Vanta publishes 65 AI agent controls for the gaps ISO leaves open
Herman Errico's open-source project separates governance for builders and buyers, while leaving runtime enforcement to other tools.
By RuntimeWire Staff · Published
Primary source: Vanta
Why it matters
Vanta is defining the checklist enterprises may use to buy and audit AI agents, giving it influence over a security category while runtime vendors compete to enforce the rules.
Herman Errico, a product-security researcher at Vanta, has moved Agentic Trust Controls into general availability with 65 open-source controls for organizations building or deploying AI agents. The late-August release expands the 61-control early-access version Vanta opened in July and maps the library to ISO 27001 and ISO 42001, with SOC 2 and NIST Cybersecurity Framework mappings planned.…