| What it does | Runtime security for your own agents
| Real-time steering and guardrails for AI agents
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free: $0/mo for 1 agent with scanner, approvals, kill switch, phone and Telegram alerts, and 7-day history. Pro: $24.99/mo for up to 5 agents with learned autonomy, Time Machine, data-leak tripwire, vault, and unlimited history. Team: $79.99/mo for unlimited agents with everything in Pro plus priori
| Team: Free per organization, unlimited users, 200 session-hours per month. Enterprise and Gateway: Custom pricing, billed annually.
|
|---|
| Key features | - Skill scanner for hidden instructions in documentation
- Encrypted vault for secrets kept away from agent context
- Kill switch for instant agent stopping
- Rewind time machine to walk back agent actions
- Data-leak tripwire for PII and secrets detection
- Live operations dashboard monitoring all agents
- Phone and Telegram alerts for held and blocked actions
| - Reads every tool call agents make and blocks unsafe ones before they run
- Catches stalled and runaway sessions while they run
- Steers agents back when they go past what was asked
- Tracks every session's tokens against usual usage
- Stops credential and data leaks before they leave the machine
- Inventories all agents, MCP servers and skills in use
- Blocks dangerous calls before they run in agent hooks and at the gateway
- Sends every finding to Slack, webhook or SIEM
- Verifies each agent's identity before access
- Keeps audit-grade masked records of every action and decision
|
|---|
| What makes it different | - Runtime gate checks actions before they execute, not after like logs
- External to agent so injected content cannot override security rules
- Differentiates between reversible actions that flow immediately and irreversible ones needing approval
- Catches runtime threats that static scanning misses
- Built for individual developers, not enterprise
| - Works with Claude Code, Codex, Cursor, Devin and more
- Runs on your machines, gateways and in the cloud
- Active steering corrects or stops drifting runs
- One policy applied across all MCP servers, plugins and skills
- Continuously monitors components for known vulnerabilities
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 2 ● no change since last check | 3 ▲ +2 (up) since last check |
|---|
| Trust Flow (Majestic) | 7 | 13 |
|---|
| Citation Flow (Majestic) | 13 | 25 |
|---|
| Referring domains (Majestic) | 8 | 23 |
|---|
Chloros
Stacktrace