Alternatives to Eyrane
Compare Eyrane alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Eyrane in 2026. Compare features, ratings, user reviews, pricing, and more from Eyrane competitors and alternatives in order to make an informed decision for your business.
-
1
AgentShield
AgentShield
AgentShield is a next-generation identity platform built to verify both human users and AI agents acting on their behalf. It enables organizations to confirm who an agent is, whether the person behind the agent has provided explicit authority, and that the agent is trustworthy, all through APIs and JavaScript integrations. The product includes tools that detect agentic sessions on a website. and enforces identity and permission checks for agent-to-agent or agent-to-service interactions under the open Model Context Protocol Identity (MCP-I) specification. With KYA, businesses can securely manage agent identities and permissions, institute audit-trails, automation workflows, and finely-tuned access control for autonomous systems, thereby protecting themselves from misuse of digital identities and ensuring transparency when AI systems act on behalf of users. -
2
Harden
Harden
Harden AIF is an agent endpoint security platform for AI coding agents. It evaluates supported agent tool calls before execution using the developer’s intent, session context, organisational policy, and the effect of the proposed action. Harden helps protect against destructive commands, unauthorized access, unintended data transfers, secret exposure, privilege misuse, and other unsafe agent actions. Legitimate actions can proceed normally, sensitive data in supported flows can be safely redacted, and actions that fall outside the developer’s intent or authority are blocked before execution. Harden works across popular coding agents and agentic development tools including Claude Code, Codex, Cursor, Antigravity CLI, Kiro, Hermes, and OpenClaw, providing a consistent security layer across the agent ecosystem. -
3
Mindgard
Mindgard
Mindgard is an automated AI red teaming and offensive security platform purpose-built for AI systems and agents. Built for security and engineering teams accountable for AI in development and production, it continuously red teams models, agents, and applications to find the vulnerabilities most likely to cause a breach, validate whether guardrails and controls hold, and show teams how to close each gap. AI red teaming tests emulate real attacker behavior across prompt injection, jailbreaks, data extraction, poisoning, and agentic tool abuse, and map findings to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and the EU AI Act. Unlike traditional AppSec tools or manual penetration testing, Mindgard cuts AI risk assessment from weeks to hours, pinpoints and validates defensive gaps, and supports continuous policy compliance as AI systems change. Capabilities: AI Discovery & Recon, AI Red Teaming, AI Assessment, AI Runtime Protection, Model Scanning, AI Governance & Compliance. SOC 2 TypeStarting Price: Contact vendor -
4
Pillar Security
Pillar Security
Pillar Security is a unified AI security platform for securing the agentic workforce across the entire AI lifecycle, from development to deployment and runtime protection. It connects business context across discovery, testing, and protection so security intelligence compounds across AI applications, agents, models, prompts, frameworks, tools, MCP servers, skills, coding agents, SaaS, cloud, code, and endpoints. Pillar helps organizations discover and manage AI assets everywhere, including shadow AI and unapproved systems, assess supply chain and posture risks, map agentic attack surfaces, and validate the vulnerabilities that actually matter. Its AI Security Posture Management capabilities analyze connected agents, tools, permissions, data sources, prompts, models, and supply chain components to expose risky paths, policy violations, misconfigurations, coding agent risks, and blast radius when a single component is compromised. -
5
NVIDIA Open Agent Safety Platform is an open reference design for continuously monitoring and governing AI agent behavior, helping organizations keep agents isolated, observable, auditable, and within defined operational boundaries. It combines runtime governance, continuous threat detection, and hardware-isolated policy enforcement to secure enterprise AI agents from testing through deployment. NVIDIA OpenShell provides an open-source runtime that separates how agents execute from how they reach data, tools, and external systems, using sandboxed execution and deterministic, zero-trust policy enforcement to control what agents can see, do, and interact with. Policies are enforced outside the agent process, helping limit the impact of unexpected behavior. NVIDIA Sentry adds an independent security layer that observes agent requests and responses, establishes verifiable agent identities, continuously governs access to data, tools, APIs, and services, and can quarantine agents.
-
6
Willow
Willow
Willow is a leading enterprise platform for governing AI agents, tools, MCP servers, skills, and plugins. It connects agents such as Claude, ChatGPT, Cursor, Codex, Gemini, n8n, and custom agents to internal systems and SaaS tools, including Jira, GitHub, Slack, and databases, through an MCP gateway. Agents receive human-linked identities, scoped permissions, and audit trails. Security teams define policies, while employees self-serve approved connectors, skills, and plugins. Features include shadow AI discovery; PII redaction and prompt-injection inspection; app- and action-level permissions; SSO, SCIM, and RBAC with Okta, Entra ID, and JumpCloud; SIEM export; token and cost monitoring; and background agents. Willow is available as SaaS, dedicated cloud, or on-premises in a customer VPC. It holds SOC 2 Type II attestation, is GDPR-ready.Starting Price: $0 -
7
Snapper
Snapper
Snapper is an AI agent security platform designed to provide end-to-end governance and protection for organizations deploying AI agents across applications, networks, and systems. It delivers runtime enforcement by evaluating every agent action, including tool calls, API requests, and data access, before execution through a policy-driven rule engine with multiple enforcement layers. It offers unified visibility into AI usage by monitoring network traffic, browser activity, DNS, and processes to detect unauthorized tools and “shadow AI,” while also intercepting outbound LLM requests through SDK wrappers and a network proxy to evaluate, redact, and log sensitive data in real time. Snapper includes advanced threat detection capabilities that identify prompt injection, exploit chains, anomalous behavior, and multi-step attack patterns using behavioral baselines, kill chain tracking, and composite trust scoring. -
8
Bitdefender AI Guardian
Bitdefender
Bitdefender AI Guardian is a macOS security application for people who use autonomous AI agents, including developers and other technical users. It installs a local background service and command-line interface that checks agent activity against user-defined policies. The software inspects prompts, tool calls, MCP servers, installed skills and file access, and can allow, flag or block actions. It can scan skills and MCP servers, help keep credential paths away from agents, and record decisions in an encrypted local audit log for review. Users can also receive private direct-message alerts through a selected chat platform. In its beta, AI Guardian supports Claude Code, OpenClaw and Hermes Agent and is offered free for macOS; the company describes additional operating-system support as planned. It is intended to add controls around agent actions rather than replace an AI model, agent framework or conventional antivirus.Starting Price: $0 -
9
Tragentics
Tragentics
Tragentics is the AI agent security platform that authenticates every agent, injects keys from an encrypted Credential Vault so agents never hold them, routes every call through a content-blind relay, and records a metadata-only audit trail — across platforms and protocols. Tragentics runs no inference and executes no agent logic. It never reads or stores what your agents say. Every agent gets a permanent ID and an Ed25519 identity, keys are encrypted at rest with AES-256-GCM, and every call is authenticated, rate-limited, and recorded as metadata only — never payloads. Protocol-agnostic: it routes MCP, A2A, ACP, OpenAI, ANP, and DID traffic for the agents you already own.Starting Price: $39/month -
10
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
11
F5 AI Guardrails is a runtime AI security solution designed to protect AI models, applications, agents, and connected data throughout deployment and operation. The platform helps organizations defend against adversarial threats such as prompt injection, jailbreak attacks, harmful outputs, and unauthorized AI behavior. It provides real-time monitoring and enforcement of security policies to prevent data leakage, compliance violations, and misuse of AI systems. Organizations can implement predefined guardrails or create customized policies tailored to specific business requirements and AI use cases. The platform also delivers observability, auditing, and governance capabilities that help organizations maintain visibility into AI interactions and regulatory compliance. By combining threat protection, data security, and AI governance, F5 AI Guardrails helps enterprises operate AI systems more safely and responsibly.
-
12
Noma
Noma Security
Noma Security is the complete enterprise AI security platform designed to deliver confidence in agentic AI at scale. Noma Security was named a Gartner Cool Vendors in AI Security, 2025 for delivering deep visibility and AI discovery, agentic risk mapping, security posture management, automated AI red teaming, and AI runtime protection all in one platform. With seamless integration to your AI stack and workflows, and alignment with regulatory compliance frameworks, Noma Security helps teams embrace AI innovation while addressing the unique threats posed by rapid enterprise AI adoption. -
13
Cortex Agentic Endpoint Security
Palo Alto Networks
Palo Alto Networks Cortex Agentic Endpoint Security (AES) is an AI-native endpoint security platform designed to protect enterprise devices from risks associated with autonomous AI agents and modern software applications. The platform continuously discovers AI agents, local models, browser extensions, IDE plugins, Model Context Protocol (MCP) servers, and other software components operating on endpoints. Its context-aware risk analysis evaluates software dependencies, permissions, behaviors, and potential security exposures to help organizations prioritize threats. Cortex AES provides automated governance policies and security guardrails that control agent interactions and restrict potentially unsafe software. Its real-time prevention capabilities block malicious agent actions, prompt injection attacks, unauthorized data access, and risky software execution before they cause damage. -
14
Lasso Security
Lasso Security
Lasso is an AI security platform designed to help enterprises securely adopt, govern, and protect AI agents and applications throughout their lifecycle. The platform provides capabilities for AI discovery, risk assessment, automated red teaming, runtime protection, and AI detection and response within a unified solution. Organizations can inventory AI assets, map models and system prompts, monitor policy compliance, and gain visibility into AI usage across the enterprise. Lasso focuses on intent-based security, analyzing the behavior and objectives of AI systems rather than relying solely on traditional rule-based approaches. Its platform helps organizations address risks such as prompt injection, model vulnerabilities, unauthorized AI usage, and evolving threats targeting agentic systems. By combining governance, security monitoring, and proactive protection, Lasso enables enterprises to scale AI adoption while maintaining strong security and compliance standards. -
15
General Analysis
General Analysis
General Analysis is an AI security platform that helps security teams adversarially test, monitor, and protect AI agents and systems in production. It is built to help organizations understand AI risk, prevent incidents, and secure real AI deployments across employee copilots, coding agents, customer support agents, healthcare assistants, legal assistants, financial copilots, creative pipelines, and other agentic workflows. It maps AI applications and agents across prompts, retrieval, tools, MCP servers, browser actions, permissions, repositories, cloud accounts, SaaS workflows, and business processes, then generates context-aware attacks that expose system-level risks. Its automated red teaming uses attacker models that adapt to target responses and produce multi-step exploit chains, helping teams uncover vulnerabilities that static prompt sets or endpoint-only tests may miss. -
16
Vulnify
Vulnify
Vulnify is runtime authorization for AI agents. Before a sensitive tool call runs, your code calls check() and gets ALLOW, REVIEW or BLOCK, with a 0-100 risk score and the reasons: action, data sensitivity, destination, volume. REVIEW pauses only that action until a person approves. Start in monitor mode, fail closed by default. Policies as code, Node and Python SDKs (MIT) with LangChain, MCP, CrewAI and LangGraph adapters, and a hash-chained audit log with JSON/CSV export. Free plan available.Starting Price: Free plan available -
17
TrojAI
TrojAI
TrojAI is an AI security platform that helps organizations deploy and manage AI agents and applications with greater confidence and protection. The platform focuses on identifying vulnerabilities, preventing prompt injection attacks, safeguarding sensitive data, and securing AI behavior across enterprise environments. TrojAI provides both build-time and runtime security solutions that help organizations assess AI models and protect applications from emerging threats. Its technology continuously monitors AI interactions to detect unsafe actions, unauthorized access attempts, and malicious manipulations. The platform supports compliance with leading security frameworks and standards while integrating across different models, cloud providers, and enterprise infrastructures. Designed for enterprise-scale deployments, TrojAI enables organizations to innovate with AI while maintaining strong governance and security controls. -
18
Straiker
Straiker
Straiker is an AI-native security platform built specifically to protect enterprise AI applications and autonomous agents, focusing on the emerging risks of “agentic AI” systems that interact with tools, APIs, and sensitive data. It provides full visibility and control across the entire AI stack by analyzing behavioral signals from models, prompts, tools, identities, and infrastructure, enabling real-time detection and prevention of AI-specific threats such as prompt injection, privilege escalation, data exfiltration, and malicious tool usage. It combines continuous discovery, adversarial testing, and runtime protection through core components like Discover AI, Ascend AI, and Defend AI, which together identify all active agents, simulate attacks to uncover vulnerabilities, and enforce real-time safeguards during execution. Its multi-layered architecture captures deep contextual signals across user interactions, networks, and agent workflows. -
19
CloudEagle.ai
CloudEagle.ai
CloudEagle.ai is an AI-powered SaaS Management, AI Governance, and SaaS Security platform that gives enterprises one command center to discover, secure, govern, and optimize their entire SaaS and AI stack, including AI usage control and both human and non-human identities. CloudEagle governs applications, identities, and non-human identities (service accounts, bots, API keys, AI agents) continuously, rationalizing redundant tools and tracking security posture against frameworks like NIST 800. Onboarding takes 30 minutes; savings and governance start day one. To date: $50B+ in spend processed, $3B+ saved. With 500+ integrations, CloudEagle eliminates shadow SaaS and AI, enforces AI usage policies, and secures non-human identities. Slack-enabled, no-code workflows automate onboarding/offboarding, access reviews, license harvesting, and just-in-time access, while an autonomous agent triggers renewals and routes approvals through Slack, Jira, or ServiceNow.Starting Price: $2000/month -
20
JetStream Security
JetStream
JetStream Security is a security-first AI governance platform designed to give enterprises full visibility, control, and accountability over their AI systems by turning them from opaque, fragmented tools into managed, traceable infrastructure. It acts as a centralized control plane that connects identity, runtime governance, observability, and financial oversight into a single system, allowing organizations to “see every AI action, tie actions to accountable owners, [and] keep workflows inside approved boundaries” while enforcing policy at runtime. It introduces agentic identity, binding human, agentic, and non-human identities to specific actions and access permissions, ensuring every invocation, tool call, or workflow can be traced and governed through least-privilege access principles. Through continuous runtime governance, JetStream compares live AI behavior against approved blueprints, using immutable logging and real-time observability to detect drift. -
21
Onyx Security
Onyx Security
Onyx is a secure AI control plane for discovering, protecting, governing, optimizing, and measuring AI agents and models across the enterprise. It gives security, governance, and AI teams visibility into sanctioned and shadow AI across SaaS, cloud, endpoints, and code, including prompts, responses, and agent actions. AI Security helps strengthen posture, identify vulnerabilities, and enforce real-time safeguards against threats and misuse, while AI Governance supports security standards and regulatory requirements with opt-in coverage and policy controls defined in natural language. AI Orchestration reduces friction when setting up agents and MCPs and helps optimize for cost, accuracy, and latency. AI ROI measures adoption, sets goals, and tracks outcomes across departments. The Onyx Guardian Agent acts as a supervisory AI that continuously identifies risks and remediates issues across the platform, helping organizations manage large numbers of agents at scale. -
22
Opal Zero
Opal Security
Opal Zero is a just-in-time access governance platform for AI agents that inventories every agent, maps it to an accountable owner, decides each access request, and enforces the decision in the MCP gateway already in place. It gives organizations one inventory across identity providers and AI platforms such as Okta, Entra, Anthropic, OpenAI, Bedrock AgentCore, and Cursor, showing what every agent can access and who owns it. Risk Center surfaces access that is off-purpose, unowned, or standing and routes issues to the appropriate owner with an inline fix. Paladin evaluates requests using policy and context, identifies the least-privileged path, respects owner boundaries, and shows the reasoning behind each decision. Policy Insights uses real agent behavior to identify unused access and opportunities to improve access policy instead of relying on one-off remediation. Gateway Enforcement writes approved decisions as scoped, time-bound policy into existing gateways. -
23
AI Security Guard
AI Security Guard
AI Security Guard is a multi-faceted platform for securing autonomous AI, combining a protection SDK, product tooling, education, and original research on the agentic future. - Protection SDK: Integration-friendly API wrapper designed to shield AI agents from jailbreaks, prompt injection, and other harmful content before it reaches your models. - AgentGuard360: Built on the API: Intercepts AI traffic in real time before malicious content reaches your agents. Two-tier content scanning, supply chain protection, and device hardening in one tool. Privacy-first: Content stays local unless you request premium analysis. - Research: Original analysis on the autonomous AI future and the security, privacy, and safety issues that follow, including reports like Shipping the Future. -
24
CyCraft XecGuard
CyCraft
XecGuard is CyCraft’s LLM Firewall for trustworthy, agentic AI, designed to protect enterprise AI systems from prompt injection, jailbreak, prompt extraction, data leakage, unsafe outputs, and agentic workflow risks. Built on CyCraft’s red teaming and blue teaming experience across government, finance, and high-tech manufacturing, XecGuard goes beyond model-level defenses by combining AI guardrails, cybersecurity controls, compliance protection, and risk response strategies for real-world enterprise AI adoption. It is positioned as a plug-and-play LoRA security module that can strengthen LLM defenses without requiring changes to the underlying model architecture, helping teams add protection quickly while preserving performance. XecGuard is built on proprietary security datasets and multi-stage fine-tuning techniques, enabling LLMs to better resist adversarial prompts, malicious manipulation, and attempts to extract protected instructions or sensitive information. -
25
Permiso
Permiso Security
Permiso is an identity security platform that secures human, non-human, and AI identities across cloud, SaaS, and on-premises environments. The platform is built around its Universal Identity Graph, which connects identities to credentials, machines, agents, permissions, and runtime activity to provide continuous visibility across authentication boundaries. Permiso helps organizations discover identities, evaluate identity risk, detect threats, and defend against account compromise, insider threats, and attacks targeting AI agents and non-human identities. The platform combines identity discovery, posture management, runtime monitoring, threat detection, and response capabilities into a single identity security solution. It continuously analyzes identity behavior, permissions, tool calls, API activity, and machine interactions to identify suspicious activity before it becomes an incident. -
26
AIM Intelligence
AIM Intelligence
AIM Intelligence is an enterprise AI security platform built to keep AI under control as agents make decisions, call APIs, and take actions across real business systems. It attacks AI before real attackers do and enforces real-time guardrails to keep every agent operating within enterprise policies. Its integrated solutions cover automated AI red teaming, real-time guardrails, and security framework consulting, helping organizations resolve complex AI risks across the full development and production lifecycle. Stinger automates AI vulnerability discovery by generating millions of attack scenarios, supporting end-to-end agentic red teaming beyond prompt-level attacks, testing across text, image, audio, video, and physical AI, and enabling business logic-based custom vulnerability testing. Starfort enforces real-time AI guardrails by detecting and protecting sensitive data such as PII and trade secrets, controlling abnormal API calls from autonomous agents. -
27
The MCP Census
MCP Census
The MCP Census is a web-based evidence-checking service for developers and teams that use Model Context Protocol (MCP) servers. It compares server listings with public signals such as repository identity and status, package availability, hosted endpoint health, registry records, and vulnerability advisories. Users can look up a server or submit an MCP configuration and receive PASS, REVIEW, BLOCK, or UNKNOWN results under a versioned policy, with reasons and supporting evidence. The service is accessible through a website, REST API, and remote MCP server, and can be used in agent workflows and CI checks for configuration changes. Setup guides connect it to coding agents and developer tools. MCP Census is an initial public-evidence gate, not a malware scanner, penetration test, or guarantee that a server is safe to run.Starting Price: $0 -
28
Enkrypt AI
Anaconda
Enkrypt AI is an agentic AI security and compliance platform designed to protect AI applications, models, agents, and their interactions throughout deployment. The platform combines continuous red teaming, real-time guardrails, monitoring, and policy enforcement to help organizations identify and mitigate AI security, safety, compliance, and brand risks. Enkrypt AI dynamically tests AI systems with use-case-specific attacks to uncover issues such as prompt injection, jailbreaking, data leakage, hallucinations, bias, harmful content, model drift, and unsafe agent actions. Real-time guardrails analyze AI interactions and block threats as they occur while adapting to changing prompts and emerging risks. Its compliance capabilities translate internal policies and external regulations into automated controls while producing evidence that organizations can use for audits and governance. -
29
Peta
Peta
Peta is an enterprise-grade control plane for the Model Context Protocol (MCP) that centralizes, secures, governs, and monitors how AI clients and agents access external tools, data, and APIs. It combines a zero-trust MCP gateway, secure vault, managed runtime, policy engine, human-in-the-loop approvals, and full audit logging into a single platform so organizations can enforce fine-grained access control, hide raw credentials, and track every tool call made by AI systems. Peta Core acts as a secure vault and gateway that encrypts credentials, issues short-lived service tokens, validates identity and policies on each request, orchestrates MCP server lifecycle with lazy loading and auto-recovery, and injects credentials at runtime without exposing them to agents. The Peta Console lets teams define who or which agents can access specific MCP tools in specific environments, set approval requirements, manage tokens, and analyze usage and costs.Starting Price: Free -
30
Bevel
Bevel
Bevel is a vendor-agnostic, Git-backed control plane for enterprise AI agents, where an organization’s agents, context, skills, tools, permissions, and identities are defined as files the company owns in its own infrastructure and served to any agent runtime over MCP. Context is stored as typed knowledge nodes with provenance for every fact, including where it came from, who last changed it, and when it was verified, then compiled into a graph that can be traversed, updated, and used for dashboards. Skills are written as plain Markdown procedures that process owners can read, review in diffs, and port across runtimes. Tool manifests define available capabilities, while secrets stay in a vault and access rules determine which agents may read specific files or call endpoints. Each agent has its own identity, credentials, and scope so actions remain attributable. -
31
Amplify Security
Amplify Security
Amplify Security created the agentic security harness, a new category of application security built for how software is actually written now, including the surge of AI-generated code. Rather than flagging problems after the fact, Amplify works autonomously inside the CI/CD pipeline to surface and remediate vulnerabilities before they ship. It deploys in the cloud or on-premises and fits existing developer workflows, giving security and engineering teams coverage that keeps pace with modern, high-velocity development. -
32
Bitdefender VPN for AI Agents
Bitdefender
Bitdefender VPN for AI Agents is an installable macOS utility that routes network requests from supported AI agents through Bitdefender VPN servers. It connects Claude Desktop, Cursor, Codex, and OpenCode through Bitdefender MCP tools. Each routed prompt receives a separate encrypted connection and isolated container, which closes when the prompt ends; users can select an exit location for regional testing. The product is intended for individual developers and freelancers using agents for web research, quality assurance, and comparison tasks. It is not a device-wide VPN: traffic outside the supported agent tools is not covered, and the VPN does not conceal prompts from the AI service provider. The beta installer requires macOS 13 or later on Apple silicon; Intel Macs are not supported. The vendor says Windows support is planned. -
33
Defakto
Defakto
Defakto secures every automated interaction by issuing short-lived, verifiable identities to non-human actors such as services, pipelines, AI agents, and machines, eliminating static credentials, API keys, and standing privileges. Their unified non-human identity and access management solution enables discovery of unmanaged identities across cloud, on-premises, and hybrid environments, issuance of dynamic identities at runtime tied to policy, enforcement of least-privilege access, and full audit-ready logging. The product consists of modules; Ledger for continuous discovery and governance of non-human identities; Mint for automated issuance of purpose-bound, ephemeral identities; Ship for secretless CI/CD workflows where hard-coded credentials are removed; Trim for automatic right-sizing of access and removal of over-privileged service accounts; and Mind for securing AI agents and large-language models with the same identity model used for workloads. -
34
EarlyCore
EarlyCore
EarlyCore is a security platform built for AI agents. It automates pre-production attack testing, real-time monitoring, and compliance reporting across the full agent lifecycle. Scans agents against thousands of attack scenarios covering prompt injection, jailbreaking, data exfiltration, tool misuse, and supply chain threats. In production, tracks every agent action, establishes behavioral baselines, and flags anomalies in real time. Alerts push to Slack, email, or webhooks. Compliance docs generate automatically, mapped to ISO 42001, NIST AI RMF, EU AI Act, SOC 2, and GDPR. Always audit-ready. Deploys in 15 minutes with zero code changes. Integrates with AWS Bedrock, Gemini Enterprise Agent Platform, LangChain, and more. Multi-tenant support for agencies and MSSPs. Built for security teams, agencies, and MSSPs securing AI agents at scale.Starting Price: $100/month -
35
Secure Traces
Secure Traces
Secure Traces is an AI-first enterprise technology company focused on agentic AI, healthcare and pharmaceutical modernization, cybersecurity, cloud infrastructure, and enterprise applications. Its services include autonomous AI agents, LLM pipelines, AI governance, 24/7 security operations, threat hunting, secure cloud modernization, Oracle platforms, and operational technology security. The company also develops healthcare, pharmacy, payer, and insurance technology solutions designed for regulated environments. Secure Traces supports HIPAA and GxP-aligned workflows and provides cybersecurity services mapped to frameworks such as MITRE. Its delivery model covers assessment, strategy, implementation, monitoring, response, and continuous optimization across complex enterprise environments. -
36
Archestra
Archestra
Archestra is an open source, self-hosted AI platform for deploying and governing agents across an organization. It provides agentic chat for non-developers, apps and skills, shared projects, a server-side agent runtime, MCP orchestration, permission-aware RAG, LLM and MCP proxies, security guardrails, and observability in one platform. Users sign in with SSO, and every tool call runs under that person’s own identity rather than a shared service account. Projects keep chats, files, scheduled tasks, and instructions together, while agents run in sandboxed containers and can start from schedules, emails, or webhooks. MCP servers run in the organization’s own Kubernetes environment and move through security-reviewed promotion flows with separate credentials and network policies. Knowledge bases can connect Confluence, Jira, drives, and internal documents while preserving source-system ACLs, so users only retrieve content they are already allowed to access.Starting Price: Free -
37
Tines 3B
Tines
Tines 3B is an AI-native intelligent workflow platform that provides one environment to deliver AI agents, apps, and automation faster, safely, and at scale. Teams can start with a natural-language prompt, describe a process in their own words, brainstorm with a connected LLM, or build workflows directly in code with Git integration and native branching. It proposes tests as users build, generates dummy data when needed, and asks before using live data or applications. Dedicated Spaces combine the right connectors, skills, and permissions, while LLM Skills help standardize how builds happen across teams. Every workflow step executes in an isolated sandbox, and credentials are injected at runtime through a transparent proxy so secrets are never exposed to builders, AI, or stored code. Workflows can run self-hosted, on-premises, or in hybrid environments.Starting Price: Free -
38
Amazon Bedrock AgentCore
Amazon
Amazon Bedrock AgentCore enables you to deploy and operate highly capable AI agents securely at scale, offering infrastructure purpose‑built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real‑world deployment. It works with any framework and any foundation model in or outside of Amazon Bedrock, eliminating the undifferentiated heavy lifting of specialized infrastructure. AgentCore provides complete session isolation and industry‑leading support for long‑running workloads up to eight hours, with native integration to existing identity providers for seamless authentication and permission delegation. A gateway transforms APIs into agent‑ready tools with minimal code, and built‑in memory maintains context across interactions. Agents gain a secure browser runtime for complex web‑based workflows and a sandboxed code interpreter for tasks like generating visualizations.Starting Price: $0.0895 per vCPU-hour -
39
Proofpoint AI Security
Proofpoint
Proofpoint AI Security is a unified platform designed to help enterprises govern, monitor, and protect the use of AI systems, large language models, and autonomous agents across the organization. It provides visibility into both sanctioned and unsanctioned AI usage, enabling security teams to discover shadow AI tools, observe prompts and responses, and understand how AI interacts with sensitive data in real time. It applies intent-based detection and behavioral analysis to identify anomalies, prompt injection attempts, and risky interactions, while enforcing policies directly during runtime to prevent data leakage and misuse. It reconstructs full AI transactions, from user input to agent actions and outcomes, giving organizations complete traceability and audit readiness. With controls that extend across endpoints, browsers, and AI agent connections, it enables granular access governance and ensures that AI systems only access and share appropriate information. -
40
Vokal
Vokal
Vokal is a collaboration space for teammates and AI agents, built so founders and product teams can run agent work where the team can see it, review it, and reuse what matters. It gives human-agent work a shared place to start, move, stay visible, and become reusable context, instead of leaving agent runs, assumptions, and decisions trapped in private sessions across Claude Code, Codex, Cursor, ChatGPT, or other tools. Vokal connects channels, tasks, docs, files, apps, agents, memory, Knowledge Base, identity, access, runtime, and event logs around the work, helping teams keep output aligned, reviewed, controlled, and reusable. Agents can work in shared channels with named owners, roles, instructions, sources, statuses, permission scopes, app grants, memory scope, local project-file grants, and visible activity. Teams can use pre-built roles for engineering, product, growth, support, operations, research, and customer work, or bring their own local Codex, Claude Code, Hermes, etc.Starting Price: $20 per month -
41
MudraID
Decryptogen
MudraID is a cloud-based identity and trust platform for teams building AI agents, APIs and agent-enabled services. It gives agents distinct cryptographic identities, supports scoped and time-limited delegation, and checks requests against policy, trust and revocation state at action time. Teams can issue, rotate, suspend and revoke agent credentials, enforce per-action permissions, and trace delegation chains. The platform supports OAuth 2.0, OIDC, JWT/JWKS, MCP authorization and signed A2A Agent Cards. Developer options include a Python agent SDK and FastAPI/Starlette middleware; a hash-chained audit trail records decisions and related events. MudraID is intended for product, platform, security and IAM teams that need to govern agent-to-agent and agent-to-service interactions.Starting Price: $99/month -
42
Solid
Codapt lnc
Solid is the operating system for always-on AI agents. This AI agent infrastructure runs agent software, allocates resources, connects agents to external systems, and applies shared controls. It provides a persistent runtime, memory, approved computers, identities, accounts, credentials, phone numbers, system access, and controlled spending so work can continue after a chat closes. Agents can use APIs, MCP, code, browsers, desktops, phones, and software interfaces, subject to customer permissions and system policies. Solid can build and test a missing integration, app, API, dashboard, or report needed to finish the job. Customer-set budgets and approvals govern provisioning and purchases. Solid provides agent orchestration plus visibility into available activity, code, resource state, costs, logs, and exceptions, with policies routing sensitive, unclear, or out-of-policy decisions to people. Builders can embed a Solid-powered agent through its API.Starting Price: $40/month/user -
43
InstaVM
InstaVM
InstaVM is a production sandbox and cloud built for AI agents, giving agents instant computers with runtime, storage, networking, secrets, and policy. It goes beyond basic sandboxes by running untrusted code inside hardware-isolated real VMs rather than containers, helping teams give AI agents secure execution environments with full Linux filesystems, networking, package management, RESTful API access, and persistent state. InstaVM supports snapshots, allowing users to fork any sandbox and rewind any run, while persistent volumes keep state beyond each execution. Egress control lets teams allowlist what calls home, secrets injection and Vault help protect sensitive credentials from prompt injections, and public URL deploys can expose any port to the public web. It is built for agent patterns such as code interpreters, deploy agents, deep research agents, AI evaluations, reinforcement learning, computer use, and vibe coding apps.Starting Price: $100 per month -
44
Mountain Theory
Mountain Theory
Mountain Theory is the antivirus for AI. It checks every action an AI agent takes before it runs, against rules written in plain English, then allows it, holds it for a person, or blocks it. No signatures to update. Every decision is logged for your auditor. It works with any AI you already use, from coding agents like Claude Code and OpenAI Codex to models in your own environment or the cloud. When an agent tries to work around a block, the workaround is stopped too. When an agent drifts off the task it was given, that is caught. New bad behavior is stopped the day it appears, with no new rule needed. It keeps personal data from leaving your environment and blocks instructions hidden in emails and documents. Rules are written in plain English, with no code. Every decision is logged for your auditor. It works with any AI you already -
45
GuardionAI
GuardionAI
GuardionAI is an Agent and MCP Security Gateway that provides unified security for AI agents and Model Context Protocol tools operating on enterprise data. It sits in the execution path to discover, redact sensitive data, enforce protection, and give teams visibility into actions that traditional SIEM, DLP, and identity layers cannot see. Every agent action is inspected, enforced, and logged at the protocol level across AI agents, LLM apps, RAG systems, chatbots, coding agents, MCP servers, internal tools, databases, operating systems, and cloud environments. GuardionAI protects against critical AI threats such as prompt injection, system override, web attacks, MCP tool poisoning, malicious code execution, NSFW content, PII and credential exposure, confidential data leakage, off-topic drift, and unauthorized access, mapped to OWASP LLM Top 10 and agentic AI threat frameworks. Its gateway provides four layers of protection. -
46
NVIDIA OpenShell
NVIDIA
NVIDIA OpenShell is an open, secure runtime for autonomous AI agents that governs how agents execute, what they can access, and where inference traffic goes. Security is enforced in the environment rather than inside the model or application: nothing is permitted by default, permissions are granted through policy, and enforcement happens outside the agent process so it cannot be bypassed through prompting. Each agent runs in an isolated sandbox with no direct network access, limited file access, and kernel-level monitoring of system calls. A gateway acts as the control plane, authenticating users, managing sandbox lifecycles, and delivering policies, settings, credentials, and inference configuration. A supervisor runs outside each sandbox, evaluates network requests against policy at the binary, destination, method, and path levels, and provides credentials only when allowed. -
47
OpenText Aviator Studio
OpenText
OpenText Aviator Studio is a no-code and pro-code platform for building, governing, connecting, deploying, and iterating enterprise AI agents. Designed for scale, security, and intelligent automation, it acts as an AI control plane for creating trusted agents across OpenText products and enterprise environments. Teams can rapidly design, test, and refine agents, develop multi-step workflows, chain reasoning, and deploy to different environments. Multi-agent choreography allows organizations to coordinate agents and systems across complex workflows, while a prompt library, reusable micro-capabilities, and standardized interfaces support consistent development and reuse. Aviator Studio includes enterprise-grade governance, permissions, policy enforcement, identity management, audit logging, data isolation, and guardrail settings to help prevent prompt injection and protect sensitive information. -
48
runx
0state
runx is an open-source runtime and command-line tool for creating, discovering, and executing governed skills for AI agents. Developers can define bounded workflows, grant specific credentials and permissions, and run skills locally with their own provider accounts. Runs can pause for approval or missing input, then resume while retaining a signed receipt that can be inspected and verified. Skills can be installed from a public registry and used with compatible agents such as Claude Code, Cursor, and Codex. An optional hosted service adds managed OAuth connections, scoped grants, API-based run submission and inspection, approval handling, and receipt notarization. The CLI can also operate locally or in a self-hosted environment. runx is intended for developers and platform teams building and operating AI-agent workflows that need explicit authority boundaries and auditable execution.Starting Price: $0 -
49
OpenLegion
OpenLegion
OpenLegion is a production-grade AI agent framework and platform for building an AI workforce by describing the team you want. Tell OpenLegion “I want a marketing agency,” “I want a sales team,” or “I want a research desk,” and it deploys the agent stack with roles, budgets, permissions, and secure credential controls built in. Instead of stopping at chat, OpenLegion is designed for real workflows; agents can browse websites, fill out forms, write and run code, send emails and messages, manage files and folders, research and summarize, scrape data, qualify sales leads, process spreadsheets, post to social media, monitor for changes, and trigger workflows through Slack, Telegram, or Discord. Each agent runs in its own isolated container with per-agent budgets, tool permissions, persistent memory, MCP-compatible skills, and vault-secured credentials that agents never touch.Starting Price: $19 per month -
50
Pi
Pi Security
Pi is an agentic product security platform that builds institutional security memory so organizations can find, fix, and prevent recurring vulnerabilities without slowing development. It continuously ingests codebases, past incidents, pentest reports, tickets, and other security history into a living inventory, giving the system context about how the organization builds and secures software. When a vulnerability is found, Pi traces it to its architectural root cause, searches for variants across the codebase, and helps close the entire class of issue rather than treating each finding independently. Remediation is generated in the context of the organization’s languages, architecture, and conventions, then delivered directly into developer workflows. What the system learns becomes prevention guardrails that can be applied in IDEs and pull requests during design and coding, blocking known insecure patterns before they reach production.
