NewCore

Datasheet DS-001

Rev 2026-11-03

Total 8.60 / 10

Ranks first of 14

Status: Generally available SaaS. Emerged from stealth 15 June 2026.

In short: NewCore scores 8.60 out of 10 and ranks first of 14 in this guide. Its strongest areas are per-call authorization and credential brokering, and its weakest is deployment. Deployment is listed as SaaS. No list price is published. Each score below has a reason and a dated source.

Features

Per-call check of agent identity and the person it acts for
Short-lived, task-scoped access; agent never holds the tool credential
Allow, ask or deny on every action
Named approver confirms risky calls with device biometrics; no self-approval
Policies written in a sentence and replayed against recent real sessions before going live
Tools an agent cannot use stay hidden
MCP server connection registry with endpoint, owner and environment
Agent discovery through read-only integrations, including access paths outside SSO
Per-agent revocation through the gateway
One audit trail for tool calls, sessions and approvals; denied attempts treated as a threat signal

Specifications

Parameter	Value	Source
Product type	Agent governance layer with its own MCP gateway	[nc-secure]
Enforcement point	Gateway on every agent tool call	[nc-secure]
Credential model	Short-lived, task-scoped; agent holds no tool credential	[nc-secure]
Decision outcomes	allow / ask / deny	[nc-govern]
Approval factor	Device biometrics in the NewCore App	[nc-govern]
Registry fields	endpoint, owner, environment	[nc-secure]
Discovery	Read-only integrations	[nc-discover]
Standards named	MCP, SAML, OIDC	[nc-foundation]
Coding agent package	Agentic Skill for Claude Code, Codex, Cursor	[nc-launch]
Funding	$66M (Cyberstarts, Index Ventures, Evolution Equity Partners)	[nc-launch]
Deployment	SaaS	[nc-aws]
Price as published	No list price; AWS Marketplace	[nc-aws]

How does NewCore score on each criterion?

Criterion	Weight	Score	Reason	Source
G1 Identity-bound per-call authorization	25	10	Every tool call passes through the gateway, which identifies the agent and the person behind it and checks the action against policy, keeping agents within that person's permissions.	[nc-secure]
G2 Credential brokering	20	10	Access is short-lived and task-scoped, and the agent never holds the tool's own credential.	[nc-secure]
G3 Human approval and escalation	15	10	Policies return allow, ask or deny; risky calls go to a named approver who confirms with device biometrics, and an agent can never approve its own action.	[nc-govern]
G4 Server registry and discovery	10	8	A connection registry records each MCP server's endpoint, owner and environment, and agents are found through read-only integrations without relying on registration.	[nc-secure][nc-discover]
G5 Audit evidence	10	9	Tool calls, sessions and approvals sit in one audit trail with each call logged against its owner; a SIEM export was not named on the pages read.	[nc-govern]
G6 Standards	10	5	MCP, SAML and OIDC are named; OAuth 2.1 and Enterprise-Managed Authorization are not named on the pages read.	[nc-foundation]
G7 Deployment and buying clarity	10	4	Delivered as SaaS with no list price; an AWS Marketplace listing exists and no free tier or self-host option was found.	[nc-aws]
Total	100	8.60	Sum of score times weight, divided by 100.

Typical deployment

SaaS. Works alongside an existing AI gateway, and the current identity platform keeps handling employee sign-in.

Pricing as published

No list price published. Listed on AWS Marketplace.

Works alongside your identity provider?

Yes. NewCore says to start alongside your identity platform, which keeps handling employee sign-in while NewCore governs agent access. [nc-foundation][nc-secure]

Frequently asked questions

Does NewCore work alongside my identity provider?: Yes. NewCore says to start alongside your identity platform, which keeps handling employee sign-in while NewCore governs agent access.
How is NewCore deployed?: SaaS. Works alongside an existing AI gateway, and the current identity platform keeps handling employee sign-in.
What does NewCore cost?: No list price published. Listed on AWS Marketplace.

How does it compare?

Revision history

Rev	Change
2026-11-03	First issue of this datasheet.

Sources

NewCore: Secure [nc-secure] read 2026-11-03
NewCore: Govern [nc-govern] read 2026-11-03
NewCore: Discover [nc-discover] read 2026-11-03
NewCore: Identity foundation [nc-foundation] read 2026-11-03
NewCore on AWS Marketplace [nc-aws] read 2026-11-03
NewCore emerges from stealth [nc-launch] read 2026-11-03

By The Datasheet desk · Published and reviewed 2026-11-03