This report reevaluates no-code/low-code platforms for building enterprise-grade AI agents, focusing on agent authentication, sandboxed code execution, secrets management, lineage tracking, and evaluation features. It scores vendors on their native support for these security and operational capabilities, highlighting gaps in sandboxing, guardrails, and LLM hallucination checks.

• Only Google, Langflow, Workato, CrewAI, Sim.ai, and Gumloop support full credential-passing for agent-to-third-party auth, and only about half the market offers any sandboxing for LLM-generated code (often outsourced to third parties like E2B).
• Lineage tracking and secrets management are nearly absent industry-wide—only Google, Workato, and Gumloop score on lineage, and Google, Sim.ai, and Gumloop lead on secrets handling.
• No vendor excels at both running human-written scripts and safely sandboxing LLM-generated code, despite most platforms marketing themselves to "citizen developers."
• Whether a tool started as AI-native or pivoted from workflow automation no longer predicts its security posture—actual feature completeness matters more than origin.