Announcing Dome Managed Agents.

Try it now

AI agents for software companies

Give your engineers agents that read everything and ship nothing. Three agents for escalation triage, incident summaries and release notes. The ones engineers call act as that engineer, secrets never reach a model, and nothing merges, pages or publishes on its own. Every call lands in one audit record.

Any tool, any model,any use case.

Our example demonstrates three agents for your engineering and support work, pulled from our template library. Our team can work with yours to build, govern, and operate your agents as you deliver on your IT strategy.

Triage engineering escalations

Reads an escalated ticket and the code it points to, drafts a diagnosis and sets priority. Fixes stay with the engineer.

Tools
JiraGitHub
Model
Claude Sonnet 5or any approved provider
Runs
When a ticket is escalated in Jira
Limits
Acts as the engineerWrites triage fields onlySecrets redacted

Tuned for your team

  • Your severity definitions and component owners
  • Repositories mapped to the products they serve

Keep secrets,incidents and releases under your rules.

Dome sits between the agents and your systems. Every call is checked against rules your team writes before it reaches GitHub, PagerDuty or a model.

File

agent incident-scribe · acting as j.harlow
github/get_file(repo: "billing-api", path: "deploy/worker.yaml")
  1. Callerj.harlow verified through Okta
  2. RuleDeploy config reads are allowed
  3. Guard1 access key redacted from the response
env: STRIPE_KEY: sk_live_51Hx9qLmT2vN8bRc
env: STRIPE_KEY: [REDACTED]
DecisionAllowed · Redacted

Show your auditor everyrepository an agent read.

One record for every call: the agent, the engineer it acted for, the system, and the decision. Enable investigations, increase confidence and reduce risk in agentic operations.
Audit · eng-tools
Events 0Denied 0
0 audit events

Give your SOC 2 auditor the agents,not just the people.

Engineering and support agents reach code, customer data and production systems. These are the frameworks that reach them, and what the controls above give you for each.
Give your SOC 2 auditor the agents,
RegulationWhat it asksWhat Dome gives you
SOC 2
What it asks
Access to systems and data is authorized, changes are controlled, and there's evidence of both for the audit period.
What Dome gives you
Each agent is registered with its own credential and acts for a named engineer. Every call, allowed or refused, lands in one record you can hand the auditor.
ISO/IEC 42001
What it asks
An AI management system: know which AI systems you run, assess their risks, and operate controls on them.
What Dome gives you
The registry is the inventory of agents. Rules and guards are the controls, and the audit record shows them working.
EU AI Act
What it asks
For software sold in the EU: staff who use AI need AI literacy, and people must be told when they're talking to an AI system.
What Dome gives you
Every agent, its models and its tools are on record, which makes the disclosure and training scope concrete. Agents reach only approved models.
State privacy laws (CCPA/CPRA)
What it asks
Customer personal data is used only for the purpose it was collected for, and customers can ask what you hold.
What Dome gives you
Customer emails and payment details are redacted from tickets before a model call, and every read is recorded with the engineer it served.

Common questionsabout agents in technology.

How do you stop an AI agent from leaking secrets to an LLM?
Put a guard between the agent and its tools. On Dome, a guard strips API keys and tokens from logs, files and tickets before any model sees them, and a rule refuses reads of files like .env outright.
Can an AI agent resolve incidents in PagerDuty?
Only if a rule allows it. Most teams let the agent read the incident and draft updates, and keep acknowledging and resolving with the on-call engineer.
Are AI agents in scope for SOC 2?
If an agent can reach in-scope systems, its access is part of the audit. Give each agent its own identity, scope what it can call, and keep a record of every call.
How do you audit what an AI coding agent did in GitHub?
Route its tool calls through a Dome gateway. Every call lands in one record with the agent, the engineer it acted for, the repository and the decision.
How are software companies using AI agents?
Escalation triage, incident summaries and release notes are common first agents. Each reads or drafts, and engineers keep merging, paging and publishing.

Spend 30 minuteswith our FDE team.

See the platform and how it fits your needs. Our FDE team can get your first agent under management and work with your platform team to deliver results for your AI program.

Key topics to discuss:

  • Review your AI plans, progress to date, and timeline for agentic projects in production.
  • Planning a specific agent, or agentic app, to bring under governance.
  • Learning more about our platform capabilities, from gateways to routing.
  • Defining agentic operations as repeatable golden pathways for Platform and AppDev teams.

Other industriesDome works in.

All industries

AI agents for financial services

KYC reviews, client servicing and SAR narratives. Approvals, money movement and filings stay with your people.

  • Review onboarding documents

    Checks identity and entity documents against your CDD requirements, runs sanctions screening and writes the KYC summary. An analyst approves.

  • Answer client requests

    Reads the client's accounts and open cases and drafts the reply to a servicing request. It never moves money or changes an account.

  • Draft SAR narratives

    Pulls the alert history and transactions for a case and drafts the SAR narrative. An investigator edits it and files.

Answers to

GLBA Safeguards RuleBSA/AML and the FinCEN CDD RuleNYDFS Part 500Regulation E (EFTA)CFPB UDAAPInteragency third-party risk guidanceECOA and Regulation BFCRA+10 more

AI agents for gaming and sports betting

Player support, responsible gaming review and bonus setup. Self-exclusions and limits stay out of an agent's reach.

  • Answer player questions

    Looks up a player's account, bets and withdrawal status so a specialist can answer fast. It reads. Balances and limits stay with people.

  • Review responsible gaming signals

    Reviews players flagged for risky play and drafts case notes for the responsible gaming team. It never changes a limit.

  • Configure bonuses

    Sets up deposit matches and free bets from a campaign brief, up to the cap you set. Self-excluded players are never targeted.

Answers to

State gaming regulationsBank Secrecy Act (FinCEN casino rules)Age, identity and location checks

AI agents in healthcare

Prior authorizations, visit notes and eligibility checks. Agents read only the charts their clinician can read.

  • Assemble prior authorizations

    Pulls the notes, orders and imaging a payer asks for into one authorization packet. A clinician reviews it and submits.

  • Draft visit notes

    Drafts a visit note from the encounter and the chart, in the department's template. The clinician edits it and signs it.

  • Verify eligibility before the visit

    Checks coverage for the next day's appointments overnight. Anything that needs a call before the visit goes to the patient access channel.

Answers to

HIPAA minimum necessaryBusiness associate agreementsHIPAA Security Rule audit controlsCMS prior authorization rule (CMS-0057-F)

AI agents for insurance claims

Claim intake, file summaries and fraud screening. Agents read only the claims assigned to their adjuster.

  • Triage new claims

    Reads each first notice of loss, sets severity and line of business, and routes it to the right adjuster queue. It flags. It never settles.

  • Summarize claim files

    Summarizes medical records, police reports and correspondence in a claim file for the assigned adjuster. Only claims that adjuster handles.

  • Screen claims for fraud signals

    Checks each open claim against prior claims history and flags patterns for the special investigations unit. It never denies a claim.

Answers to

NAIC Model Bulletin on AI SystemsUnfair claims settlement practices lawsInsurance data security laws

AI agents for professional services firms

Proposals, staffing and engagement status. Each agent sees only the engagements its consultant works on.

  • Draft proposals

    Reads an RFP and drafts a response from the firm's reuse library. Client names in past work are stripped before the model sees them.

  • Match staff to engagements

    Matches skills and availability to a new engagement's roles and proposes a team. Resource managers make the assignments.

  • Report engagement status

    Reads the project plan and engagement files and drafts the weekly status report. It sees only engagements its consultant is on.

Answers to

Client confidentiality termsAICPA Confidential Client Information RuleSOC 2GDPR and state privacy laws

AI agents for retail

Order lookups, replenishment and product copy. Refunds, orders and publishing stay with your people.

  • Answer order questions

    Looks up orders, shipments and returns so an associate can answer a customer fast. It reads. Refunds stay with the associate.

  • Plan replenishment

    Forecasts demand by store and drafts purchase orders against par levels. Buyers review them and send them.

  • Write product copy

    Writes product titles and descriptions from supplier data, in your voice, and saves them as drafts. Merchandisers publish.

Answers to

PCI DSS v4.0.1State privacy laws (CCPA/CPRA)SOX internal controlsFTC Act, Section 5Antitrust and algorithmic pricingPredictive scheduling lawsRouting guides and carrier contracts

Governance at theagent‑action boundary.

However an agent was built and wherever it runs, the same three boundaries are available to control it: the code it ships as, the tools it calls, and the model it reasons through.

Agent Registry

Make every agent known and manageable. Credentials issued, capabilities declared, lifecycle owned.

MCP Gateway

Evaluate every call against policy with full context. Allow, deny, or escalate. Filter what comes back.

Model Broker

Constrain how the agent reasons. Selection by policy, routing across providers, evals against real traffic.