Skip to content
Endpoint AI Finder

PRODUCT NOTES · ONYX SECURITY

Onyx Security: AI endpoint control facts (2026)

Short answer

Onyx Security inspects every prompt, tool call and model response inline across browser AI, coding assistants, desktop agents, cloud workloads and MCP servers, with five actions: alert, block, mask, steer or ask. It uses its own endpoint agents, browser extensions, APIs and gateways, so there is something new to roll out, and it publishes no price.

By The Device Desk · Endpoint AI Finder · Published 2026-10-11

Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.

Vendor pages read September and October 2026 · updated 2026-10-13

Where do Onyx's controls sit?

Onyx: described at 3 of 4 product control positions (on-device control, browser extension, ai or mcp gateway).AI servicesMCP serversDEVOn-device controlBRWBrowser extensionNETNetwork or SSE proxyGWYAI or MCP gatewayPOLPolicy: no product
  • DEV Filled marker: described on the product pages we read
  • DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
  • DEV Dashed marker: not in our sources (it may exist; we did not find it)
The map shows where each product's own pages describe a control, or where your answers point. It is not a measure of how well a product works.
The four product control types, plus policy only.
TypeStatusWhat the pages saySource
On-device controlDescribedEndpoint agents cover coding assistants and desktop AI agents.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Browser extensionDescribedBrowser extensions cover browser AI.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Network or SSE proxyNot in our sourcesNot described on the pages we read.None
AI or MCP gatewayDescribedGateways and APIs inspect traffic inline.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Policy onlyNo product neededPolicy is your own work whichever product you choose.None

How does Onyx decide on an AI action?

Onyx: decisions
Decides on a tool call before it runsMatchesInspects every prompt, tool call and model response inline.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Can warn or ask instead of only blockingMatchesFive actions: alert, block, mask, steer or ask.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Can block an agent, tool or actionMatchesBlock is one of five actions.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Has a watch-only or simulation modePartlyAlert is one of five actions; a simulation mode is not described.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

How does Onyx reach devices, and which AI tools does it name?

Onyx: rollout and named tools
How it reaches devicesEndpoint agents, browser extensions, APIs and gateways.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Rolls out through EDR or device management you runNot in our sources
Names the coding agents it coversPartlyCovers coding assistants; specific tools are not named on the pages we read.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

AI tools and surfaces namedBrowser AI, coding assistants, desktop AI agents, cloud workloads and MCP servers.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Built intoNone
Works withLists CrowdStrike among its integrations.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

What else does Onyx cover?

Onyx: other coverage
Controls what goes into browser AIMatchesCan mask data in browser AI as well as block it.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Records who or what took each actionPartlyIntegrates with Okta, Entra and Splunk; separating a person from an agent is not described.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

Also covers SaaS, cloud or homegrown AIMatchesCloud workloads and MCP servers as well as devices.

Source: Onyx Security: AI security platform · Read 27 Sep 2026

What does Onyx cost?

Not published

Not published.

Source: Onyx Security homepage · Read 27 Sep 2026

Where is Onyx strong, and where are its limits?

Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.

Strengths

  • Five actions, including mask, steer and ask, not only block.
  • One product across browser AI, coding assistants, desktop agents, cloud workloads and MCP servers.
  • Integrations with Okta, Entra, Splunk and CrowdStrike.

Limits

  • Uses its own endpoint agents and browser extensions, so there is something new to roll out to devices.
  • No pricing published, and specific coding agents are not named on the pages we read.

What does Onyx say about itself?

What has Onyx announced recently?

Who should shortlist Onyx?

Consider Onyx if you want masking or steering rather than only allow or block, or if AI use spans the browser, desktop apps, coding tools and cloud workloads.

In our example finder profiles, Onyx is in the first group for: Browser AI and coding agents on managed devices, coaching first and Unmanaged devices, not sure what is in use.

How does Onyx compare with each other product?

Questions people ask

Does Onyx decide on AI agent actions before they run?

Matches. Inspects every prompt, tool call and model response inline. Warn or ask: Matches.

How does Onyx reach employee devices?

Endpoint agents, browser extensions, APIs and gateways.

Does Onyx publish its prices?

Not published.