Alternatives to Kastra
Compare Kastra alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Kastra in 2026. Compare features, ratings, user reviews, pricing, and more from Kastra competitors and alternatives in order to make an informed decision for your business.
-
1
BAND
BAND.ai
BAND builds enterprise-grade interaction infrastructure for distributed AI agents. Its platform enables real-time, multi-peer collaboration across agents and humans, while providing a runtime control plane that enforces policy, authority boundaries, and visibility across heterogeneous systems. BAND supports developers, engineering teams, and enterprise platform leaders operating multi-agent ecosystems across internal systems, SaaS platforms, and partner environments. -
2
Barndoor.ai
Barndoor.ai
Barndoor is a data and access management layer designed to secure how artificial intelligence systems interact with enterprise data and infrastructure. It acts as a centralized control plane that governs AI agents and applications, allowing organizations to define policies, enforce access rules automatically, and maintain full visibility over how AI tools operate across business systems. Instead of relying only on traditional identity-based permissions, Barndoor introduces context-aware governance, enabling administrators to control what actions an AI agent can perform based on factors such as the user operating the agent, the system being accessed, the type of data involved, and the specific task being attempted. It evaluates every AI request in real time and enforces policies before an action is executed, preventing unsafe or unauthorized operations from reaching internal systems or modifying sensitive information.Starting Price: $500 per month -
3
Preloop
Preloop
Preloop is the open source AI agent control plane for agents that take real actions. It combines an MCP firewall for tool access, an AI model gateway for cost, safety, and attribution, policy-as-code with human approvals, runtime session observability, and audit trails in a single self-hostable platform. AI agents can deploy code, change infrastructure, move money, touch production data, and burn model spend in seconds, so Preloop helps teams control what agents can do, how much they spend, and which actions require human approval. It works with OpenClaw, Hermes, Claude Code, Codex CLI, Cursor, Gemini CLI, Windsurf, Cline, OpenCode, and any MCP-compatible agent or managed runtime. Access rules can inspect arguments and context, not just tool names, with CEL expressions for fine-grained conditions. Teams can start with observability, then layer in approvals and deny rules without SDKs or invasive app changes.Starting Price: $290 per month -
4
Agent Control
Agent Control
Agent Control is the open source control plane for AI agents, built to establish a new standard for governing agent behavior at scale. It solves the problem of scattered, hardcoded checks by giving teams a centralized governance layer with step-level enforcement that can be managed from a single control plane and updated in real time without touching agent code. Developers can make any function governable by adding the control() decorator, turning meaningful decision points inside an agent into independently governed control points with their own policies. When a decorated function executes, Agent Control evaluates the input or output against the active policy and returns a decision: deny, steer, warn, log, or allow. If the decision is denied, the SDK raises a ControlViolationError before the unsafe action can proceed. Policies are decoupled from code, so developers decide where to place control hooks while policy teams decide what those hooks enforce.Starting Price: Free -
5
iDox.ai Guardrail
iDox.ai
iDox.ai Guardrail is a real-time AI security layer that prevents sensitive data exposure in generative AI workflows. It operates at the endpoint to intercept prompts, file uploads, and AI interactions before data leaves the user’s device. Guardrail applies policy-based controls to detect and block sensitive data such as PII, PHI, PCI, intellectual property, and confidential business information. Unlike traditional data loss prevention (DLP) tools, Guardrail is built specifically for AI usage. It monitors how users interact with AI tools like ChatGPT, Microsoft Copilot, and Claude, and enforces protection in real time. Key capabilities include: - Real-time prompt and file monitoring - AI-aware sensitive data detection - On-the-fly anonymization and sanitization - Protection against AI agent risks (e.g., unauthorized file access like OpenClaw) - Website whitelisting and policy enforcementStarting Price: $9/device/month -
6
Pushary
Pushary
Pushary sends a push to your phone when your AI agents need you. Claude Code, Codex, Cursor, and other agents pause for approval on risky actions like shell commands, file writes, and deploys. Pushary turns each pause into a notification you approve or deny from your lock screen, so your agents keep working while you are away from your desk. Set permission policies per tool: auto-approve safe actions, require approval for risky ones, and keep a full audit log of every question and answer. Run a whole fleet of agents and track them in one place. Pushary also powers push notifications for e-commerce and SaaS: subscriber capture, campaigns, automation flows, templates, and analytics. Connect any agent through a simple CLI or MCP. Native iOS and Android apps included.Starting Price: $9.99/month -
7
Prisma AIRS
Palo Alto Networks
Prisma AIRS AI Runtime Security is a purpose-built solution designed to protect LLM-powered applications, agents, models, and data during live operation, delivering real-time visibility, assurance, and governance across the entire AI lifecycle. It monitors AI behavior continuously, enforcing safeguards that detect and block threats traditional security tools cannot see, such as prompt injection, malicious code, toxic outputs, data leakage, and unsafe or unauthorized actions. It enables organizations to discover all AI assets in use, including shadow AI, and understand how agents, apps, and models interact across environments. It continuously assesses risk by testing AI systems, controlling permissions, and tracking security posture in real time, while integrating controls that prevent manipulation and exposure during runtime interactions. With adaptive protection, it defends against evolving and zero-day threats, using real-time analysis of inputs, outputs, and execution. -
8
Lunar.dev
Lunar.dev
Lunar.dev is an AI gateway and API consumption management platform that gives engineering teams a single, unified control plane to monitor, govern, secure, and optimize all outbound API and AI agent traffic, including calls to large language models, Model Context Protocol tools, and third-party services, across distributed applications and workflows. It provides real-time visibility into usage, latency, errors, and costs so teams can observe every model, API, and agent interaction live, and apply policy enforcement such as role-based access control, rate limiting, quotas, and cost guards to maintain security and compliance while preventing overuse or unexpected bills. Lunar.dev's AI Gateway centralizes control of outbound API traffic with identity-aware routing, traffic inspection, data redaction, and governance, while its MCPX gateway consolidates multiple MCP servers under one secure endpoint with full observability and permission management for AI tools.Starting Price: Free -
9
Enkrypt AI
Enkrypt AI
Enkrypt AI is an enterprise AI security, compliance, and governance platform purpose-built to secure LLMs, AI agents, multimodal systems, and MCP workflows. Serving enterprises in finance, healthcare, insurance, and government, Enkrypt AI helps organizations ship fast, ship safe, and stay ahead. The platform covers the full AI security lifecycle: Guardrails: Ultra-low latency (sub-50ms) policy-based guardrails prevent prompt injection, sensitive data exposure, unsafe outputs, and non-compliant agent behavior in real time. Red Teaming: Policy-driven, multimodal attack simulation across LLMs and AI agents before deployment. MCP Security: MCP Scan Hub and Secure MCP Gateway protect MCP servers, tools, and agent toolchains end-to-end. Compliance: Continuous monitoring against NIST AI RMF, OWASP LLM Top 10, EU AI Act, HIPAA, and FINRA. ISO 27001 & SOC 2 Type II certified. Gartner Cool Vendor 2025. -
10
LangProtect
LangProtect
LangProtect is an AI-native security and governance platform that protects LLM and Generative AI applications from prompt injection, jailbreaks, sensitive data leakage, and unsafe or non-compliant outputs. Built for production GenAI, it enforces real-time runtime controls at the AI execution layer by inspecting prompts, model responses, and tool/function calls as they happen. This allows teams to block high-risk behavior before it reaches end users, triggers downstream actions, or exposes confidential data. LangProtect integrates into existing LLM stacks via an API-first approach with minimal latency and supports cloud, hybrid, and on-prem deployments for enterprise security and data residency needs. It also secures modern architectures such as RAG pipelines and agentic workflows with policy-driven enforcement, continuous visibility, and audit-ready governance. -
11
Tuning Engines
CerebrixOS
Tuning Engines is a unified AI control and governance layer for teams building production intelligence across models, agents, tools, and fine-tuned systems. It brings together the full AI lifecycle in one governed platform: inference, model routing, fallback policies, fine-tuning jobs, datasets, evaluations, model imports and exports, custom models, agents, MCP servers, reusable skills, guardrails, AGT YAML policies, data capture, runtime traces, usage analytics, API keys, billing, team roles, and integrations. Developers get OpenAI-compatible APIs, Anthropic-compatible routes, CLI workflows, MCP access, coding-agent integrations, and resource catalogs for models, agents, tools, and skills. Teams can connect Claude Code, OpenCode, Aider, Cline, Roo, Continue.dev, Cursor, VS Code, Windsurf, and other AI workflows through a single governed platform. -
12
OpenBox
OpenBox
OpenBox is an enterprise-grade AI governance platform designed to make AI systems transparent, auditable, and safe to deploy at scale by enforcing real-time oversight across every agent action and system interaction. It provides a unified governance layer that connects identity, policy, risk, and compliance into a single runtime system, eliminating the fragmentation typically found across multiple tools and enabling organizations to standardize control over AI behavior. It integrates directly into existing AI workflows through a lightweight SDK, requiring no architectural changes, and immediately delivers full visibility into how AI agents operate, make decisions, and interact with other systems. OpenBox monitors and evaluates every action before execution, applying policy enforcement and regulatory checks in real time to prevent non-compliant or risky behavior rather than reacting after errors occur.Starting Price: Free -
13
Superagent
Superagent
Superagent is an open source AI safety and agent development platform that helps developers and organizations build, deploy, and protect AI-driven applications and assistants by embedding safety guardrails, runtime security, and compliance controls into agent workflows. It provides purpose-trained models and APIs (such as Guard, Verify, and Redact) that block prompt injections, malicious tool calls, data leakage, and unsafe outputs in real time, while red-teaming tests probe production systems for vulnerabilities and deliver findings with remediation guidance. Superagent integrates with existing AI systems at inference and tool-call layers to filter inputs/outputs, remove sensitive data like PII/PHI, enforce policy constraints, and stop unauthorized actions before they occur, offering unified observability, live trace logs, policy controls, and audit trails for security and engineering teams.Starting Price: Free -
14
elsai Foundry
elsai
elsai Foundry is a governance-first platform to design, deploy, and operate AI agents for regulated enterprise workflows. It embeds compliance guardrails, PHI/PII redaction, prompt management, and real-time ARMS observability into every workflow. Its architecture spans multi-agent orchestration, policy and approvals enforcement, human-in-the-loop controls, domain intelligence, and pre-built agents across healthcare, life sciences, insurance, procurement, and supply chain. -
15
DueDel
DueDel
DueDel is an enterprise-grade intelligence platform that unifies AI risk assessment, AI guardrails, and data protection into one secure, compliant ecosystem. The AI Risk Assessment Tool converts complex data into decision-ready summaries, detects early risk signals, uncovers market trends, and delivers predictive insights for investors, executives, and compliance teams. The Data Protection Fabric ensures no sensitive data ever reaches AI models by applying encryption, tokenization, and redaction—maintaining full compliance with RBI, SEBI, DPDP, and internal policies. The AI Guardrail Gateway gives complete control over what AI sees and generates, blocking harmful prompts, preventing hallucinations, enforcing policy-based routing, and securing external LLM usage with audit-grade logs. Together, DueDel enables regulated enterprises to govern AI safely while making faster, smarter, and fully compliant financial decisions.Starting Price: $0 -
16
SurePath AI
SurePath AI
Ensure AI use adheres to corporate policy with our simple-to-implement AI governance control plane. Remove complexity, gain visibility, and securely increase AI adoption, with SurePath AI. Native integrations to your existing security solutions, private models, and enterprise data sources. SSO, SCIM, and SIEM are natively supported. Detect AI use at a network level. Control access and inspect requests for sensitive data leaks. Redact sensitive data found in requests to public models. In-line modification of requests enables productivity while mitigating risk. Redirect traffic to your private AI models. Leverage SurePath AI's private model access controls as your own internally branded enterprise AI portal. Policy-based controls enrich requests with only the enterprise data users are granted access to, giving meaningful responses based on relevant business context. Users' prompts are automatically enhanced to align output to enterprise objectives. -
17
JetStream Security
JetStream
JetStream Security is a security-first AI governance platform designed to give enterprises full visibility, control, and accountability over their AI systems by turning them from opaque, fragmented tools into managed, traceable infrastructure. It acts as a centralized control plane that connects identity, runtime governance, observability, and financial oversight into a single system, allowing organizations to “see every AI action, tie actions to accountable owners, [and] keep workflows inside approved boundaries” while enforcing policy at runtime. It introduces agentic identity, binding human, agentic, and non-human identities to specific actions and access permissions, ensuring every invocation, tool call, or workflow can be traced and governed through least-privilege access principles. Through continuous runtime governance, JetStream compares live AI behavior against approved blueprints, using immutable logging and real-time observability to detect drift. -
18
MintMCP
MintMCP
MintMCP is an enterprise-grade Model Context Protocol (MCP) gateway and governance platform that provides centralized security, observability, authentication, and compliance controls for AI tools and agents connecting to internal data, systems, and services. It lets organizations deploy, monitor, and govern MCP infrastructure at scale, giving real-time visibility into every MCP tool call, enforcing role-based access control and enterprise authentication, and maintaining complete audit trails that meet regulatory and compliance needs. Built as a proxy gateway, MintMCP consolidates connections from AI assistants like ChatGPT, Claude, Cursor, and others to MCP servers and tools, enabling unified monitoring, blocking of risky behavior, secure credential management, and fine-grained policy enforcement without requiring each tool to implement security individually. -
19
rawctx
rawctx
rawctx is an AI answer evidence layer for teams shipping customer-facing AI assistants, copilots, and agents. It records each answer with the approved meaning reference, source/context references, model-run metadata, trace IDs, correction history, and exportable proof bundles. Teams can audit why an AI answer was shown, which evidence and business definition it used, what changed after review, and whether trust proof status is anchored, pending, or local-only. rawctx supports answer audit logs, JSON/CSV/proof exports, source_ref evidence binding, and public or private verification workflows for high-stakes support, sales, finance, legal, and operations use cases.Starting Price: $9.99/1000logs -
20
OpenText Core DNS Protection
OpenText
OpenText Core DNS Protection is a cloud-native security solution that monitors and filters every DNS request to block threats before they reach your users or devices. It prevents malware infections by stopping access to malicious domains and Command and Control servers, reducing the risk of data exfiltration. The platform offers full visibility into DNS activity through detailed logs, giving security teams greater insight into network behavior and potential vulnerabilities. With agent-level intelligence, it detects unauthorized DNS servers, enforces policy across encrypted DNS traffic, and eliminates DNS leaks in real time. Deployment takes only seconds, and protection applies on any network—whether employees are in the office, at home, or on public Wi-Fi. By acting as a DNS firewall, OpenText Core DNS Protection closes critical visibility gaps left by legacy tools and strengthens organizational resilience against modern cyber threats. -
21
Veeam DataAI Command Platform is a unified platform for DataAI security, governance, privacy, compliance, and resilience. The platform is powered by Veeam DataAI Command Graph, which maps relationships across data, identities, systems, backups, and AI to create a single layer of intelligence. It helps organizations understand data exposure, identity risk, AI system activity, compliance requirements, and recoverability across complex environments. Veeam DataAI Command Platform supports capabilities for data exposure risk, AI agent governance, identity and access governance, privacy and compliance, and data resilience. Its AI agents help teams ask questions and get answers across their environment without manual searching or waiting on analysts. Built for the agentic era, Veeam DataAI Command Platform helps organizations reduce risk, respond faster, and maintain trust across data and AI systems.
-
22
Constellation
Constellation
Constellation is a corporate governance platform designed to enforce organizational rules and decision-making constraints in real time. It ensures that every action taken by employees, teams, or AI systems is checked against institutional policies before execution. The platform helps organizations maintain compliance, reduce risk, and improve decision speed without sacrificing oversight. By embedding governance directly into workflows, Constellation eliminates delays caused by manual approvals and fragmented coordination. It provides a structured system where decisions are both fast and accountable. -
23
asqav
asqav
asqav is an AI governance and security platform designed to make AI agents audit-ready by providing real-time monitoring, enforcement, and verifiable proof of every action taken by an agent. It introduces a lightweight SDK that allows developers to integrate governance directly into their agents in just a few lines of code, enabling continuous oversight across the full lifecycle of AI operations. It includes behavioral monitoring to detect issues such as drift, rate limits, and scope violations, along with advanced threat detection that identifies prompt injections, exposure of sensitive data, toxic outputs, and other risks. It enforces policy through configurable “policy gates,” which apply per-agent rules, preflight checks, and dynamic approvals before actions are executed, ensuring that agents operate within defined boundaries. asqav also provides automated incident response capabilities, including the ability to suspend, quarantine, or escalate risky agents.Starting Price: $39 per month -
24
WCAGdesk
SideLabs
WCAGdesk scans your site against WCAG 2.2 AA and builds a timestamped, tamper-evident audit trail — machine-readable proof for the EU Accessibility Act (EAA) and Germany's BFSG. Unlike overlay tools, WCAGdesk creates a verifiable, time-stamped record of your accessibility work that can withstand legal scrutiny. It generates a GitHub Action / SARIF report and a defensible accessibility statement. Free scan, no signup required. Paid plans start at €29 one-off for a full report, or €149/month for continuous monitoring. Key Features: - Automated WCAG 2.2 AA scanning with SARIF output - RFC 3161 timestamped audit trail (tamper-evident) - Accessibility Statement Generator (EN + DE) - GitHub Action integration for CI/CD pipelines - EAA / BFSG compliance documentation - Free scan with no account requiredStarting Price: Free -
25
Traccia
Algen AI
Traccia is an OpenTelemetry-native observability, governance, and policy enforcement platform for production AI agents. It gives engineering teams complete visibility into every LLM call, tool invocation, decision, token, and dollar spent across frameworks like LangChain, CrewAI, OpenAI Agents SDK, AutoGen, and LlamaIndex. Beyond tracing, Traccia helps organizations govern AI systems with runtime policies that can detect and block unsafe behavior, runaway costs, restricted model usage, and PII exposure before incidents reach production. Accurate cost attribution, agent health monitoring, a unified agent registry, and EU AI Act evidence generation make it suitable for enterprise deployments. With a lightweight open-source SDK and managed platform, Traccia enables teams to build, debug, monitor, and govern AI agents at scale without vendor lock-in, using standard OpenTelemetry instrumentation.Starting Price: $99/month -
26
iDox.ai Suite
iDox.ai
iDox.ai Suite is AI-powered redaction and data anonymization software that helps organizations identify, protect, and manage sensitive information across files at scale. It automatically detects and redacts PII, PHI, financial data, confidential business information, signatures, logos, and other regulated content in PDFs, scanned documents, spreadsheets, and more. Designed for legal, government, healthcare, life sciences, and enterprise organizations, iDox.ai Suite combines AI redaction, data anonymization, document comparison, and compliance reporting in one platform. It generates audit-ready reports, supports FOIA requests, prepares regulatory submissions, and secures sensitive data before sharing documents internally, externally, or with AI systems. By reducing manual review time and compliance risk, iDox.ai Suite helps organizations accelerate document workflows while maintaining privacy and regulatory compliance.Starting Price: $10/month -
27
Constellation Gate AI
Constellation Gate AI
Constellation Gate AI is a drop-in defense layer for AI agents, built to sit between the agent and the model while screening every request for attacks and leaks. Gate acts as an inline gateway for coding agents and model APIs, protecting workflows without requiring major code changes. Users can point existing tools such as Claude Code, Cursor, OpenClaw, Codex, or OpenCode at Gate and inherit prompt-injection defense, secret scanning, PII redaction, token optimization, and a verifiable audit trail. The platform is designed around three real risks: prompt injection, credential and PII leakage, and hijacked tool calls. Instead of relying on the model to defend itself, Gate blocks attacks before they reach the model, redacts secrets before responses return, and stops attacker-controlled tool outputs before an agent acts on them. Gate accepts the same calls an agent already makes, forwards them to the model, scans every call and response in both directions. -
28
Tenable One AI Exposure
Tenable
Tenable One AI Exposure is an agentless, enterprise-grade solution embedded within the Tenable One exposure management platform that provides visibility, context, and control over how teams use generative AI tools like ChatGPT Enterprise and Microsoft Copilot. It enables organizations to monitor user interactions with AI platforms, including who is using them, what data is involved, and how workflows are executed, while detecting and remediating risks such as misconfigurations, unsafe integrations, and exposure of sensitive information (like PII, PCI, or proprietary enterprise data). It also defends against prompt injections, jailbreak attempts, policy violations, and other advanced threats by enforcing security guardrails without disrupting operations. Supported across major AI platforms and deployed in minutes with no downtime, Tenable AI Exposure helps organizations govern AI usage as a core part of their cyber risk strategy. -
29
Vireo Sentinel
Vyklow
Vireo Sentinel is an AI visibility and governance platform. A lightweight browser extension monitors how your team uses ChatGPT, Claude, Perplexity, Gemini, and 40+ other AI platforms. When someone is about to share sensitive data, they see a real-time intervention with four options: cancel, redact, edit, or override with a business justification. Detection uses deterministic pattern matching across 100+ sensitive data types including personal information, financial data, credentials, and medical content. No AI is used for detection. Everything is processed in the browser - sensitive data never leaves the device. The admin dashboard shows usage patterns, risk trends, platform breakdowns, and activity heatmaps. One-click compliance reports map to EU AI Act, ISO 42001, and Australian Privacy Act requirements. Deploys in under 10 minutes via browser extension for Chrome, Firefox, and Edge.Starting Price: $55/month (5 Users) -
30
Oracle Advanced Security
Oracle
Encrypt application tablespaces to prevent out-of-band access to sensitive data using Oracle Advanced Security. Redaction policies prevent the proliferation of sensitive data and aid in compliance with data protection regulations. Transparent Data Encryption (TDE) stops would-be attackers from bypassing the database and reading sensitive information directly from storage by enforcing data-at-rest encryption in the database layer. Encrypt individual data columns, entire tablespaces, database exports, and backups to control access to sensitive data. Data Redaction complements TDE by reducing the risk of unauthorized data exposure in applications, redacting sensitive data before it leaves the database. Partial or full redaction prevents large-scale extraction of sensitive data into reports and spreadsheets. Encryption is implemented at the database kernel level, eliminating the need for any changes to applications. -
31
Superpowers
Superpowers
Superpowers is an open-source software development methodology and skills framework designed to improve how coding agents plan, build, test, and review software. The project gives AI coding tools a structured workflow that helps them clarify requirements before writing code. It supports agents such as Claude Code, Codex CLI, Codex App, Factory Droid, Gemini CLI, OpenCode, Cursor, and GitHub Copilot CLI. Superpowers guides agents through brainstorming, design approval, implementation planning, test-driven development, subagent-driven execution, code review, and branch completion. Its skills library emphasizes red-green-refactor testing, systematic debugging, isolated git worktrees, verification, and evidence-based completion. Superpowers helps developers turn AI coding agents into more disciplined engineering partners that follow repeatable processes instead of jumping straight into code.Starting Price: Free -
32
BlackRidge Transport Access Control
BlackRidge
Security is an arms race. Innovation happens simultaneously on the attack and protects sides of the environment. By authenticating identity and implementing security policy at the earliest possible time, on the first packet of a network session setup, BlackRidge provides deterministic, scalable, and cost-effective cyber defense. BlackRidge Transport Access Control (TAC), using our patented First Packet Authentication™, provides a new level of cyber defense for network and cloud resources. TAC operates pre-session, in real-time, before other security defenses engage. TAC is address and topology independent, supporting NAT and automatically adjusting to changing network topologies. Cyber-attacks are stopped dead in their tracks by preventing unauthorized users and attackers from performing reconnaissance of network and cloud resources, and by denying them the ability to communicate anonymously. -
33
nono
Always Further
nono is an open source, kernel-enforced sandbox for AI coding agents and LLM workloads. Unlike policy-based guardrails that intercept and filter operations, nono uses OS security primitives — Landlock on Linux and Seatbelt on macOS — to make unauthorised operations structurally impossible at the syscall level. Wrap any AI agent — Claude Code, OpenCode, OpenClaw, or any CLI process — with a single command. nono applies default-deny filesystem access, blocks destructive commands (rm, dd, chmod, sudo), isolates credentials and API keys, and cascades all restrictions to child processes. No escape mechanism exists once restrictions are applied. Built-in profiles get you running in seconds. Secrets inject securely from the system keystore and are zeroised on exit. Audit logging, atomic rollbacks, and Sigstore-attested policy signing are on the roadmap. Apache 2.0. From the creator of Sigstore. -
34
OneTrust AI Governance
OneTrust
OneTrust AI Governance is AI governance tool built to protect the ROI of AI by translating AI risk into enforceable controls, helping teams govern well and move fast. It aligns enterprise governance with technical reality so organizations can scale AI faster, reduce risk, and maintain trust as AI systems evolve in production. It helps teams catalog AI systems and assess risk by tracking models, datasets, agents, and vendors in a central inventory, assigning ownership and lifecycle status, and understanding component dependencies. It standardizes AI risk identification using global frameworks such as the EU AI Act, NIST, and ISO 42001, with automated workflows for risk tiering by use case, system, or component, plus mapped risk and control frameworks for ongoing compliance. OneTrust streamlines approvals, attestations, scoping, evidence collection, and audit-ready reporting through configurable intake and approval workflows. -
35
Akitra Andromeda
Akitra
Akitra Andromeda is a next-generation, AI-enabled compliance automation platform designed to streamline and simplify regulatory adherence for businesses of all sizes. It supports a wide range of compliance frameworks, including SOC 2, ISO 27001, HIPAA, PCI DSS, SOC 1, GDPR, NIST 800-53, and custom frameworks, enabling organizations to achieve continuous compliance efficiently. The platform offers over 240 integrations with major cloud platforms and SaaS services, facilitating seamless incorporation into existing workflows. Akitra's automation capabilities reduce the time and cost associated with manual compliance management by automating monitoring and evidence-gathering processes. The platform provides a comprehensive template library for policies and controls, assisting organizations in establishing a complete compliance program. Continuous monitoring ensures that assets remain secure and compliant around the clock. -
36
WrangleAI
WrangleAI
WrangleAI is an enterprise-grade platform that gives organizations visibility, control, and governance over their AI usage and spending. It acts as a “control plane” for generative-AI tools (like GPT-4, Claude, Gemini, and more), providing real-time usage tracking across providers, cost intelligence, infrastructure monitoring, and spend caps so companies can avoid runaway budgets. WrangleAI offers AI observability, helping teams understand which models are being used, by whom, and for what purposes, plus routing intelligence that can redirect workloads to more cost-effective models while maintaining output quality. It also includes governance features such as role-based access control and compliance support (e.g., for SOC 2 / ISO 27001 standards), enabling finance, engineering, and leadership teams to coordinate, enforce policies, and get actionable recommendations for optimizing AI spending and usage.Starting Price: $25.15 per month -
37
While not all models are created equal, every model needs governance to drive responsible and ethical decision-making throughout the business. IBM® watsonx.governance™ toolkit for AI governance allows you to direct, manage and monitor your organization’s AI activities. It employs software automation to strengthen your ability to mitigate risks, manage regulatory requirements and address ethical concerns for both generative AI and machine learning (ML) models. Access automated and scalable governance, risk and compliance tools that cover operational risk, policy management, compliance, financial management, IT governance and internal or external audits. Proactively detect and mitigate model risks while translating AI regulations into enforceable policies for automatic enforcement.Starting Price: $1,050 per month
-
38
AGAT Secure AI Platform
AGAT Software
AGAT Secure AI Platform is a security-first AI platform designed to provide enterprise-grade generative AI capabilities while ensuring full data protection and governance. It supports deployment either on-premises (including air-gapped environments) or in the cloud, enabling zero-data-exposure use cases and strong enterprise control. It comprises two main components: an AI Suite and an AI Firewall. The AI Suite offers a private-AI environment with modules including a knowledge assistant (answers from company data), data-analysis agent (natural-language analytics on spreadsheets and databases), smart search (meaning-based content discovery), AI code assistant (code completion, generation and error detection), and AI agents that can plan and execute tasks via file creation/modification and internet search. The AI Firewall acts as a real-time proxy for public AI services, enforcing risk-based policies, and more. -
39
AppProfileSafe
IT-Consulting Kinner
AppProfileSafe is an enterprise-grade Windows tool for application-level backup and restore of Registry data, files, and NTFS ACLs. Unlike USMT (deprecated since Windows 11 24H2), it operates per application using XML-based App Definitions — backing up exactly what each app needs, nothing more. Features include dry run simulation with diff reports showing every Registry key, file, and ACL that would change before committing. A tamper-evident HMAC hash-chained audit trail records every operation with integrity verification. The path mapping engine rewrites Registry and file paths when usernames or drive letters differ between source and target. The Community Edition is free forever — full GUI, unlimited apps, simulation, mapping, and audit logging. No registration, no time limit. Enterprise adds CLI automation, SIEM integration (CEF, LEEF, JSON, Syslog), compliance reporting, and a redaction engine. Built on .NET 8 for Windows 10/11 and Server 2016–2025.Starting Price: €8/month/user -
40
Specops Command
Specops
Specops Command combines Windows PowerShell and Group Policy and allows you to manage computers and users in your network. With Specops Command you can create PowerShell or VBScripts right inside your Group Policy Objects. This allows network administrators to execute scripts on specifically targeted systems while receiving feedback on the results. Manages feedback from the client computers and the database. Configures script assignments. Configures which Group Policy Objects receive script assignments. Specops Reporting is a separate product that can be used in combination with Specops Command. You can use Specops Reporting to view and create detailed reports for script feedback. The Server service manages feedback from the Client Side Extensions and stores it in the database. The Specops Command Server service also manages the communication between the database and the administration tools. The database contains feedback information for the script assignments.Starting Price: Free -
41
HQ
Indigo AI
HQ is the shared AI context layer for teams, giving the whole team and every AI tool one workspace to work from, with knowledge, skills, and workflows compounding in one place, and any agent running on top. It works as an operating system for AI workers over Claude Code, Cursor, Codex, ChatGPT, and Claude chat through MCP, so every teammate and every agent can start from the same shared context instead of separate chat histories, scattered files, and siloed workflows. HQ turns one person’s best work into team infrastructure: any prompt or workflow can become a reusable /command, then /hq-sync ships it to the whole team so anyone can run it in one step. Knowledge that usually lives across decisions, docs, playbooks, policies, projects, code, and ideas accumulates in HQ as the team works, creating one source of truth that every agent can search, reuse, and build on. Agents can be deployed into email and Slack, acting on top of the team’s skills and knowledge with full context. -
42
Klariqo
Klariqo
Klariqo is the compliance layer for call centers, BPOs, and pay-per-call agencies. It scores 100% of your calls, AI or human, against rules you write, and seals each one into a signed, tamper-evident record you own and can verify independently, built on the open vCon standard and independently witnessed. In regulated outbound (SSDI, ACA, Medicare, Debt Relief), every call becomes audit-ready evidence instead of a 2% QA sample and a 98% blind spot. Klariqo also runs AI voice agents that register directly on VICIdial or any SIP dialer as a remote extension. No Twilio, no dev team, 10-minute setup. 100,000+ calls in production across regulated verticals.Starting Price: $49/mo/agent -
43
Singulr
Singulr
Singulr is an enterprise AI governance and security platform that provides a unified control plane to help organizations discover, secure, and optimize AI adoption at scale. It addresses the growing gap between rapid AI usage and limited governance by delivering complete visibility into all AI systems in use, including homegrown applications, embedded AI, public tools, and shadow AI that often remains invisible to security teams. It continuously discovers and inventories AI assets across the organization, creating a real-time map of agents, models, and services, while assessing their risk through contextual analysis of data handling, model lineage, vulnerabilities, and compliance implications. Through its Singulr Pulse intelligence layer, it evaluates millions of AI systems, assigns risk scores, and supports automated onboarding workflows that reduce approval cycles from weeks to hours without compromising security. -
44
Agensi
Agensi
Agensi is a curated marketplace for AI agent skills. Every skill is security-scanned, works across 20+ agents (Claude Code, Codex CLI, Cursor, Gemini CLI, Copilot, and more), and comes from an accountable creator. Skills are one-time purchases. Buy once, own forever. No subscriptions, no license keys. All skills use the open SKILL.md standard, so one purchase works across every compatible agent. Every submission goes through an 8-point automated security scan covering prompt injection, data exfiltration, dangerous commands, secret detection, and obfuscated code. Creators keep 80% of each sale with instant Stripe payouts. Downloads are buyer-fingerprinted for IP protection. Agensi also offers a MCP subscription ($9/month or $90/year) that gives AI agents live access to the full catalog. Your agent connects to Agensi via MCP, searches available skills, and loads the right one mid-conversation. No downloads, no file management. New skills are available the moment they go live. -
45
OpenFang
OpenFang
OpenFang is an open source Agent Operating System built in Rust that provides a unified runtime for building, deploying, and managing autonomous AI agents at production scale. It packages a batteries-included architecture into a single binary, enabling developers to run agents that operate continuously, build knowledge graphs, and report results to a centralized dashboard without constant user prompts. At the core of OpenFang are “Hands,” pre-built autonomous capability packages that execute on schedules and perform tasks such as lead generation, research, browser automation, and social management. It includes dozens of pre-built agents, native tools, and channel adapters that allow agents to function across platforms like Slack, WhatsApp, Discord, and Teams from a single environment. Security is built into the foundation through multiple defense layers such as WASM sandboxing, cryptographic signing, taint tracking, and tamper-evident audit trails.Starting Price: Free -
46
GSD Pi
Open GSD
GSD Pi is a local-first coding agent for planning, implementing, verifying, and tracking project work from the command line. It combines a terminal agent, project workflow tools, worktree-aware Git automation, local project memory, model routing, and optional UI integrations so a project can move from idea to reviewed implementation with less manual coordination. GSD Pi is built around an execution loop that keeps AI-assisted engineering honest: discuss messy intent into explicit scope, plan durable slices with the right context, execute work in clean contexts and worktrees, verify behavior with evidence, and ship with clean commits and trustworthy handoffs. From the shell, users can start guided or quick coding sessions, break work into milestones, slices, and tasks, and let auto mode plan, implement, verify, and advance the work. It stores requirements, decisions, runtime notes, generated plans, summaries, and validation evidence. -
47
display.dev
display.dev
display.dev is a gated publishing engine for agent-generated artifacts, giving every HTML report, dashboard, spec, design prototype, or document a permanent, authenticated home. Agents already create sharp artifacts with interactive charts, live filters, hover states, and real layouts, but sharing them often breaks the experience through screenshots, raw HTML files, collapsed documents, public URLs, or infrastructure-heavy deployment. display.dev fixes this by letting users publish any HTML or Markdown artifact behind company auth with one command, one sentence inside an agent workflow, or a simple web upload. Viewers open a permanent URL, sign in with their Google or Microsoft work account or a one-time password, and see the artifact exactly as built. It works with Claude Code, Codex, Cursor, Claude Desktop, shell scripts, and anything that produces HTML or Markdown.Starting Price: $15 per month -
48
Domino Enterprise AI Platform
Domino Data Lab
Domino is an enterprise AI platform designed to help organizations build, deploy, and scale AI systems that deliver real business outcomes. It provides end-to-end support for the AI lifecycle, from data science experimentation to production deployment and governance. The platform enables teams to access data, tools, and compute resources through a self-service environment with built-in IT controls. Domino supports the development of machine learning models, generative AI applications, and AI agents using preferred tools and frameworks. It also includes governance features such as model tracking, audit trails, and policy enforcement to ensure compliance and transparency. With hybrid and multi-cloud capabilities, organizations can run AI workloads across on-premises and cloud environments. Overall, Domino helps enterprises operationalize AI at scale while maintaining control, security, and efficiency. -
49
The biggest challenge to scaling AI-powered decision-making is unused data. IBM Cloud Pak® for Data is a unified platform that delivers a data fabric to connect and access siloed data on-premises or across multiple clouds without moving it. Simplify access to data by automatically discovering and curating it to deliver actionable knowledge assets to your users, while automating policy enforcement to safeguard use. Further accelerate insights with an integrated modern cloud data warehouse. Universally safeguard data usage with privacy and usage policy enforcement across all data. Use a modern, high-performance cloud data warehouse to achieve faster insights. Empower data scientists, developers and analysts with an integrated experience to build, deploy and manage trustworthy AI models on any cloud. Supercharge analytics with Netezza, a high-performance data warehouse.Starting Price: $699 per month
-
50
J-KMS
JISA Softech
JISA Softech's J-KMS is a centralized key management system designed to streamline the management of cryptographic keys across various business applications. It automates key updates and distribution, handling the entire lifecycle of both symmetric and asymmetric keys. J-KMS enforces specific roles and responsibilities for key sets, reducing manual tasks and allowing staff to focus on policy decisions. It supports standard key formats and ensures compliance with standards like PCI-DSS and GDPR. Key functions include key generation, backup, restoration, distribution, import/export, audit logging, encryption using Key Encryption Keys (KEKs) or Zone Master Keys (ZMKs), and certification with X.509 or EMV certificates. Benefits of J-KMS encompass reduced human error through user and admin permissions, streamlined processes, cost reduction via automation, dual control with asynchronous workflows, tamper-evident records for compliance, and system-wide key control for any key type and format.
