Open Source: free and self-hosted. Free: $0/month hosted plan with up to 5 members. Scale: $20 per user per month. Enterprise: Custom annual contract.
Free: $0/mo for 1 agent with scanner, approvals, kill switch, phone and Telegram alerts, and 7-day history. Pro: $24.99/mo for up to 5 agents with learned autonomy, Time Machine, data-leak tripwire, vault, and unlimited history. Team: $79.99/mo for unlimited agents with everything in Pro plus priori
Key features
Tool call interception for all agent frameworks
Automatic approval rules to prevent fatigue
AI judge for complex rule evaluation
Works with LangGraph, CrewAI, Mastra, Claude Agent SDK and more
Open Agent Approval Protocol for framework independence
Self-hosted or cloud-hosted deployment options
Custom permission policies and organization controls
Skill scanner for hidden instructions in documentation
Encrypted vault for secrets kept away from agent context
Kill switch for instant agent stopping
Rewind time machine to walk back agent actions
Data-leak tripwire for PII and secrets detection
Live operations dashboard monitoring all agents
Phone and Telegram alerts for held and blocked actions
What makes it different
Framework-agnostic: works with any AI agent through the open Agent Approval Protocol
No vendor lock-in: open source spec and SDKs let you swap providers without rewriting agents
Comprehensive audit trail for accountability and compliance
Meets reviewers where they work with multi-platform notifications
Policy-based routing to eliminate approval bottlenecks
Runtime gate checks actions before they execute, not after like logs
External to agent so injected content cannot override security rules
Differentiates between reversible actions that flow immediately and irreversible ones needing approval
Catches runtime threats that static scanning misses
withHuman
Chloros