Starter $11/month for 1 user and up to 3 devices with spend caps, kill switch, loop detection, 30 days of history and email alerts. Pro $22/month for up to 5 members and 10 devices with everything in Starter plus Slack and Discord alerts, shared team budgets, 1 year of history and invoice reconcilia
Team: Free per organization, unlimited users, 200 session-hours per month. Enterprise and Gateway: Custom pricing, billed annually.
Key features
Loop detection to catch runaway agents
Reads every tool call agents make and blocks unsafe ones before they run
Catches stalled and runaway sessions while they run
Steers agents back when they go past what was asked
Tracks every session's tokens against usual usage
Stops credential and data leaks before they leave the machine
Inventories all agents, MCP servers and skills in use
Blocks dangerous calls before they run in agent hooks and at the gateway
Sends every finding to Slack, webhook or SIEM
Verifies each agent's identity before access
Keeps audit-grade masked records of every action and decision
What makes it different
Local by default with provider keys staying on your machine
Cost reserved before requests reach the provider to prevent overages
Works offline with local caps and kill switch continuing to function
Supports multiple models and providers including Claude, OpenAI and Anthropic
Team controls with scoped device access and shared budgets
Works with Claude Code, Codex, Cursor, Devin and more
Runs on your machines, gateways and in the cloud
Active steering corrects or stops drifting runs
One policy applied across all MCP servers, plugins and skills
Continuously monitors components for known vulnerabilities
Leash
Stacktrace