Codenotary, known for software supply chain security, has launched two platforms targeting the operational gap in enterprise AI agent deployments. AgentMon provides real-time behavioral observability for multi-agent systems, tracking decision chains, data access patterns, and token consumption. AgentX automates security remediation across Linux infrastructure at fleet scale, applying verified, reversible fixes without manual intervention. The company announced 37 new enterprise customers in six months, including Kroger, Rakuten, and Swiss Life, according to BusinessWire.
What AgentMon Does Differently
Traditional APM tools track requests, responses, and infrastructure metrics. They were not built to follow the decision chains of autonomous agents coordinating across asynchronous loops. AgentMon monitors agent interaction paths, model selection and inference latency, file access and secrets handling, and data access patterns that may indicate leakage or policy violations, according to SecurityBrief.
“Agentic networks are growing explosively, and with that growth come entirely new categories of risk,” Dennis Zimmer, Codenotary co-founder and CTO, told SecurityBrief. “Organisations are now asking critical questions: Are agents leaking sensitive data? How much are they costing us? Are they performing as expected?”
The product correlates token telemetry, behavioral baselines, and data lineage to present agents as a distributed network rather than isolated tools. Codenotary cited BCG’s forecast that the AI agent market will grow at a compound annual rate of 45% over the next five years, per SecurityBrief.
AgentX: Reversible Remediation at Scale
AgentX addresses a different operational pressure: vulnerability management backlogs that grow faster than security teams can remediate manually. The platform continuously identifies vulnerabilities and misconfigurations across Linux-based infrastructure and applies reversible fixes in real time, according to BusinessWire.
Codenotary now secures an average of 240 compute instances per customer. The reversibility design addresses the core objection to security automation in production: the risk that automated changes cause outages. Making every fix reversible by default reflects how change management actually works in large organizations, where rollback capability determines adoption.
Defense and Government Traction
The strongest customer growth came from defense and government sectors, which impose the strictest auditability and chain-of-custody requirements in the market, per BusinessWire. Winning there validates Codenotary’s immutable ledger approach: cryptographic proof of what agents did, when, and under what authority. That validation makes the technology more credible for regulated commercial sectors like financial services and healthcare.
“We’re seeing a transition with organizations moving towards software, infrastructure and AI agents all interacting dynamically where trust, observability and automation are becoming foundational requirements, not optional capabilities,” Moshe Bar, CEO and co-founder, told BusinessWire.
The Independent Layer Argument
Codenotary is positioning as an independent trust layer rather than extending an existing platform’s native monitoring. As ECI Research noted, platform-native monitoring carries an inherent conflict of interest: the same vendor running agents has a commercial incentive to minimize reported risk. An independent layer with cryptographic verification sits outside that relationship. Whether that differentiation holds as hyperscalers build agent observability into their managed runtimes is the competitive question Codenotary will face over the next 12 months.