CISO Tribune

Vendor comparison · 2 companies

NewCore vs Sonrai

NewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people. Sonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • NewCore
  • Sonrai
NewCore vs Sonrai: Products, Customers and Funding Compared
NewCoreNewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people.newcore.ioSonraiSonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms.sonraisecurity.com
What it sells
  • Discover[1][2]Maps people and AI agents into one identity graph across identity vendors, showing every agent, its owner and what it can reach.
  • Secure[1][2]Issues short-lived, task-scoped access for agents bounded by the permissions of the person the agent acts for, removing standing credentials.
  • Govern[1][2]Checks every agent action against a policy engine that can allow, ask or deny, letting access be revoked from one place with ownership recorded.
  • Identity Foundation[1][2]Combines human and agent identity management under shared policies, including phishing-resistant sign-in and a Secure Split Key capability.
  • Cloud Permissions Firewall[2][3][4][6][8]Removes dangerous permissions and blocks unused privileges, services, and regions with automated global policies.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Sonrai sells mainly to enterprises of all sizes that run on AWS, Azure, and Google Cloud platforms. Deployment is described as covering agents, humans, and machines. Banks in the US and Canada use Sonrai to secure their cloud, alongside customers from other highly regulated industries. The customers described include a financial services company providing insurance, investment, and wealth management products and services. The customers described include a global fuel provider. One described customer operating model bridges operations between cloud, security, audit, and DevOps teams.
Last verified
October 29, 2026September 27, 2026

Where they overlap

  • NewCore and Sonrai are both filed under Non-human identity security.

Where they differ, field by field

  • NewCore's primary category is Non-human identity security; Sonrai's is Cloud identity entitlements (CIEM).
  • NewCore is also filed under Workforce IAM and SSO. Sonrai is also filed under Cloud security posture management.
  • NewCore lists Discover, Secure, Govern and Identity Foundation. Sonrai lists Cloud Permissions Firewall.

What it sells: Sonrai

What Cloud Permissions Firewall does[2][3][4][6][8]
The Cloud Permissions Firewall removes dangerous permissions before an attack can use them. Policies are built from usage data, and anything in use is exempted before a policy is written.

Questions about NewCore and Sonrai

What do NewCore and Sonrai sell?
NewCore sells Discover, Secure, Govern and Identity Foundation. Sonrai sells Cloud Permissions Firewall.
Are NewCore and Sonrai in the same category?
They share Non-human identity security. NewCore's primary category is Non-human identity security and Sonrai's is Cloud identity entitlements (CIEM).
Who are NewCore and Sonrai sold to?
From its own pages, Sonrai sells mainly to enterprises of all sizes that run on AWS, Azure, and Google Cloud platforms.

About NewCore

NewCore sells an identity platform for governing access by AI agents, with Discover, Secure and Govern capabilities and an option that also manages people.

NewCore describes the problem this way: identity was built for people who sign in, and a blended workforce of people and AI agents now acts across the business, with no clear ownership of what those agents do. The company says most teams still cannot answer three questions: where the AI agents are, what they can connect to and how, and how to control what they do.[2]

For the first question, NewCore says it maps people and AI agents in one identity graph across every identity vendor a customer runs. The stated aim is to find every agent, who owns it and what it can reach.[1][2]

For the second question, NewCore describes short-lived, task-scoped access, bounded by the permissions of the person the agent acts for. NewCore states that agents hold no standing credentials.[1][2]

For the third question, NewCore says every agent action is checked against one policy engine that returns allow, ask or deny. Access can be revoked from one place, and every decision is tied to an owner.[1][2]

NewCore describes a unified identity plane in which humans and AI agents authenticate, get authorized, are secured and are governed as they reach enterprise apps and systems. Every action is recorded in an audit trail. NewCore says every approved request receives just-in-time, per-action access.[2]

NewCore offers two ways to start. In the first, customers discover, secure and govern their AI agents while the current identity platform keeps handling employee sign-in. That route begins with a read-only connection, and NewCore says nothing has to be migrated. In the second, customers upgrade to one identity platform that manages people and agents together with shared policies and clear ownership. That option includes phishing-resistant sign-in and Secure Split Key for people.[1][2]

NewCore on the record

Sources

NewCore full record

  1. [1]newcore.ioNewCore · newcore.io · undated page, accessed October 29, 2026 · Tier A
  2. [2]The Agentic Identity Company | NewCoreNewCore · undated page, accessed November 5, 2026 · Tier A

Sonrai full record

  1. [1]sonraisecurity.comSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Cloud permissions firewallSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cloud Identity and Access Management IAM Solution Platform - SonraiSonrai · undated page, accessed October 28, 2026 · Tier A
  4. [4]Customer Product Email Subscription | SonraiSonrai · undated page, accessed October 28, 2026 · Tier A
  5. [5]Sonrai Security Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
  6. [6]Sonrai Company Story - Enterprise IAM & PAM Cloud SecuritySonrai · undated page, accessed November 10, 2026 · Tier A
  7. [7]Why Choose Sonrai for Cloud Security & Identiy Access Management - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A
  8. [8]Cloud IAM & PAM Pricing | Sonrai Security - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A
  9. [9]Case Study: Fortune 100 Insurance CompanySonrai · undated page, accessed November 10, 2026 · Tier A
  10. [10]Case Study: World Fuel ServicesSonrai · undated page, accessed November 10, 2026 · Tier A
  11. [11]Case Study: Top 5 Canadian Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A
  12. [12]Case Study: Top 10 US Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.