Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Safe Marketplace -
AIR marketplace is the enterprise marketplace for AI add-ons, where every MCP server, skill, plugin, sub-agent, command, and hook is continuously vetted to ensure it is safe, trusted, and enterprise-ready before adoption.
Show the rest of the publisher’s description (4 more lines)
Governance & Runtime Protection -
AIR provide with full visibility, runtime policy enforcement and revocation capabilities every AI add-on installed in your environment, ensuring AI operates safely across the enterprise.
Secure Enterprise Repository -
AIR creates a centralized repository of trusted internal and external AI add-ons, providing a single source of truth where teams can securely create, share, reuse, and standardize AI add-ons across the enterprise.
Highlights
Highlighted by the publisher on AWS Marketplace.
Unlike traditional scanners, the AIR Scanner performs comprehensive analysis across all known agentic attack patterns and add-on vulnerabilities, including often-overlooked risks such as external instruction sources, hidden add-on behaviors, and indirect execution paths.
The AIR Scanner can assess both third-party add-ons downloaded from public sources and internally developed add-ons created within your organization, providing a consistent security standard across your entire agent ecosystem.
The AIR Scanner logic is updated daily to stay ahead of the rapidly evolving agentic threat landscape. Add-ons are continuously rescanned to cover newly released versions, ensuring detections remain accurate and organizations maintain a secure posture in dynamic AI environments.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
1 listed- Units
Refund terms
As stated by the publisher on AWS Marketplace.
No refunds
Sources
Linked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.