| What it does | Runtime security layer that stops risky AI actions before they execute
| Cryptographic identity and behavioral monitoring for AI agents in regulated industries
|
|---|
| Stage | Not given
| Startup
|
|---|
| Founded | Not given
| 2025
|
|---|
| Based in | Not given
| US
|
|---|
| Pricing model | Freemium
| Free trial
|
|---|
| Pricing | Free plan: Local Guard runtime with real-time approval prompts and local audit log. Solo $4.99/mo: adds 2 cloud-connected devices and 30-day cloud retention. Pro $15/mo: adds 5 cloud-connected devices, 180-day retention, and policy versioning. Team $30/seat/mo: up to 25 cloud-connected devices, 365-
| Starter: $39/agent/month (minimum 5 agents, $195/month total); Professional: $99/agent/month (minimum 20 agents, $1,980/month total); Enterprise: custom pricing. 30-day free trial on all plans.
|
|---|
| Key features | - Surface-specific pre-action interception
- Policy routing with allow, observe, ask, and block outcomes
- Local review and evidence workflows
- MCP, skill, plugin, and package inspection
- Layered local and team policy
- Open source runtime under Apache-2.0
- Offline local protection without cloud connectivity
- Continuous GitHub leaked-secret monitoring
- Decision audit trail and export
- Support for multiple AI coding agents
| - X.509 certificate issuance via AWS KMS with private keys stored in HSM
- Real-time behavioral monitoring and drift detection across eight risk dimensions
- Content-risk scoring of agent outputs per EU AI Act Article 5
- Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
- Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
- Public verification endpoint with sub-500ms response and no authentication required
- OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
- RFC 8693 delegation chains and signed forensics
- Webhook event delivery with HMAC signatures and audit logging
- AgentMail: verifiable email inbox per certified agent for regulatory communication
|
|---|
| What makes it different | - Open-source core runtime runs locally without cloud requirement
- Protects against secrets, destructive commands, prompt injection, and supply chain attacks
- No source code or secrets uploaded; decisions stored as redacted summaries
| - Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
- X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
- Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
- Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
- Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 53 ▲ +1 (up) since last check | 40 ▼ −1 (down) since last check |
|---|
| Trust Flow (Majestic) | 27 | 9 |
|---|
| Citation Flow (Majestic) | 44 | 30 |
|---|
| Referring domains (Majestic) | 735 | 258 |
|---|
Kakunin