Skip to content
Endpoint AI Finder

PRODUCT NOTES · NEO SECURITY, INC.

Neo: AI endpoint control facts (2026)

Short answer

Neo, from Neo Security, Inc. (neo.ai, not Pulumi Neo), keeps a live inventory of agents, models, skills, MCP servers and extensions on every endpoint and intercepts agent actions to allow, block or hold them for human approval, with an audit mode before enforcement and an audit chain tying each action to a human or agent. It uses its own lightweight sensor, OS support is not listed on the pages we read, and no price is published.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Where do Neo's controls sit?

Neo: described at 1 of 4 product control positions (on-device control), partly at 1 (browser extension).AI servicesMCP serversDEVOn-device controlBRWBrowser extensionNETNetwork or SSE proxyGWYAI or MCP gatewayPOLPolicy: no product
  • DEV Filled marker: described on the product pages we read
  • DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
  • DEV Dashed marker: not in our sources (it may exist; we did not find it)
The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.
The four product control types, plus policy only.
TypeStatusWhat the pages saySource
On-device controlDescribedA live inventory of agents, models, skills, MCP servers and extensions on every endpoint, with runtime control that intercepts agent actions.

Source: Neo homepage · Read 13 Oct 2026

Browser extensionPartly described(secondary: SACR) user-mode endpoint and browser security.

Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source

Network or SSE proxyNot in our sourcesNot described on the pages we read.None
AI or MCP gatewayNot in our sourcesNot described on the pages we read.None
Policy onlyNo product neededPolicy is your own work whichever product you choose.None

How does Neo decide on an AI action?

Neo: decisions
Decides on a tool call before it runsMatchesIntercepts agent actions at the endpoint and allows, blocks or holds them for approval.

Source: Neo homepage · Read 13 Oct 2026

Can warn or ask instead of only blockingMatchesHold an action for verified human approval.

Source: Neo: platform · Read 13 Oct 2026

Can block an agent, tool or actionMatchesBlock is one of its runtime actions.

Source: Neo: platform · Read 13 Oct 2026

Has a watch-only or simulation modeMatchesAudit mode before enforcement.

Source: Neo: platform · Read 13 Oct 2026

How does Neo reach devices, and which AI tools does it name?

Neo: rollout and named tools
How it reaches devicesA lightweight endpoint sensor with no kernel module, no reboot and no OS hooks; analysis stays on the device. OS support is not listed on the pages we read; SACR (secondary) says it needs no MDM.

Source: Neo: platform · Read 13 Oct 2026

Rolls out through EDR or device management you runPartlyIts own lightweight sensor rather than a rollout through existing EDR or MDM.

Source: Neo: platform · Read 13 Oct 2026

Names the coding agents it coversMatchesNames Claude Code, Gemini CLI, GitHub Copilot and OpenAI Codex; Cursor is not named.

Source: Neo: platform · Read 13 Oct 2026

AI tools and surfaces namedAgents, models, skills, MCP servers and extensions on every endpoint.

Source: Neo homepage · Read 13 Oct 2026

Built intoNone
Works withNone in our sources

What else does Neo cover?

Neo: other coverage
Controls what goes into browser AINot in our sources
Records who or what took each actionMatchesEvery action tied to the human or agent that caused it, in an immutable audit chain.

Source: Neo homepage · Read 13 Oct 2026

Also covers SaaS, cloud or homegrown AIPartlyNames SaaS and desktop AI such as Slack AI, Notion AI, Salesforce Agentforce and ChatGPT Desktop.

Source: Neo: platform · Read 13 Oct 2026

What does Neo cost?

Not published

Not published (demo request).

Source: Neo homepage · Read 13 Oct 2026

Where is Neo strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

  • Allows, blocks or holds an agent action for approval at the endpoint.
  • Audit mode before enforcement, and an audit chain tying each action to a human or agent.
  • Names Claude Code, Gemini CLI, GitHub Copilot and OpenAI Codex.

Limits

  • Uses its own sensor rather than the EDR or MDM you run, and OS support is not listed on the pages we read.
  • No price is published.

What does Neo say about itself?

No vendor figures are quoted in these notes.

What has Neo announced recently?

Who should shortlist Neo?

Consider Neo if you want to hold agent actions for human approval on the device, or if you want an audit mode before enforcing rules.

In our example finder profiles, Neo is in the first group for: Unmanaged devices, not sure what is in use.

How does Neo compare with each other product?

Questions people ask

Does Neo decide on AI agent actions before they run?

Matches. Intercepts agent actions at the endpoint and allows, blocks or holds them for approval. Warn or ask: Matches.

How does Neo reach employee devices?

A lightweight endpoint sensor with no kernel module, no reboot and no OS hooks; analysis stays on the device. OS support is not listed on the pages we read; SACR (secondary) says it needs no MDM.

Does Neo publish its prices?

Not published (demo request).