Vendors by type
Rules and identity programmes
Rules and identity programmes decide who may act, and on what terms, before a payment goes through. Cloudflare, HUMAN Security and Trulioo verify or screen agents, Forter decides which agent orders to approve, and the FIDO Alliance, EMVCo and the x402 Foundation write or steward standards, some still in draft. None of them processes payments.
Rules and identity programmes in this section
The 7 rules and identity programmes below were read on 5 Nov 2026. 3 of them state support for at least one protocol on their own pages, 1 more names one as announced or partial and 3 name none. No price is on file for any of them.
The 7 rules and identity programmes
| Vendor | What it does for this layer | Standards stated | Pricing model | Checks on file | Last read |
|---|---|---|---|---|---|
| Cloudflare | Network and CDN that verifies signed agent traffic with Web Bot Auth, the authentication layer under Visa's Trusted Agent Protocol and Mastercard Agent Pay, and a co-developer of x402 with agent payment tooling in its Agents SDK. | Supports 4: Visa TAP, Mastercard Agent Pay, x402, MPP | None on file | Ora: 81/100 (B), 4 Nov 2026 isitagentready: 60/100 (L4 Agent-Integrated), 5 Nov 2026 | 5 Nov 2026 |
| EMVCo | Technical body owned by the card networks that writes EMV specifications (3-D Secure, Payment Tokenisation, SRC); runs an Agentic Payments Task Force and published a draft EMV Agentic Payments framework built on shared Intent Services. | No statement found | None on file | Ora: no cached score isitagentready: 20/100 (L1 Basic Web Presence), 5 Nov 2026 | 5 Nov 2026 |
| FIDO Alliance | Open standards body behind passkeys; since April 2026 the steward of AP2 and the home of an Agentic Authentication Technical Working Group and a Payments Technical Working Group writing specifications for agent-initiated commerce. | Supports 1: AP2 Announced 1: Verifiable Intent | None on file | Ora: no cached score isitagentready: 33/100 (L1 Basic Web Presence), 5 Nov 2026 | 5 Nov 2026 |
| Forter | Fraud and identity decisioning company that sells Agentic Orchestration: a no-code layer that translates agent commerce protocols to a merchant's checkout and decides which agent orders to approve. | Announced 1: AP2 | None on file | Ora: 92/100 (A), 3 Nov 2026 isitagentready: 88/100 (L5 Agent-Native), 5 Nov 2026 | 5 Nov 2026 |
| HUMAN Security | Bot and fraud defence company whose AgenticTrust product detects AI agent traffic on merchant sites, applies real-time permissions per agent and lets verified agents browse and check out. | No statement found | None on file | Ora: 45/100 (D), 4 Sep 2026 isitagentready: no result | 5 Nov 2026 |
| Trulioo | Identity verification company whose Know Your Agent (KYA) programme verifies the organisation behind an AI agent and the agent's own signals, then issues a signed Digital Agent Profile that merchants and payment parties can check. | No statement found | None on file | Ora: no cached score isitagentready: 27/100 (L1 Basic Web Presence), 5 Nov 2026 | 5 Nov 2026 |
| x402 Foundation | Linux Foundation project that governs the x402 protocol (HTTP 402 payments for agents and APIs) under vendor-neutral, open governance after Coinbase contributed it in 2026. | Supports 1: x402 | None on file | Ora: 71/100 (B), 28 Aug 2026 isitagentready: 53/100 (L4 Agent-Integrated), 5 Nov 2026 | 5 Nov 2026 |
Back to all vendors. Other types: Processors, Card networks, Wallets and pay-later services, Agent-pay builders, Commerce platforms, Agent surfaces, Retailers.
Sources
- cloudflare.com, read 5 Nov 2026
- emvco.com, read 5 Nov 2026
- fidoalliance.org, read 5 Nov 2026
- forter.com, read 5 Nov 2026
- HUMAN Security, read 5 Nov 2026
- trulioo.com, read 5 Nov 2026
- x402.org, read 5 Nov 2026
Last reviewed