# Endpoint AI Finder

> A finder for AI endpoint controls: answer seven questions to see which control type fits (on-device control, browser extension, network or SSE proxy, AI or MCP gateway, or policy only with no product yet) and which AI security products' published facts match. No scores or rankings. Vendor pages read September and October 2026 · updated 2026-10-13.

## Key pages

- [Home](https://endpointaifinder.com/): which AI endpoint control fits your company, if any, with the Control Map and an example result.
- [AI control finder](https://endpointaifinder.com/ai-control-finder): the seven-question finder; results are computed from published rules and shareable through the address bar.
- [How the finder works](https://endpointaifinder.com/how-the-finder-works): every rule, what Described and Not in our sources mean, sources, and limits.
- [Line up products](https://endpointaifinder.com/line-up-ai-controls): facts for two to five products in columns, with rows that differ tagged.
- [Endpoint AI terms](https://endpointaifinder.com/endpoint-ai-terms): plain definitions of AI endpoint control terms, with sources.
- [Endpoint AI FAQ](https://endpointaifinder.com/endpoint-ai-faq): short answers grouped by theme, each linking to the page that goes deeper.

## Control types

- [On-device control](https://endpointaifinder.com/control-type/on-device-control): On-device AI control: governing coding agents and AI apps where they run.
- [Browser extension](https://endpointaifinder.com/control-type/browser-extension): Browser extensions for AI control: guarding what goes into AI chat.
- [Network or SSE proxy](https://endpointaifinder.com/control-type/network-sse-proxy): Network and SSE proxies for AI control: what they see and what they miss.
- [AI or MCP gateway](https://endpointaifinder.com/control-type/ai-gateway): AI and MCP gateways: one checkpoint for model and tool calls.
- [Policy only](https://endpointaifinder.com/control-type/policy-only): Policy-only AI control: when you may not need a product yet.

## Product notes

- [AI Access Security (Palo Alto Networks)](https://endpointaifinder.com/product-notes/ai-access-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Akamai Workforce Protector](https://endpointaifinder.com/product-notes/akamai-workforce-protector): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Bay](https://endpointaifinder.com/product-notes/bay): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Bloom Security](https://endpointaifinder.com/product-notes/bloom-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Cloudflare AI Gateway](https://endpointaifinder.com/product-notes/cloudflare-ai-gateway): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [CrowdStrike Falcon Guardian](https://endpointaifinder.com/product-notes/crowdstrike-falcon-guardian): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Ent](https://endpointaifinder.com/product-notes/ent): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Glow Security](https://endpointaifinder.com/product-notes/glow-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Harmonic Security](https://endpointaifinder.com/product-notes/harmonic-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Koi (Palo Alto Networks)](https://endpointaifinder.com/product-notes/koi): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Lasso Security](https://endpointaifinder.com/product-notes/lasso-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Neo](https://endpointaifinder.com/product-notes/neo): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Noma Security](https://endpointaifinder.com/product-notes/noma-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Onyx Security](https://endpointaifinder.com/product-notes/onyx-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Pluto Security](https://endpointaifinder.com/product-notes/pluto-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Prompt Security (SentinelOne)](https://endpointaifinder.com/product-notes/prompt-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Sun Security](https://endpointaifinder.com/product-notes/sun-security): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Zenity](https://endpointaifinder.com/product-notes/zenity): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.
- [Zscaler Generative AI Security](https://endpointaifinder.com/product-notes/zscaler-genai): where its controls sit, how it decides on actions, rollout, pricing, strengths and limits.

## Endpoint AI guide

- [Endpoint AI guide](https://endpointaifinder.com/endpoint-ai-guide): lessons on choosing and rolling out AI controls, in three tracks.
- [Browser AI, desktop agents and coding agents: three different risks](https://endpointaifinder.com/endpoint-ai-guide/three-kinds-of-workplace-ai): The first question in the finder is which AI tools people use. The answer changes everything after it.
- [AI on devices you do not manage: what you can still control](https://endpointaifinder.com/endpoint-ai-guide/ai-on-devices-you-do-not-manage): None of the products we cover describes unmanaged-device coverage. That is not a gap in one vendor; it is how device controls work.
- [AI controls for cloud workspaces and virtual desktops](https://endpointaifinder.com/endpoint-ai-guide/ai-controls-for-cloud-workspaces): When the work runs on a server, the endpoint that matters is the server, not the laptop.
- [Matching AI controls to the data at stake](https://endpointaifinder.com/endpoint-ai-guide/matching-ai-controls-to-data-sensitivity): The same coding agent is a small risk on a hobby project and a large one next to production credentials.
- [Coaching versus blocking: how should AI controls respond?](https://endpointaifinder.com/endpoint-ai-guide/coaching-versus-blocking-ai-use): The finder's sixth question asks what should happen when an AI action looks risky. It is a question about people as much as technology.
- [Fitting AI controls next to the EDR, SSE and DLP you already run](https://endpointaifinder.com/endpoint-ai-guide/fitting-ai-controls-next-to-edr-sse-dlp): The finder's fifth question asks what you already run. The answer often decides how a new control reaches your devices.
- [Writing a first AI use policy before you buy anything](https://endpointaifinder.com/endpoint-ai-guide/writing-a-first-ai-use-policy): Every result of the finder needs a policy. For some companies it is the whole first step.
- [Rolling out AI controls to developers without stopping their work](https://endpointaifinder.com/endpoint-ai-guide/rolling-out-ai-controls-to-developers): Developers are the heaviest users of AI agents and the quickest to route around a control that gets in their way.

## Device notes

- [Device notes](https://endpointaifinder.com/device-notes): analysis from The Device Desk on AI endpoint control.
- [Questions for your EDR vendor about AI agents](https://endpointaifinder.com/device-notes/questions-for-your-edr-vendor-about-ai-agents): The cheapest AI control is the one you already pay for. Find out what it covers before buying another.
- [AI usage control: what the term means for buyers](https://endpointaifinder.com/device-notes/ai-usage-control-what-the-term-means): A new market name tends to arrive before buyers agree on what it includes. Here is how it maps onto the finder's control types.
- [Bay in context: an endpoint-only AI control delivered through EDR](https://endpointaifinder.com/device-notes/bay-in-context-endpoint-only-edr-delivered): This note sets out what its pages describe, where it fits and where it does not.
- [Eight example companies run through the AI control finder](https://endpointaifinder.com/device-notes/eight-example-companies-through-the-finder): The same 19 products come out in a different order for each. Two of the eight are told they may not need a product yet.
- [What the Koi, Prompt Security, Portkey and Aim deals mean for buyers](https://endpointaifinder.com/device-notes/what-the-2026-deals-mean-for-ai-endpoint-buyers): Large security vendors have bought their way into AI control. This note covers announcements from August 2025 to September 2026.
- [What 19 AI endpoint products say about unmanaged devices](https://endpointaifinder.com/device-notes/what-ai-endpoint-products-say-about-unmanaged-devices): Short version: nothing. Here is why that is expected, and what it means for contractors and personal devices.
- [Where 19 AI endpoint products put their controls](https://endpointaifinder.com/device-notes/where-ai-endpoint-products-put-their-controls): Most products sit in one or two places. Knowing which ones tells you what they will never see.
- [Why one AI control rarely covers both chat tools and coding agents](https://endpointaifinder.com/device-notes/one-control-rarely-covers-chat-and-coding-agents): Chat tools are a data problem in the browser. Coding agents are an action problem on the device. Few products sit in both places.

## Head-to-heads

- 171 fact-only head-to-head pages at /<a>-next-to-<b>-for-ai, listed on https://endpointaifinder.com/product-notes#head-to-heads