{
"canonical_url": "huggingface.co/spaces/ibm-research/cuga-agent",
"category": "Hugging Face Space",
"classification": {
"matched": {
"technology": [
"docker"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": "F1211011660",
"covers_resource": "inherited",
"credited": false,
"detail": {
"cso": "IBM Cloud for Government",
"csp": "IBM",
"deployment_model": "Hybrid Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "High"
},
"display": "FedRAMP High: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/F1211011660",
"framework": "fedramp",
"issued": "2019-11-14",
"issuer": "JAB / 3PAO Fortreum, LLC",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:03Z",
"review_reason": "vendor authorization for IBM Cloud for Government; entity 1.00",
"reviewer": null,
"scope": "entity",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_HIGH"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "csa_star",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "dora",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "fedramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "DPF active: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/trust",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "d2742132ff4d426791722617532cf22b90d1b36a08a32e9947a8000314f6ceea",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "DPF_ACTIVE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "hitrust",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "irap",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27017: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27017"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27018: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27018"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27701: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "iso27701",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27701"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "pci_dss",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://www.ibm.com/products/cloud/compliance",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "596ee8b07319074f32377fdd681118c45000b614a330fbd5712b91d038e809fa",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:54Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "hosted",
"description": "Configurable Generalist Agent, leader in AppWorld Benchmark",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"technology": {
"components": {
"adoption": 17.54,
"docs": 7.0,
"domain_fit": 34.0,
"ecosystem": 0.3,
"governance": 0.0,
"health": 8.0,
"trust": 15.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": null,
"score": 44.7,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"huggingface_space": "ibm-research/cuga-agent"
},
"first_seen": "2026-10-26T12:12:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_fe0bceed6588bf46",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:12:40Z",
"license": null,
"name": "CUGA Agent",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"not_checked": "code_host",
"status": "unknown"
},
"ard": {
"not_checked": "code_host",
"status": "unknown"
},
"mcp": {
"not_checked": "code_host",
"status": "unknown"
}
},
"publisher_domain": "huggingface.co",
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:39:47Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {
"hf_created_at": "2025-12-08T17:39:32.000Z",
"hf_last_modified": "2025-12-19T23:47:31.000Z",
"hf_likes": 106,
"hf_pinned": false,
"hf_sdk": "docker"
},
"slug": "ibm-research-cuga-agent",
"sources": [
{
"payload_hash": "9a0ffe03098c8534c4ec64503803051a0b826720685f1984c8996232fcbd9373",
"retrieved_at": "2026-10-26T12:12:40Z",
"system": "huggingface",
"url": "https://huggingface.co/spaces/ibm-research/cuga-agent"
}
],
"tags": [
"docker"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 1,
"protocols": 5,
"security": 1,
"traces": 5,
"vendor_compliance": 1
},
"url": "https://huggingface.co/spaces/ibm-research/cuga-agent",
"vendor": "ibm-research"
}