NewCore review: agent identity scores
- Pos
- 1
- Total
- 8.70
- Best criterion
- Agent identity and ownership 10
- Weakest criterion
- Buying clarity 5
| Criterion | Weight | Score | Reason | Source |
|---|---|---|---|---|
| Agent identity and ownership | 20 | 10 | Every agent is linked to an accountable owner in an identity graph that resolves a person's accounts across identity providers, directories and HR systems. | nc-discover |
| Credential model | 20 | 9 | Access is short-lived and task-scoped, and the agent never holds the tool's own credential. | nc-secure |
| Delegation and on-behalf-of | 15 | 9 | The gateway shows the agent acting on behalf of a person and keeps it within that person's permissions. | nc-secure |
| Runtime authorization and human approval | 20 | 10 | Every tool call is checked by one policy engine that allows, asks or denies, and an agent can never approve its own action. | nc-secure, nc-govern |
| Discovery of unregistered agents | 10 | 8 | Read-only integrations find agents without registration and trace access paths outside SSO. | nc-discover |
| Standards | 10 | 5 | Public material names SAML, OIDC and an MCP server registry, but not OAuth 2.1, SPIFFE or Cross App Access. | nc-foundation, nc-secure |
| Buying clarity | 5 | 5 | There is no list price, though an AWS Marketplace listing with custom units gives a procurement path. | nc-aws |
In short:NewCore ranks first of ten with 8.70 out of 10. NewCore is an agent governance layer that works alongside the identity provider a company already runs. Its strongest criterion is ownership and its weakest is buying clarity. Each score below has a reason and a public source read on 3 November 2026.
Status: Independent. Emerged from stealth on 15 June 2026 with $66M from Cyberstarts, Index Ventures and Evolution Equity Partners. nc-launch
NewCore is an agent governance layer that works alongside the identity provider a company already runs. It discovers agents, links each one to an accountable person and checks every tool call against one policy engine.
Where does NewCore lead?
- Agent identity and ownership 10: Every agent is linked to an accountable owner in an identity graph that resolves a person's accounts across identity providers, directories and HR systems.
- Credential model 9: Access is short-lived and task-scoped, and the agent never holds the tool's own credential.
- Delegation and on-behalf-of 9: The gateway shows the agent acting on behalf of a person and keeps it within that person's permissions.
- Runtime authorization and human approval 10: Every tool call is checked by one policy engine that allows, asks or denies, and an agent can never approve its own action.
Where does NewCore trail?
- Standards 5: Public material names SAML, OIDC and an MCP server registry, but not OAuth 2.1, SPIFFE or Cross App Access.
- Buying clarity 5: There is no list price, though an AWS Marketplace listing with custom units gives a procurement path.
How much does NewCore cost?
No list price. NewCore sells through an AWS Marketplace listing with custom units and an upfront commitment. nc-aws
Works alongside your identity provider?
Yes. NewCore states that your current identity platform keeps handling employee sign-in. Its first deployment path is called "Start alongside your identity platform", and it also works alongside an existing AI gateway. nc-secure, nc-foundation
Which buyer needs does NewCore suit?
- Keeping Okta: position 1, 8.75
- Microsoft 365 shops: position 1, 8.70
- Coding agents: position 1, 8.85
- Regulated industries: position 1, 9.00
- Standards-first builders: position 3, 7.30
- Free start, small teams: position 2=, 7.50
- Shadow agent cleanup: position 1=, 8.70
- MCP-heavy teams: position 1, 8.80
Common questions
- What does NewCore score in 2026?
- NewCore scores 8.70 out of 10 and sits at position 1 in our standings. Its best criterion is ownership at 10.
- How is NewCore priced?
- No list price. NewCore sells through an AWS Marketplace listing with custom units and an upfront commitment.
- Does NewCore work alongside Okta or Entra?
- Yes. NewCore states that your current identity platform keeps handling employee sign-in. Its first deployment path is called "Start alongside your identity platform", and it also works alongside an existing AI gateway.
Related
- NewCore vs Aembit
- NewCore vs Descope
- NewCore vs Silverfort
- NewCore vs Cyera Identity
- NewCore vs Astrix Security
- NewCore vs Idira
- NewCore vs SailPoint Entro
- NewCore vs Clutch Security
- NewCore vs Token Security
- How we score
Sources
- [nc-discover] NewCore: Discover. https://newcore.com/platform/discover. Read .
- [nc-secure] NewCore: Secure. https://newcore.com/platform/secure. Read .
- [nc-govern] NewCore: Govern. https://newcore.com/platform/govern. Read .
- [nc-foundation] NewCore: Identity foundation. https://newcore.com/platform/identity-foundation. Read .
- [nc-aws] NewCore on AWS Marketplace. https://aws.amazon.com/marketplace/seller-profile?id=seller-tgpd3ujnoiz3w. Read .
- [nc-launch] NewCore emerges from stealth with $66M. https://newcore.com/newsroom/newcore-emerges-from-stealth-66m. Read .