NewCore vs Lasso
| Criterion | NewCore | Lasso | NewCore reason | Lasso reason |
|---|---|---|---|---|
| G1 Identity-bound per-call authorization (25) | 10 | 2 | Every tool call passes through the gateway, which identifies the agent and the person behind it and checks the action against policy, keeping agents within that person's permissions. [nc-secure] | The gateway routes requests through guardrail plugins, but identity-bound authorization was not found. [lasso-gh] |
| G2 Credential brokering (20) | 10 | 3 | Access is short-lived and task-scoped, and the agent never holds the tool's own credential. [nc-secure] | Token and secret masking hides credentials in traffic, but credential brokering was not found. [lasso-gh] |
| G3 Human approval and escalation (15) | 10 | 2 | Policies return allow, ask or deny; risky calls go to a named approver who confirms with device biometrics, and an agent can never approve its own action. [nc-govern] | No human approval step was found. [lasso-gh] |
| G4 Server registry and discovery (10) | 8 | 3 | A connection registry records each MCP server's endpoint, owner and environment, and agents are found through read-only integrations without relying on registration. [nc-secure][nc-discover] | Servers are configured in a local config file; a registry or discovery was not found. [lasso-gh] |
| G5 Audit evidence (10) | 9 | 5 | Tool calls, sessions and approvals sit in one audit trail with each call logged against its owner; a SIEM export was not named on the pages read. [nc-govern] | Detailed logs of requests and responses are kept for each guardrail. [lasso-gh] |
| G6 Standards (10) | 5 | 2 | MCP, SAML and OIDC are named; OAuth 2.1 and Enterprise-Managed Authorization are not named on the pages read. [nc-foundation] | No MCP authorization standards were named. [lasso-gh] |
| G7 Deployment and buying clarity (10) | 4 | 8 | Delivered as SaaS with no list price; an AWS Marketplace listing exists and no free tier or self-host option was found. [nc-aws] | Free under MIT; advanced guardrails use Lasso's API. [lasso-gh] |
| Total | 8.60 | 3.20 | Weighted sum divided by 100. | |
In short: NewCore totals 8.60 and Lasso totals 3.20 on our weighted rubric, a gap of 5.40 points. NewCore is ahead on per-call authorization, credential brokering, human approval, registry, audit and standards. Lasso is ahead on deployment. Choose by the criteria your agents depend on, then check deployment and pricing below.
Which one should I choose?
NewCore totals 8.60 against 3.20 for Lasso. The largest weighted difference is on per-call authorization. Lasso is ahead on deployment.
Pick NewCore if per-call authorization matters most to you.
It scores 10 against 2 there: every tool call passes through the gateway, which identifies the agent and the person behind it and checks the action against policy, keeping agents within that person's permissions.
Pick Lasso if deployment matters most to you.
It scores 8 against 4 there: free under MIT; advanced guardrails use Lasso's API.
How do deployment and pricing compare?
| Parameter | NewCore | Lasso |
|---|---|---|
| Deployment | SaaS. Works alongside an existing AI gateway, and the current identity platform keeps handling employee sign-in. | Self-hosted or local. |
| Price as published | No list price published. Listed on AWS Marketplace. | Free under MIT. |
| Identity provider | Yes. NewCore says to start alongside your identity platform, which keeps handling employee sign-in while NewCore governs agent access. | No identity provider integration was documented. |
Full datasheets: NewCore and Lasso Security MCP Gateway.
Frequently asked questions
- Which is better, NewCore or Lasso?
- On our rubric NewCore totals 8.60 against 3.20 for Lasso. The better choice depends on which criteria matter most to you.
- Do NewCore and Lasso work with my identity provider?
- NewCore: Yes. NewCore says to start alongside your identity platform, which keeps handling employee sign-in while NewCore governs agent access. Lasso: No identity provider integration was documented.
- How do NewCore and Lasso differ on price?
- NewCore: No list price published. Listed on AWS Marketplace. Lasso: Free under MIT.
By The Datasheet desk · Published and reviewed 2026-11-03