> ## Documentation Index
> Fetch the complete documentation index at: https://docs.forge.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Advantages

> How Forge extends existing security controls with AI-native context, agentless enforcement, and behavioral intelligence.

Enterprise security products observe individual layers: devices, networks,
clouds, identities, or gateway transactions. AI agents operate across those
layers. Forge connects those systems into one AI estate and behavioral record,
then applies controls at the network, endpoint, gateway, and application layers.

<div className="advantages-card-grid">
  <Columns cols={2}>
    <Card title="Agentless first" icon="shield-check" horizontal>
      Use existing firewalls, SASE platforms, and secure web gateways as the
      primary enforcement layer. Forge for devices is available for local or
      off-network coverage.
    </Card>

    <Card title="Automatic routing" icon="route" horizontal>
      Redirect supported browser, desktop, API, and MCP traffic to the
      appropriate Forge gateway without hooks or per-client gateway
      configuration.
    </Card>

    <Card title="Behavioral context" icon="waypoints" horizontal>
      Connect identity, configuration, model activity, tool activity, and
      outcomes across complete agent sessions.
    </Card>

    <Card title="AI enablement" icon="rocket" horizontal>
      Give employees governed access to approved AI while improving adoption,
      configuration, usage, and cost.
    </Card>
  </Columns>
</div>

## Comparisons

<AccordionGroup>
  <Accordion title="Endpoint and network security" icon="network" id="endpoint-network">
    Endpoint and network security was designed primarily around human-initiated
    process and traffic activity. Agent activity may be machine-to-machine, span
    multiple systems, or execute outside the observed control point.
    Traditional telemetry can show that a process contacted a destination
    without explaining the model, tool, identity, intent, or surrounding
    sequence.

    <Columns cols={2}>
      <Card title="Sees" icon="eye" horizontal>
        Processes, devices, destinations, and traffic.
      </Card>

      <Card title="Misses" icon="eye-off" horizontal>
        AI-native semantics and behavior spanning sessions, systems, and
        identities.
      </Card>
    </Columns>

    **Forge advantage**

    Forge adds agent, model, MCP, tool, identity, content, and session context.
    It also compiles broad AI access policy into existing network controls and
    routes supported traffic for content-aware enforcement.
  </Accordion>

  <Accordion title="Cloud security" icon="cloud" id="cloud-security">
    Cloud security products govern resources, workloads, permissions, and
    posture inside connected cloud environments. Agents also operate across
    endpoints, repositories, SaaS applications, external APIs, and third-party
    tools. Activity involving those external systems falls outside any single
    cloud provider's visibility boundary.

    <Columns cols={2}>
      <Card title="Sees" icon="eye" horizontal>
        Workloads and resources inside connected cloud boundaries.
      </Card>

      <Card title="Misses" icon="eye-off" horizontal>
        Behavior spanning endpoints, code, SaaS, tools, and external services.
      </Card>
    </Columns>

    **Forge advantage**

    Forge connects cloud evidence with endpoint, network, identity, code, SaaS,
    and runtime activity in one inventory and behavioral record. It preserves
    the relationship between the cloud workload and the actions it takes
    elsewhere.
  </Accordion>

  <Accordion title="Identity access management" icon="key-round" id="identity-access">
    Identity and access management determines who an identity is and what it
    may access. An authentication or entitlement decision does not reconstruct
    what an agent subsequently did, the order of its actions, or their
    downstream effects. A permission check at the beginning of a session says
    little about the decisions that follow.

    <Columns cols={2}>
      <Card title="Sees" icon="eye" horizontal>
        Identities, groups, authentication, and entitlements.
      </Card>

      <Card title="Misses" icon="eye-off" horizontal>
        Actual agent behavior, successive decisions, and resulting impact.
      </Card>
    </Columns>

    **Forge advantage**

    Forge uses identity as policy context throughout the session. It attributes
    model and tool activity to people and workloads, evaluates supported actions
    as they occur, and connects decisions to sessions, violations, and
    investigations.
  </Accordion>

  <Accordion title="LLM gateways" icon="message-square" id="llm-gateways">
    A standalone LLM gateway sees model requests explicitly configured to pass
    through it. Browser AI, SaaS AI, desktop agents, direct integrations, and
    MCP activity can remain outside that boundary. Manual gateway configuration
    must be applied to each client and can be edited or removed by the end user.

    <Columns cols={2}>
      <Card title="Sees" icon="eye" horizontal>
        Model requests and responses routed through the gateway.
      </Card>

      <Card title="Misses" icon="eye-off" horizontal>
        Unrouted AI surfaces and context from agents, tools, identities, and
        systems.
      </Card>
    </Columns>

    **Forge advantage**

    Forge combines its LLM Gateway with enterprise discovery and automatic
    routing. Supported traffic reaches the governed path without hooks, SDK
    changes, or per-client gateway configuration, while Inventory retains
    visibility across the wider AI estate.
  </Accordion>

  <Accordion title="MCP gateways" icon="plug" id="mcp-gateways">
    A standalone MCP gateway evaluates MCP discovery and tool calls routed
    through it. Risk can emerge from what the agent observed, which model made
    the decision, what preceded the call, and how the result was used. Direct
    APIs, hard-coded tools, user-created integrations, and shadow MCP usage can
    remain outside an explicitly configured gateway.

    <Columns cols={2}>
      <Card title="Sees" icon="eye" horizontal>
        MCP servers and tool calls routed through the gateway.
      </Card>

      <Card title="Misses" icon="eye-off" horizontal>
        Shadow usage, non-MCP tools, direct integrations, and risk across a
        sequence.
      </Card>
    </Columns>

    **Forge advantage**

    Forge combines MCP Gateway enforcement with Registry, discovery, identity,
    model activity, and normalized sessions. Supported tool traffic can be
    routed automatically, and each decision is evaluated within the broader
    agent interaction.
  </Accordion>
</AccordionGroup>

## Behavior

<Callout icon="waypoints">
  **Identity → Configuration → Model activity → Tool activity → Outcome**

  Agents create risk through sequences, not only individual calls. Forge
  correlates the complete interaction so policy and investigations can evaluate
  what the agent is doing over time.
</Callout>

Several permitted actions can become unsafe when combined. Behavioral context
supports more precise policy, stronger investigations, and fewer blunt
allow-or-block decisions.

## Enablement

The same inventory, identity, routing, and behavioral context provides the
infrastructure for expanding AI safely.

<Columns cols={3}>
  <Card title="Governed access" icon="library">
    Publish approved MCP servers and skills, then provide identity-aware
    self-service access.
  </Card>

  <Card title="Consistent experience" icon="settings">
    Distribute native configurations and route existing workflows onto governed
    services transparently.
  </Card>

  <Card title="Continuous improvement" icon="chart-no-axes-combined">
    Improve adoption, subscriptions, cost, policies, models, and tools using
    actual behavior.
  </Card>
</Columns>

Forge turns existing security infrastructure into a foundation for AI adoption,
with controls applied at the right layer and continuous improvement based on
how people and agents actually work.