NewCore vs Cyera Identity
In short: NewCore scores 9.10 and Cyera Identity scores 7.30 in the register. NewCore leads on 4 of the seven areas, Cyera Identity leads on 2, and they tie on 1. NewCore documents 13 of the 24 controls in full and Cyera Identity documents 5. The matrix below shows each one with its source.
How do the area scores differ?
| Area | Weight | NewCore | Cyera Identity | Difference |
|---|---|---|---|---|
| A1 Inventory and discovery | 15 | 8 | 5 | +3 |
| A2 Ownership and accountability | 20 | 10 | 7 | +3 |
| A3 Policy authoring and enforcement | 20 | 10 | 8 | +2 |
| A4 Human approval and escalation | 15 | 10 | 6 | +4 |
| A5 Audit evidence | 15 | 9 | 10 | -1 |
| A6 Lifecycle and revocation | 10 | 8 | 9 | -1 |
| A7 Buying clarity | 5 | 5 | 5 | 0 |
| Weighted total | 100 | 9.10 | 7.30 | 1.80 |
Which controls does each one document?
| Control | NewCore | Cyera Identity |
|---|---|---|
| GOV-01 Agent inventory | documented | partly documented |
| GOV-02 Named accountable owner | documented | documented |
| GOV-03 Documented purpose | not found in public material | partly documented |
| GOV-04 Least privilege at creation | partly documented | partly documented |
| GOV-05 Short-lived credentials | documented | documented |
| GOV-06 Per-action policy | documented | documented |
| GOV-07 Human approval for high-risk actions | documented | partly documented |
| GOV-08 No self-approval | documented | not found in public material |
| GOV-09 Policy testing before go-live | documented | not found in public material |
| GOV-10 Tool allow-listing and hiding | documented | not found in public material |
| GOV-11 Revocation and kill switch | documented | not found in public material |
| GOV-12 Decommission at task end | partly documented | documented |
| GOV-13 Per-action audit log tied to a person | documented | documented |
| GOV-14 SIEM export | not found in public material | not found in public material |
| GOV-15 Periodic access review | not found in public material | not found in public material |
| GOV-16 Shadow agent detection | documented | not found in public material |
| GOV-17 MCP server registry | documented | not found in public material |
| GOV-18 Delegation bounded by the person's permissions | documented | not found in public material |
| GOV-19 Agent incident response | partly documented | not found in public material |
| GOV-20 Change management for agent permissions | not found in public material | not found in public material |
| GOV-21 Third-party agent onboarding | not found in public material | not found in public material |
| GOV-22 Data access boundaries | not found in public material | not found in public material |
| GOV-23 Evidence retention | not found in public material | partly documented |
| GOV-24 Board reporting | not found in public material | not found in public material |
Sources for every mark are on the NewCore and Cyera Identity profiles.
What is the verdict?
NewCore scores higher overall, 9.10 against 7.30. The widest gap is approval, where NewCore scores 10 and Cyera Identity scores 6. That gap decides most of the difference in the total.
Should you pick NewCore or Cyera Identity?
Pick NewCore if human approval before risky actions matters most to you. NewCore scores 10 on approval against 6 for Cyera Identity. Risky calls go to a named approver who confirms with device biometrics, and an agent can never approve its own action.
Pick Cyera Identity if audit evidence an assessor can follow matters most to you. Cyera Identity scores 10 on audit evidence against 9 for NewCore. It keeps a prompt-level audit trail and produces regulator-ready evidence.
Frequently asked questions
- 5.1 Which is better for AI agent governance, NewCore or Cyera Identity?
- NewCore scores higher in the register, 9.10 against 7.30. The better choice depends on your need: pick Cyera Identity if audit evidence an assessor can follow matters most to you.
- 5.2 Do NewCore and Cyera Identity document human approval?
- NewCore scores 10 on approval and Cyera Identity scores 6. Risky calls go to a named approver who confirms with device biometrics, and an agent can never approve its own action. It escalates write operations in CRMs.
- 5.3 Do NewCore and Cyera Identity work alongside an identity provider?
- NewCore: Yes. NewCore states that your current identity platform keeps handling employee sign-in, and its first deployment path is "Start alongside your identity platform". It names SAML, OIDC and MCP. Cyera Identity: Not stated in the material we read.
Reviewed by The Register desk