SettleTopRegistry
← Back to the registry
Agent passport

ShadowPlex Preemptive Cyberdefense

Deception guardrails for agentic AI

Category
Agent Tools
Registry category
Cybersecurity & IT
Vendor
Acalvio Technologies, Inc.
Location
Santa Clara, California, United States of America
Reviews
This marketplace has no ratings
Listed on
Google Cloud Marketplace
Pricing
1 plan listed
Overall Provenance
3.1/10Moderate
High 7–10Moderate 3–6.9Low 0–2.9

Each fact carries one Provenance score: the average of its Disclosure and Evidence scores, the same rule the page uses for the overall score. Click any score to see the math behind it.

Vendor Provenance

Who actually operates this agent.

7.2 / 10
Data element
Answer
Provenance
Source
Legal entity
Acalvio Technologies, Inc.
Matched on acalvio.com, found in the publisher's marketplace links
High
BigPicture company data (acalvio.com), fetched 2026-09-20
HQ address
Santa Clara, California, United States of America
From outside company data
High
BigPicture company data (acalvio.com), fetched 2026-09-20
Ownership
Privately held company
From outside company data
High
BigPicture company data (acalvio.com), fetched 2026-09-20
Industry
Software & Computer Services
Sector Technology
High
BigPicture company data (acalvio.com), fetched 2026-09-20
Employee count
51-200 employees
From outside company data
High
BigPicture company data (acalvio.com), fetched 2026-09-20
Founded
2015
From outside company data
High
BigPicture company data (acalvio.com), fetched 2026-09-20
Revenue
$10M-$50M estimated annual revenue
Estimate; not from filings
High
BigPicture company data (acalvio.com), fetched 2026-09-20
About
Deception guardrails for agentic AI
Publisher description
High

Build Provenance

What the agent is built on.

1.4 / 10
Data element
Answer
Provenance
Source
Foundation model
Not disclosed on this listing
Low
No source on record
Training data (model)
Not disclosed on this listing
No source discloses model training data
Low
No source on record
Agent framework / tools
Not disclosed on this listing
Low
No source on record
Hosting model
AI Agent as a Service, hosted by the vendor
From the listing
High
Version history
Not disclosed on this listing
Registry saw 2 distinct listing states across 3 captures
Low
No source on record

Reach Provenance

How the agent is distributed and adopted.

4.4 / 10
Data element
Answer
Provenance
Source
Distribution channel(s)
Google Cloud Marketplace
Via AI Agent as a Service
High
Review volume & rating
Not available
This marketplace has no rating mechanism
Low
No source on record
Comments (pros)
Not available
No review text on record, so no pros could be drawn from user comments
—
No source on record
Comments (cons)
Not available
No review text on record, so no cons could be drawn from user comments
—
No source on record
Listing tenure
Not disclosed
No first published date on the listing
—
No source on record
Multi-channel presence
Single-channel
Listed on Google Cloud Marketplace only in the registry
High
Public community signal
Not disclosed
No public GitHub, Discord or community metrics found
Low
No source on record
# installs
Not reported
No install count on any marketplace
—
No source on record
Listing type
AI Agent as a Service
From the listing
High

Data Provenance

What the vendor discloses about data handling.

1.4 / 10
Data element
Answer
Provenance
Source
Operational data sources
Not disclosed
Low
No source on record
Data residency
Not disclosed
Low
No source on record
Retention & deletion
Not disclosed
Low
No source on record
Published documentation
Documentation and support links on the listing
Links on the listing; documents not fetched by the registry
High
Data access requirements
Not explicitly disclosed
No OAuth scope or permission list found on the listing
Low
No source on record

Compliance Provenance

What standards the vendor meets, and who verified them.

1.3 / 10
Data element
Answer
Provenance
Source
Security
SOC 2
None on record
Low
No source on record
ISO/IEC 27001
None on record
Low
No source on record
ISO/IEC 27002
None on record
—
No source on record
ISO/IEC 27017
None on record
—
No source on record
SOC 3
None on record
—
No source on record
CSA STAR
None on record
—
No source on record
Privacy
GDPR
None on record
Low
No source on record
COPPA
None on record
—
No source on record
FERPA
None on record
—
No source on record
ISO/IEC 27018
None on record
—
No source on record
Health
HIPAA
None on record
Low
No source on record
HITRUST CSF
None on record
—
No source on record
Financial
SOC 1
None on record
—
No source on record
PCI DSS
None on record
—
No source on record
SOX
None on record
—
No source on record
Government
FedRAMP
None on record
Low
No source on record
CMMC
None on record
Low
No source on record
NIST SP 800-171
None on record
—
No source on record
AI
NIST AI RMF
None on record
Low
No source on record
Platform
3rd party certification
Google Cloud Marketplace validated: A2A, Gemini Enterprise
Google marketplace validation badge; a compatibility check, not a security audit
High

What the publisher says

The ShadowPlex Preemptive Cyberdefense AI agent is a multi-agent system that provides access to multiple ShadowPlex products and services directly from Gemini Enterprise. Each sub-agent is a specialist that handles a specific domain of preemptive defense, orchestrated by a root agent, interprets the user's goal and routes to the right capability..

ShadowPlex Deception Guardrails Agent

AI agents represent a new class of attack surface. Agentic attacks propagate at machine speed, making it challenging for cyber defense. Deception guardrails deploy a strategic combination of decoys and honeytokens to detect malicious use of agents and slow down agentic threats. The deception guardrails agent deploys deceptions across the network, identity stores, endpoints, and cloud workloads, and integrates with Google Gemini Agent Platform to generate the deception playbooks that operationalize the deception strategy.

Show the rest of the publisher’s description (12 more lines)

ShadowPlex Cloud Security (SCS) Agent

This sub-agent provides preemptive security to disrupt agentic AI attacks by setting deceptive traps in GCP. The agent performs:

  • Automated discovery of GCP assets through integration with the Wiz MCP server
  • Automated recommendations of honeytokens through integration with Gemini Agent Platform
  • Automated deployment and refresh across GCP projects

Honeytokens represent IAM service accounts and corresponding access keys and credentials. Honeytokens control the AI agent's reality, disrupting the agent from its mission. High-fidelity alerts are raised and sent to GCP Security Command Center (SCC) and Google SecOps, with automated response workflows to isolate the malicious agent.

Key Use Cases

  • Disrupt agentic AI attacks - Set traps for malicious activity from AI agents at the reconnaissance phase, triggering automated responses to safeguard GCP assets.
  • Defend against AI misalignment - AI misalignment represents one of the primary risks to AI safety. Identify and stop AI misalignment through strategically placed traps.
  • Early threat detection of cloud attacks - Detect living off the cloud attacks that are stealthy and bypass traditional security controls with precision, providing visibility to security teams.
  • Secure identities (human and machine identities) - Attackers target IAM service accounts to elevate privileges. Defenders deflect threats by placing traps representing deceptive service accounts, protecting the real accounts.
  • Active threat hunting for hypothesis confirmation - Attackers are stealthy, often remaining dormant to find a suitable opportunity. Threat hunting teams place deceptions to elicit malicious activity, confirming latent threats.

Plans and pricing

1 plan listed

Flat fee—

Linked repositories

Unknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed.

Publisher resources

Sources

Reading the score

Disclosure · how many sources corroborate it

NoneNo source has it. Shown red, because Unknown means Unknown.
1 sourceA single place has it. A listing and its certification page and policy docs on one marketplace count as one source.
2+ contestedTwo or more sources cover it but they do not agree. The disagreement is shown, never dropped.
2+ agreeingTwo or more genuinely separate sources agree: another marketplace, or an outside record.
Steps below are possible but not automated yet, so today they sit open.
SettleTop confirmedSettleTop confirms it directly.

Evidence · what kind of evidence backs it

NoneNo source discloses it.
PublicPublicly available info, such as reviews, listing age, or vendor firmographics like legal entity and headquarters.
Vendor statedThe vendor's own claim on its marketplace listing, website, or policy documents.
Self-attestedThe vendor's self-attested certification or operator program, a marketplace program rather than an independent audit.
Steps below are possible but not automated yet, so today they sit open.
Vendor providedThe vendor hands SettleTop the underlying material, such as an SBOM or a data policy.
Vendor attestedThe vendor signs an attestation to SettleTop.
SettleTop verifiedSettleTop verifies it directly.

The SettleTop steps above are possible but not automated yet, so today they sit open and a perfect 10 is out of reach. Open information like firmographics and reach has fewer steps to climb, so it sits a little higher for the same visible evidence.

Information shown here reflects the best available information at the time of assessment and may be incomplete, outdated, or subject to change. It should be independently verified before being relied upon for any decision. SettleTop is not liable for any errors, omissions, or decisions made in reliance on this information.

Have information about this agent?

Send it to us for consideration

Spot something missing, wrong, or out of date? Share what you know. Every note reaches our team. It does not change the passport by itself: we review it first.

Name

Suggest specific values (optional)
Vendor Provenance

Build Provenance

Reach Provenance

Data Provenance

Compliance Provenance

A note to our team, not a change to the page. Prefer email? Write to support@settletop.com.