{
  "schema_version": "1.1.0",
  "reviewed_at": "2026-10-16",
  "name": "Kosmoy",
  "website": "https://www.kosmoy.com/",
  "summary": "Kosmoy is an enterprise AI control plane: one platform to inventory, monitor, govern and contain the AI systems, models, agents and MCP servers a large organization runs.",
  "built_for": "Organizations with more than 3,000 employees, especially in regulated sectors such as banking, insurance, healthcare, defense, manufacturing and utilities.",
  "deployment": "Self-hosted only. Kosmoy runs single-tenant in the customer's own Kubernetes on Azure, AWS, Google Cloud, on-premises or fully air-gapped. Prompts, responses and logs never pass through a Kosmoy-hosted service.",
  "named_customers": [
    {
      "name": "Banca d'Italia",
      "description": "Italy's central bank and banking regulator",
      "source": "https://www.kosmoy.com/company/"
    },
    {
      "name": "Leonardo",
      "description": "the defense and aerospace group",
      "source": "https://www.kosmoy.com/company/"
    }
  ],
  "pricing": "No list price and no self-service plan. Each proposal states the modules, governed workloads, deployment boundary, implementation and support. Model-provider and cloud consumption stay a separate cost under the customer's own contracts.",
  "headquarters": "Milan, Italy",
  "offices": [
    "New York",
    "Buenos Aires",
    "Belgrade",
    "Dubai",
    "Singapore"
  ],
  "facts": [
    {
      "id": "inventory",
      "title": "AI Inventory",
      "claim": "Five connected registries for use cases, AI systems, models, agents and MCP servers. Each record has an owner, a lifecycle state and a risk tier. An EU AI Act risk classification module sits on top of the registries.",
      "boundary": "Automatic discovery covers connected platforms. Other systems are registered by the teams that build or buy them, and labeled as manual records.",
      "source": "https://www.kosmoy.com/platform/ai-inventory/"
    },
    {
      "id": "agent-registry",
      "title": "Agents Master Registry",
      "claim": "Connectors pull agents from Azure AI Foundry, AWS Bedrock, Google Vertex AI, Salesforce and ServiceNow into one master list, match each agent to an approved use case and flag unmatched agents as shadow AI.",
      "boundary": "A registry entry records an agent; it does not by itself enforce tool permissions or contain the agent.",
      "source": "https://www.kosmoy.com/platform/agents-master-registry/"
    },
    {
      "id": "gateway",
      "title": "AI Gateway",
      "claim": "One policy point for LLM, MCP and agent-to-agent (A2A) traffic: authentication, role-based access, guardrails for PII, toxicity and prompt injection, routing, budgets and logging. The LLM Gateway exposes one OpenAI-compatible API across providers including OpenAI, Anthropic, Google, Mistral, Meta, Azure, AWS and on-premises models.",
      "boundary": "Policies apply to calls routed through the gateway. Calls that bypass it are outside its control.",
      "source": "https://www.kosmoy.com/platform/ai-gateway/"
    },
    {
      "id": "governance",
      "title": "AI Governance",
      "claim": "Links each AI system's owner, approval, risk rationale and policies to the gateway events and evaluation results that show what actually ran.",
      "boundary": "Works alongside an existing GRC or privacy program, which can remain the system of record for those processes.",
      "source": "https://www.kosmoy.com/platform/ai-governance/"
    },
    {
      "id": "finops",
      "title": "AI FinOps",
      "claim": "Attributes every routed call to provider, model, application, team, user and agent, and enforces budgets that warn and then block at the gateway.",
      "boundary": "This is request-path control, not invoice reconciliation. Calls outside the gateway are not capped.",
      "source": "https://www.kosmoy.com/platform/ai-finops/"
    },
    {
      "id": "observability",
      "title": "AI Observability",
      "claim": "Traces across providers with retrieval steps, tool calls, agent hops, guardrail decisions, latency, cost and evaluation results, stored in the customer's own infrastructure.",
      "boundary": "Detail for agents on external platforms depends on the telemetry those platforms expose.",
      "source": "https://www.kosmoy.com/platform/ai-observability/"
    },
    {
      "id": "evaluation",
      "title": "AI Evaluation and Red Teaming",
      "claim": "20 evaluators across task completion, tool use, quality, groundedness, reference match and safety. Offline, online and red-team runs, including escalating multi-turn attacks aligned to the OWASP LLM Top 10.",
      "boundary": "Evaluation finds failures. Enforcing a fix still needs the gateway or an Action Capsule.",
      "source": "https://www.kosmoy.com/platform/ai-evaluation/"
    },
    {
      "id": "containment",
      "title": "Action Capsule",
      "claim": "A contained runtime for AI agents and internal MCP servers, with just-in-time credentials, compute limits, egress only through the paired gateway and a live kill switch from Mission Control.",
      "boundary": "Only agents deployed in a capsule are contained. Registering an external agent does not contain it.",
      "source": "https://www.kosmoy.com/platform/action-capsule/"
    },
    {
      "id": "compliance",
      "title": "AI Compliance",
      "claim": "Maps one operational record to the EU AI Act, ISO/IEC 42001 and NIST AI RMF, with evidence exports per framework and a five-step EU AI Act risk classification.",
      "boundary": "Legal interpretation, risk acceptance and final approval stay human decisions. An export is evidence, not a certification.",
      "source": "https://www.kosmoy.com/platform/ai-compliance/"
    }
  ],
  "evidence": [
    {
      "url": "https://www.kosmoy.com/resources/walkthroughs/red-team-evidence/",
      "title": "Reproducible red-team evidence report",
      "limitation": "Synthetic, authored examples; not measured customer or product performance."
    },
    {
      "url": "https://www.kosmoy.com/resources/walkthroughs/enterprise-ai-controls/",
      "title": "Agent inventory and policy walkthrough",
      "limitation": "Synthetic teaching format; not a Kosmoy API, live integration or production enforcement."
    }
  ],
  "contact": "https://www.kosmoy.com/demo/"
}