Runlayer

What Runlayer does

Runlayer provides an AI control plane for enterprises, offering enablement, security, and control for AI agent usage. It helps companies adopt AI safely and at scale by providing visibility into Shadow AI, governing agent access to company systems, and enabling employees to use approved agents and tools. The platform includes features for discovering unmanaged AI, managing access to tools and skills, securing agent actions, and providing observability into AI usage and ROI. Runlayer aims to make AI enterprise-ready without compromising security or slowing down teams.

Products

• AI Control PlaneSecure and control everything agents do, providing visibility, control, and trust for enterprise AI usage.
• Runlayer AgentsOn-demand agents running on Runlayer infrastructure, allowing employees to create agents for recurring work with approved tools, scoped credentials, policy, Guard, and activity history.
• Runlayer CatalogA repository for reusable skills and plugins that teams can publish and share with agents, providing ownership, approval state, dependency context, and usage history.
• MCP GatewayApproved Model Context Protocol (MCP) access across AI clients and third-party agents, routing requests through the gateway to ensure identity, policy, Guard, and audit are attached before reaching company systems.
• Runlayer WatchShadow AI discovery and response, finding shadow MCPs, skills, plugins, and client configs to allow teams to migrate, approve, remove, or block findings.
• Runlayer GuardExecution-time security checks for AI tool use, inspecting risky tool behavior across the gateway and agentic runtime before sensitive actions proceed.
• Agent IAM & GovernanceActor-aware access control for AI usage, evaluating who is acting, which client or agent is involved, what tool or resource is requested, and which conditions apply.
• ROI & ObservabilityProvides adoption, decisions, findings, and audit history, showing what teams use, where access is blocked, which findings matter, and what happened during agent activity.
• Runlayer PluginA plugin for AI clients like Cursor and Claude Code that brings org-approved tools, skills, and agents into the editor with policies and audit trails.
• Runlayer DeployEnables builders and developers to deploy custom MCP servers and integrate with existing Terraform and Kubernetes workflows for self-hosted deployments.
• Agent Telemetry SDKAdds hook enforcement and telemetry to custom agents.
• Platform APIAllows programmatic automation of Runlayer from other tooling.

Key capabilities

• Shadow AI discovery
• AI enablement
• AI Control Plane
• MCP Gateway
• Delegated work to agents
• Governed rollout of AI
• ROI & Observability
• Approved tool access
• Reusable capabilities packaging
• Managed agent execution
• Access control before execution
• Runtime security checks
• Usage and audit tracking
• SSO and SCIM integration
• Policy model for access control
• Self-hosted deployment options
• MDM rollout for shadow usage detection and enforcement
• Real-time monitoring
• Advanced threat detection
• Custom MCP server deployment
• Agent telemetry
• Platform API

Use cases

• AI enablement for all employees
• Secure and control AI agent usage
• Discovering and managing Shadow AI
• Publishing approved MCPs, skills, plugins, and agents
• Creating agents on demand for recurring work
• Governing AI rollout with platform and security teams
• Monitoring AI adoption, activity, and tool usage
• Building and deploying custom MCP servers
• Integrating AI with existing company systems (e.g., Gmail, Slack, Snowflake, Confluence, Google Drive, Calendar, Atlassian, Fellow, Notion, HubSpot, Jira, GitHub, Canva, Datadog, Databricks, CrowdStrike, Sentry, Figma)
• Ensuring HIPAA compliance for AI usage in healthcare
• Accelerating AI adoption without compromising security
• Centralizing visibility and access control across AI tools and agents
• Managing human connector calls
• Securing sensitive actions performed by AI agents

AI approach

Runlayer provides an AI Control Plane for enterprises, enabling secure and governed use of AI agents and Model Context Protocols (MCPs). It focuses on shadow AI discovery, AI enablement, security, and control, allowing employees to use agents with approved tools and access, while platform and security teams maintain oversight. The company's founders have experience building AI products and MCPs, indicating a deep understanding of the underlying technology.

Tech named: Model Context Protocol (MCP), AI agents, LLM (Claude)

Industries served

• Technology
• Information and Internet
• Healthcare
• Human Resources
• Small Business Management

What it says sets it apart

• Provides a unified AI control plane for enablement, security, and control
• Offers comprehensive Shadow AI discovery and management
• Enables governed rollout of AI with integrated security and policy controls
• Facilitates the creation and sharing of reusable AI capabilities (skills, plugins)
• Supports both hosted and self-hosted deployment options
• Integrates with existing enterprise identity, device management, and infrastructure systems
• Built by a founding team with experience in building AI at scale and creating agentic AI products (e.g., Zapier MCP and Agents)
• Focuses on making AI enterprise-ready without slowing down teams
• Provides immediate time-to-value with collaborative onboarding and foundational MCP server setup

Funding rounds we track

From the AI funding tracker — rounds as reported by the linked publications.