Agent governance
Every AI agent you run.
One register.
Your organization is deploying agents through Copilot Studio, AgentForce, vendor tools and internal builds. The list of them is a spreadsheet, the risk rating is a judgement call, and the board report takes two days to assemble. AgentGuru replaces all three.
Built for CISOs, heads of risk and AI leads at 200–2,000-person organizations.
The four questions you cannot answer today
“Show me every agent we run, who owns it, and what it can touch.”
“Tell me which ones are risky, using a method I can defend to an auditor.”
“Stop new agents going live without the right approvals.”
“Give me the board slide without a two-day scramble.”
Inventory to board report, in one system
Each stage feeds the next. The register is the source; nothing is re-keyed.
Inventory
Import the spreadsheet. Every agent, owner and system in one list.
Risk score
Five weighted dimensions, one composite, a tier you can defend.
Approval
Tier routes the gates. Every decision is dated and attributable.
Evidence
DPIAs, pen tests, kill-switch tests — attached, typed and dated.
Board report
The quarterly pack, generated from the register rather than assembled.
A risk score with a method behind it
Five dimensions, each scored 1–5 against a written descriptor, weighted into a composite of 5–25. A score of 4 or 5 on any dimension requires a rationale on the record. The weights are fixed, so two agents scored a year apart are comparable — and so is your register against anyone else’s.
Data access scope
25%What the agent can read, and how sensitive it is.
Autonomy level
25%How much it does without a human approving the step.
Blast radius
20%How far a bad action travels before someone catches it.
Reversibility
15%Whether the action can be undone, and how quickly.
Regulatory exposure
15%Which obligations attach to what it touches.
Tier sets the review cadence and the approval path automatically.
Start with the spreadsheet you already have
Import it, map the columns, and the register tells you how many of your agents have never been assessed. That is usually the first uncomfortable number.
Sign in to your register