What Surf AI is
Agentic security operations platform that uses AI agents over a unified context graph to find and remediate exposures like dormant accounts, expired certificates, and misconfigurations. The vendor site is www.surf.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Surf AI covers
Surf AI is in the catalog for these capabilities. Categories: Agent Builders. Technologies covered: Cloud and Applications.
How to evaluate Surf AI in a security program
Use Surf AI as a stack candidate, not as diligence evidence. The oneNorma score for Surf AI is 5.5/10 (percentile 65). If the real gap is in Agent Builders, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.surf.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.