Armakuni invests $2 million in running and securing AI agents on AWS
Armakuni
News · Oct 23, 2026 · 5 min read · AI agents
Its managed service, AK Run, and Prism, its AI visibility and FinOps portal, are being built on the AI agent services AWS launched this year.
Armakuni, an Amazon Web Services (AWS) Premier Tier Services Partner, is investing $2 million in AI-native managed services and AI agent security on AWS.
- The money goes into AK Run, Armakuni's AI-native managed service, and Prism, which shows a company who is using AI models and what it costs, along with security for the AI agents customers run and more of Armakuni's work on AWS.
- Both are being built on what AWS shipped for AI agents in 2026, from AgentCore Policy and AWS Agent Registry to AWS DevOps Agent and AWS Security Agent.
- Customers get production issues resolved faster, lower operational and AI costs, and control over every AI agent that can reach a business-critical system.
- Companies can start with a free workshop, then a two-week, read-only Prism diagnostic.
As enterprises move AI agents into production, keeping them reliable, secure and within budget is becoming as important as building them. An AI agent reads company data, calls tools and spends money on its own, and a model update can change how it behaves overnight. Most companies split the looking-after between a firm that runs the servers, another that fixes the code and a third that watches the security alerts, and the AI agents fall between them.
AK Run, AI-native managed services
When a production alert fires, AK Run's AI agents investigate it, with AWS DevOps Agent tracing the incident across telemetry, code and deployments, and prepare a code-level fix, with a test, for an engineer to review. The fix ships through the customer's own pipeline, so there's less manual troubleshooting and the same incident is less likely to come back. Armakuni's engineers give the yes, and answer for the result.
Prism: see it first, then control it
Prism is Armakuni's AI visibility and FinOps portal, the one AK Run customers see their AI through. It connects to a company's AWS accounts with read and logging permissions only, so no application code changes and no traffic is rerouted.
- It shows who is calling which models, down to every IAM role, SSO user and unmonitored Bedrock API key, with their token use and its cost within minutes, next to the figures AWS bills.
- It finds the savings: prompts that qualify for prompt caching, high-volume work that can move to batch inference at half the on-demand price, and routine prompts running on a frontier model that a smaller one would handle.
- Every policy, from model allow-lists and budget caps to rate limits and guardrails, runs in watch mode in Prism first, so a team sees what a rule would have stopped before AK Run's gateway enforces it.
- It maps the controls in place to the EU AI Act, ISO/IEC 42001 and the NIST AI RMF, for the evidence pack AK Run customers get every month.
AI agent security, on what AWS launched this year
Every action an AI agent takes is traceable: the model it used, the tools it accessed, the cost it incurred and who approved it. When something goes wrong, the customer has the evidence to investigate the incident and hold AI agents accountable. AK Run builds this on AWS's newest services:
- AWS Agent Registry, for one list of every AI agent a company runs.
- AgentCore Policy and Amazon Bedrock Guardrails, so rules outside the AI agent decide which tools it may use, and check for prompt injection and leaked data.
- AgentCore Gateway as the only way to a model (AK Run's Agent ControlPlane), with AWS Service Control Policies, set through AWS Control Tower, refusing any call that goes around it.
- AgentCore Identity, so each AI agent acts for one named person, with no shared keys.
- AgentCore Observability and Evaluations, for one trace across every account and scores that run again when a model changes.
- AWS Security Agent, for penetration tests on demand.
Fourteen years on AWS
Prism is one of the reusable AWS-based accelerators Armakuni is expanding: tested, production-ready components its engineers bring into customer projects so that a project doesn't start by building everything from scratch. Armakuni has built on AWS since 2012: a Premier Tier Services Partner since 2023, a Strategic Collaboration Agreement with AWS on generative AI in 2025, and the AWS Agentic AI Specialization in January 2026.
"A year ago our customers asked us to help them build AI agents. Now they ask who looks after them: who picks up the alert at night, what an AI agent did with the data it was given, and what it cost," said Dhvanil Desai, Global CEO of Armakuni. "AWS is where they run them, and AWS has spent this year building the controls AI agents need. Our $2 million goes into using those controls well for every customer, watching day and night, and answering for the result."
An AI agent should never be the one deciding what it’s allowed to do.
"That decision belongs outside it: in AgentCore Policy at the gateway, in Service Control Policies on the account, and in an identity that acts for one named person. Then everything it does lands on one trace, so when a security lead asks what it did last Tuesday, there's a record to read rather than a week of digging through logs."
Armakuni is one of 93 AWS Premier Tier Services Partners based in the United States, and one of 27 Premier partners holding agentic AI, modernization and Amazon Connect credentials together, with the AWS Agentic AI Specialization for consulting services, within the AWS AI Competency. With this investment it extends its work on AWS beyond building AI to operating and securing it in production.
Companies can start with a free workshop, followed by a two-week Prism diagnostic that needs read-only access and changes no code, or ask for an AI agent risk review of the AI agents, MCP servers and skills they run. www.armakuni.com/managed-services/
About Armakuni. Founded in London in 2012, Armakuni builds and runs software, AI agents and cloud for companies on AWS. Its forward deployed engineers work inside a customer's company until the work is live, and the customer keeps what is built. www.armakuni.com
Discussion about this post