NewCore vs Silverfort
In short: NewCore scores 9.10 and Silverfort scores 8.35 in the register. NewCore leads on 4 of the seven areas, Silverfort leads on 2, and they tie on 1. NewCore documents 13 of the 24 controls in full and Silverfort documents 6. The matrix below shows each one with its source.
How do the area scores differ?
| Area | Weight | NewCore | Silverfort | Difference |
|---|---|---|---|---|
| A1 Inventory and discovery | 15 | 8 | 9 | -1 |
| A2 Ownership and accountability | 20 | 10 | 9 | +1 |
| A3 Policy authoring and enforcement | 20 | 10 | 8 | +2 |
| A4 Human approval and escalation | 15 | 10 | 9 | +1 |
| A5 Audit evidence | 15 | 9 | 9 | 0 |
| A6 Lifecycle and revocation | 10 | 8 | 6 | +2 |
| A7 Buying clarity | 5 | 5 | 6 | -1 |
| Weighted total | 100 | 9.10 | 8.35 | 0.75 |
Which controls does each one document?
| Control | NewCore | Silverfort |
|---|---|---|
| GOV-01 Agent inventory | documented | documented |
| GOV-02 Named accountable owner | documented | documented |
| GOV-03 Documented purpose | not found in public material | not found in public material |
| GOV-04 Least privilege at creation | partly documented | not found in public material |
| GOV-05 Short-lived credentials | documented | partly documented |
| GOV-06 Per-action policy | documented | documented |
| GOV-07 Human approval for high-risk actions | documented | documented |
| GOV-08 No self-approval | documented | not found in public material |
| GOV-09 Policy testing before go-live | documented | not found in public material |
| GOV-10 Tool allow-listing and hiding | documented | not found in public material |
| GOV-11 Revocation and kill switch | documented | not found in public material |
| GOV-12 Decommission at task end | partly documented | not found in public material |
| GOV-13 Per-action audit log tied to a person | documented | documented |
| GOV-14 SIEM export | not found in public material | not found in public material |
| GOV-15 Periodic access review | not found in public material | not found in public material |
| GOV-16 Shadow agent detection | documented | documented |
| GOV-17 MCP server registry | documented | partly documented |
| GOV-18 Delegation bounded by the person's permissions | documented | not found in public material |
| GOV-19 Agent incident response | partly documented | not found in public material |
| GOV-20 Change management for agent permissions | not found in public material | not found in public material |
| GOV-21 Third-party agent onboarding | not found in public material | not found in public material |
| GOV-22 Data access boundaries | not found in public material | not found in public material |
| GOV-23 Evidence retention | not found in public material | not found in public material |
| GOV-24 Board reporting | not found in public material | not found in public material |
Sources for every mark are on the NewCore and Silverfort profiles.
What is the verdict?
NewCore scores higher overall, 9.10 against 8.35. The widest gap is policy, where NewCore scores 10 and Silverfort scores 8. That gap decides most of the difference in the total.
Should you pick NewCore or Silverfort?
Pick NewCore if one policy engine that checks each action matters most to you. NewCore scores 10 on policy against 8 for Silverfort. One policy engine covers people and agents, with allow, ask or deny, and policies are replayed against recent real sessions before going live.
Pick Silverfort if finding every agent, including unregistered ones, matters most to you. Silverfort scores 9 on inventory against 8 for NewCore. It discovers sanctioned and rogue agents across identity providers, clouds and SaaS through read-only APIs.
Frequently asked questions
- 5.1 Which is better for AI agent governance, NewCore or Silverfort?
- NewCore scores higher in the register, 9.10 against 8.35. The better choice depends on your need: pick Silverfort if finding every agent, including unregistered ones, matters most to you.
- 5.2 Do NewCore and Silverfort document human approval?
- NewCore scores 10 on approval and Silverfort scores 9. Risky calls go to a named approver who confirms with device biometrics, and an agent can never approve its own action. It requires approvals before sensitive tool actions.
- 5.3 Do NewCore and Silverfort work alongside an identity provider?
- NewCore: Yes. NewCore states that your current identity platform keeps handling employee sign-in, and its first deployment path is "Start alongside your identity platform". It names SAML, OIDC and MCP. Silverfort: Yes in practice. Silverfort discovers agents across identity providers such as Entra ID and Okta through read-only APIs, so it reads from the provider you run.
Reviewed by The Register desk