Noma extends agent security and governance to employee endpoints

Noma has expanded its platform to cover agents, MCP servers and skills running on employee machines. The new endpoint capabilities discover those assets, enforce access control over what each is allowed to do, and use AI Detection and Response to block dangerous behaviour at runtime.

The company said endpoint agents carry the same permissions and credentials as the employees who installed them, and that policy and context now follow each agent across SaaS, homegrown and endpoint environments. Discovery works through existing EDR or MDM deployments, turning configuration files, skills directories and running processes into a live inventory.

Noma Open Enforcement applies policies across agent hooks, AI and MCP gateways, SDKs, EDR and MDM, with coverage spanning Claude Code, Claude Cowork, Cursor, Codex, Windsurf, Kiro, Antigravity and OpenClaw. The company also plans to bring Agent Boundaries, which enforce business-defined limits on agent actions, to the endpoint.