Runtime security layer that stops risky AI actions before they execute
Open-source AI agent orchestration platform for incident response and automation
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
Not given
Pricing model
Freemium
Open source
Pricing
Free plan: Local Guard runtime with real-time approval prompts and local audit log. Solo $4.99/mo: adds 2 cloud-connected devices and 30-day cloud retention. Pro $15/mo: adds 5 cloud-connected devices, 180-day retention, and policy versioning. Team $30/seat/mo: up to 25 cloud-connected devices, 365-
Not given
Key features
Surface-specific pre-action interception
Policy routing with allow, observe, ask, and block outcomes
Local review and evidence workflows
MCP, skill, plugin, and package inspection
Layered local and team policy
Open source runtime under Apache-2.0
Offline local protection without cloud connectivity
Continuous GitHub leaked-secret monitoring
Decision audit trail and export
Support for multiple AI coding agents
Incident response with agent investigation and pull request generation
Automated workflows triggered on schedules or webhooks
Agent summoning from GitHub, GitLab and Radicle with /ryph command
Semantic memory system for shared and persistent agent learning
Credentials kept behind gateways with no access in sandbox
Customized environments per repository with cached dependencies
Browser use for agent interactions with live watching
Artifacts and pages for reports and overviews
Deployment options from laptop to Kubernetes
Tool proxy with allowlisted MCP server integrations
What makes it different
Open-source core runtime runs locally without cloud requirement
Protects against secrets, destructive commands, prompt injection, and supply chain attacks
No source code or secrets uploaded; decisions stored as redacted summaries
Agents work without holding real credentials or keys
Changes ship as patches that require review before merge
Runs on your own infrastructure from laptop to cloud
Semantic memory learns across runs with deduplication and contradiction handling
Built-in safety assuming agents can be manipulated or exploited
Ryph