Runtime security layer that stops risky AI actions before they execute
Shared AI-context layer for teams
Stage
Not given
Startup
Founded
Not given
Not given
Based in
Not given
Not given
Pricing model
Freemium
Freemium
Pricing
Free plan: Local Guard runtime with real-time approval prompts and local audit log. Solo $4.99/mo: adds 2 cloud-connected devices and 30-day cloud retention. Pro $15/mo: adds 5 cloud-connected devices, 180-day retention, and policy versioning. Team $30/seat/mo: up to 25 cloud-connected devices, 365-
Individual: $10/month. Team: $15 per user per month. Enterprise: Custom pricing. All plans start with 14-day free trial.
Key features
Surface-specific pre-action interception
Policy routing with allow, observe, ask, and block outcomes
Local review and evidence workflows
MCP, skill, plugin, and package inspection
Layered local and team policy
Open source runtime under Apache-2.0
Offline local protection without cloud connectivity
Continuous GitHub leaked-secret monitoring
Decision audit trail and export
Support for multiple AI coding agents
Connect any MCP client
Space-based access control with owner, editor, and viewer roles
Version history on every memory
Per-memory attribution and provenance tracking
Row-level security in Postgres
Topic-based organization within Spaces
Works with Cursor, Claude Code, Copilot, ChatGPT
Priority support on Team and Enterprise plans
Personal and Shared Spaces
What makes it different
Open-source core runtime runs locally without cloud requirement
Protects against secrets, destructive commands, prompt injection, and supply chain attacks
No source code or secrets uploaded; decisions stored as redacted summaries
Tool-agnostic across mixed AI stacks instead of locked to one vendor
Works across teams without copy-paste or re-explaining context
Person-first design where everyone maintains their own knowledge slice
Single-team pricing with no enterprise minimum
Shared control through role-based permissions and governance
memsprout