What Runlayer is
Governance capabilities for MCP servers, skills, and AI agents with threat detection, fine-grained permissions, and full observability. The vendor site is www.runlayer.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Runlayer covers
Runlayer is in the catalog for these capabilities. Categories: AI Security, Endpoint Management, and Agentic Development Security. Technologies covered: AI. Catalog tags: Hot Right Now and Trending.
How to evaluate Runlayer in a security program
Use Runlayer as a stack candidate, not as diligence evidence. The oneNorma score for Runlayer is 5/10 (percentile 46). If the real gap is in AI Security, Endpoint Management, and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.runlayer.com publishes. Contrast it with pentesting and Security Cloud & Compliance.