Vetted AI Agents in 2026: 16 Vendors That Pass the Bar, Vetting Criteria Published

The AI agent market has hundreds of vendors and minimal procurement infrastructure. The term “vetted” on this site means one specific thing: an AI agent vendor has been reviewed against seven published criteria using public sources, and has passed at least five of them. We are not a certified compliance auditor. We do not test agents in production. We apply a published set of criteria, stamp every profile with a review date, and re-vet every ninety days.

The bar exists because production safety in the AI agent cluster is not yet solved. Gravitee’s State of AI Agent Security 2026 survey of more than 900 executives and practitioners found that 88% of organisations had confirmed or suspected an AI agent security incident in the prior year. Red-team research through 2026 has shown that agents under adversarial conditions can be induced to take destructive actions and to disclose personally identifiable information through indirect prompt injection channels. A procurement bar that starts with SOC 2 Type II and ISO 42001 is not paranoia; it is a minimum for a board-defensible vendor shortlist.

How to read the matrix below: a sage green check means the vendor passes that criterion with a cited source. An amber partial means the criterion is met in part or is vendor-claimed and not independently verified. A red cross means the criterion is not met as of the last review date. Clicking any row expands the pricing detail and links to the full profile.