, Spain, Brazil, UAE, India, Sri Lanka and Australia, and led since August 2026 by CEO Harry Ault. The product is deliberately framework-agnostic: it governs agents written with LangChain, CrewAI, Amazon Bedrock Strands and the Microsoft Agent Framework, plus Python and Ballerina agents, and federates management across cloud, on-premises and hybrid estates. Architecturally it is Kubernetes-native, installed via Helm charts and built on WSO2's OpenChoreo project for internally hosted agents, while externally deployed agents are governed through the same console. Every agent is issued its own verifiable identity instead of borrowing a shared human or service credential, with delegation policies, role-based access control, OAuth2 token exchange and instant revocation. Governance is enforced by more than 40 built-in guardrails, including PII masking, URL validation, rate limiting and semantic prompt validation, applied at the organisation, agent, MCP and LLM layers and mapped to the OWASP Top 10. Observability relies on zero-code OpenTelemetry auto-instrumentation plus 24 built-in evaluation metrics and audit logs, and lifecycle controls cover versioning, sandboxed runtimes and single-click suspension of a misbehaving agent. WSO2 was named in Forrester's Q2 2026 Agent Control Plane Solution Landscape and offers the product both self-hosted and as a managed SaaS with a 99.99% SLA.
The platform or enterprise-architecture team already running agents from three or more frameworks that needs one identity, policy and audit layer over all of them without handing that layer to a single hyperscaler.
Every agent in the estate gets a revocable machine identity, enforced guardrails and an end-to-end OpenTelemetry trace, running on infrastructure you own.
At a Glance
- Category
- AI Agents & Orchestration
- Pricing
- Free, Subscription, Contact for pricing
- Target Market
- CIOs, CTOs, Enterprise Architects, Platform Engineers, Security Engineers
- Deployment
- Open-source, Self-hosted, Hybrid, Multi-cloud
- Founded
- 2005
- Headquarters
- Santa Clara, United States
- Team Size
- 500+
Key Features
- ✓Per-agent verifiable identity
Issues each agent its own identity with role-based access, delegation policies, OAuth2 token exchange and instant revocation.
- ✓40+ built-in guardrails
PII masking, URL validation, rate limiting and semantic prompt validation enforced at organisation, agent, MCP and LLM levels and mapped to the OWASP Top 10.
- ✓Zero-code OpenTelemetry observability
Auto-instruments agents to emit end-to-end traces, metrics and audit logs without requiring any change to application code.
- ✓Continuous evaluation
Twenty-four built-in plus customisable metrics score agent output quality continuously rather than only at release time.
- ✓Versioned lifecycle with kill switch
Promotes agents from development to production with versioning, sandboxed runtimes and single-click suspension of a misbehaving agent.
- ✓Framework-agnostic federation
Governs LangChain, CrewAI, AWS Strands, Microsoft Agent Framework, Python and Ballerina agents across cloud, on-premises and hybrid deployments.
Capabilities
Use Cases
- •Taming agent sprawl
Inventory every agent running across business units and apply one consistent identity, policy and audit standard to all of them.
- •Sovereign agent deployment
Run the entire control plane inside a regulated or air-gapped Kubernetes estate so agent data never leaves the jurisdiction.
- •Securing MCP tool access
Proxy and authorise each agent's MCP server calls per tool, blocking excess permissions before the agent can act on them.
- •Incident containment
Suspend a misbehaving production agent in one click, then replay its OpenTelemetry trace to establish exactly what it did.
- •Pre-production quality gate
Score a new agent version against built-in and custom evaluation metrics before it is promoted into the production environment.
Ideal For
Best For
- ✓Governing multi-framework agent estates where LangChain, CrewAI and Microsoft Agent Framework agents coexist
- ✓Giving each agent a revocable machine identity instead of a shared service-account credential
- ✓Enforcing PII masking and prompt-injection guardrails at the MCP and LLM boundary
- ✓Running an agent control plane inside a sovereign, regulated or air-gapped Kubernetes estate
- ✓Tracing and continuously evaluating agent behaviour without modifying agent code
Not Ideal For
- ✗Teams with no Kubernetes practice — the control plane installs via Helm and expects cluster operations, which is real platform overhead for a small team
- ✗Buyers who want a self-serve SaaS with published pricing; WSO2 sells quote-based subscriptions and its commercial terms are never listed publicly
- ✗Shops standardised on a single hyperscaler's agent stack, such as Bedrock AgentCore, Vertex or Microsoft Foundry, where a native control plane is already bundled
Integrations
Deployment
Market Analysis
Pros
- ✓Apache 2.0 licence removes both lock-in and a per-agent licence meter; the control plane can be inspected and run entirely in-house
- ✓Genuinely framework-agnostic, supporting LangChain, CrewAI, AWS Strands and Microsoft Agent Framework rather than one runtime
- ✓Agent identity model is unusually mature for this category, reflecting WSO2's long history in API and identity management
- ✓Guardrails, continuous evaluation and OpenTelemetry tracing are bundled rather than sold as separate SKUs
- ✓Named in Forrester's Q2 2026 Agent Control Plane Solution Landscape, so it clears basic analyst diligence
Cons
- ✗Agent Manager itself has no G2, Capterra or Gartner Peer Insights reviews and no Hacker News discussion — there is no independent production evidence to diligence yet
- ✗WSO2's product family draws consistent reviewer complaints on Capterra and Gartner Peer Insights about a steep learning curve and documentation gaps, and buyers should expect the same here
- ✗Reviewers describe WSO2's enterprise Java stack as resource-intensive, demanding careful infrastructure planning and performance tuning
- ✗Kubernetes-only deployment with no lightweight single-node path, so the platform prerequisite is real rather than nominal
- ✗The GitHub repository was young at 1.0.0 — roughly 79 stars and 66 open issues — so the community is small next to the incumbents
- ✗No published pricing for either the commercial subscription or the SaaS; every commercial conversation starts with a sales quote
Pricing
Open source (Apache 2.0)
$0
- ✓Full control plane source on GitHub
- ✓Self-hosted on Kubernetes via Helm
- ✓Community support
Subscription (self-hosted)
Contact for pricing
- ✓Basic or Enterprise support tier
- ✓24x7x365 response for high-severity incidents
- ✓Optional customer success manager
Agent Manager SaaS
Contact for pricing
- ✓Managed multi-region service
- ✓99.99% SLA
- ✓Automated updates
The control plane itself is Apache 2.0 and free to self-host from GitHub; what you pay for is support and the managed service. WSO2 publishes no list price for Agent Manager — subscriptions are quote-based, historically metered by CPU cores plus a Basic or Enterprise support tier, with multi-year commitments discounted. The SaaS edition carries a 99.99% SLA and is also quoted. Budget Kubernetes operations on top of any licence.
Security & Compliance
Connect
Sources
This page was written from 6 sources, 4 on domains other than wso2.com.
Stay Ahead of the Curve
Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.
SubscribeRelated Products
Moveworks
Agentic AI assistant and enterprise search for employee IT, HR and finance requests
Convey
Digital teammates that own back-office operations, trained by screen-share not code
Dify
Open-source platform for building production agentic workflows, RAG pipelines and LLM apps on cloud, VPC or self-hosted infrastructure
Mistral Vibe
Mistral's unified enterprise agent platform for work and code, deployable on-premises with EU data residency