Alternatives to Runlayer
Compare Runlayer alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Runlayer in 2026. Compare features, ratings, user reviews, pricing, and more from Runlayer competitors and alternatives in order to make an informed decision for your business.
-
1
Natoma
Natoma
Natoma gives customers a comprehensive platform to discover, secure, and manage all Non-Human Identities, including service accounts, access tokens, API keys, workloads, bots, and more. Natoma offers automated discovery of NHIs across the ecosystem, including intelligent context regarding ownership, downstream dependencies, and permissions. The platform provides continuous monitoring, on-demand & policy-based rotations, and governance. -
2
Portkey
Portkey.ai
Launch production-ready apps with the LMOps stack for monitoring, model management, and more. Replace your OpenAI or other provider APIs with the Portkey endpoint. Manage prompts, engines, parameters, and versions in Portkey. Switch, test, and upgrade models with confidence! View your app performance & user level aggregate metics to optimise usage and API costs Keep your user data secure from attacks and inadvertent exposure. Get proactive alerts when things go bad. A/B test your models in the real world and deploy the best performers. We built apps on top of LLM APIs for the past 2 and a half years and realised that while building a PoC took a weekend, taking it to production & managing it was a pain! We're building Portkey to help you succeed in deploying large language models APIs in your applications. Regardless of you trying Portkey, we're always happy to help!Starting Price: $49 per month -
3
Amazon Bedrock AgentCore
Amazon
Amazon Bedrock AgentCore enables you to deploy and operate highly capable AI agents securely at scale, offering infrastructure purpose‑built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real‑world deployment. It works with any framework and any foundation model in or outside of Amazon Bedrock, eliminating the undifferentiated heavy lifting of specialized infrastructure. AgentCore provides complete session isolation and industry‑leading support for long‑running workloads up to eight hours, with native integration to existing identity providers for seamless authentication and permission delegation. A gateway transforms APIs into agent‑ready tools with minimal code, and built‑in memory maintains context across interactions. Agents gain a secure browser runtime for complex web‑based workflows and a sandboxed code interpreter for tasks like generating visualizations.Starting Price: $0.0895 per vCPU-hour -
4
Arcade
Arcade.dev
Arcade.dev is an AI tool-calling platform that enables AI agents to securely perform real-world actions, like sending emails, messaging, updating systems, or triggering workflows, through authenticated, user-authorized integrations. By acting as an authenticated proxy based on the OpenAI API spec, Arcade.dev lets models invoke external services (such as Gmail, Slack, GitHub, Salesforce, Notion, and more) via pre-built connectors or custom tool SDKs, managing authentication, token handling, and security seamlessly. Developers work with a unified client interface (arcadepy for Python or arcadejs for JavaScript), facilitating tool execution and authorization without burdening application logic with credentials or API specifics. It supports secure deployments in the cloud, private VPCs, or on premises, and includes a control plane for managing tools, users, permissions, and observability.Starting Price: $50 per month -
5
Webrix MCP Gateway
Webrix
Webrix MCP Gateway is an enterprise AI adoption infrastructure that enables organizations to securely connect AI agents (Claude, ChatGPT, Cursor, n8n) to internal tools and systems at scale. Built on the Model Context Protocol standard, Webrix provides a single secure gateway that eliminates the #1 blocker to AI adoption: security concerns around tool access. Key capabilities: - Centralized SSO & RBAC - Connect employees to approved tools instantly without IT tickets - Universal agent support - Works with any MCP-compliant AI agent - Enterprise security - Audit logs, credential management, and policy enforcement - Self-service enablement - Employees access internal tools (Jira, GitHub, databases, APIs) through their preferred AI agents without manual configuration Webrix solves the critical challenge of AI adoption: giving your team the AI tools they need while maintaining security, visibility, and governance. Deploy on-premise, in your cloud, or use our managed serviceStarting Price: Free -
6
Willow
Willow
Willow is a leading enterprise platform for governing AI agents, tools, MCP servers, skills, and plugins. It connects agents such as Claude, ChatGPT, Cursor, Codex, Gemini, n8n, and custom agents to internal systems and SaaS tools, including Jira, GitHub, Slack, and databases, through an MCP gateway. Agents receive human-linked identities, scoped permissions, and audit trails. Security teams define policies, while employees self-serve approved connectors, skills, and plugins. Features include shadow AI discovery; PII redaction and prompt-injection inspection; app- and action-level permissions; SSO, SCIM, and RBAC with Okta, Entra ID, and JumpCloud; SIEM export; token and cost monitoring; and background agents. Willow is available as SaaS, dedicated cloud, or on-premises in a customer VPC. It holds SOC 2 Type II attestation, is GDPR-ready.Starting Price: $0 -
7
Keycard
Keycard
Keycard is an identity-and-access infrastructure platform built for the agent-native era, enabling developers and enterprises to securely connect AI agents, users, services, and APIs with real-time, policy-driven identity controls. It issues dynamic, ephemeral access tokens in place of static secrets and supports federated identity models to unify users, agents, and workloads under a distributed authorization framework. The platform provides drop-in SDKs for popular frameworks so developers can build agent-aware applications without becoming IAM experts. Keycard’s data model includes identity-attested agents, tasks, tools, and resources, allowing logical zones with context-aware permissions and auditability. On the policy side, security teams can define deterministic, task-based rules that enforce who (user/agent) can do what (task) on which resource under which conditions, all with full transparency. -
8
Onyx Security
Onyx Security
Onyx is a secure AI control plane for discovering, protecting, governing, optimizing, and measuring AI agents and models across the enterprise. It gives security, governance, and AI teams visibility into sanctioned and shadow AI across SaaS, cloud, endpoints, and code, including prompts, responses, and agent actions. AI Security helps strengthen posture, identify vulnerabilities, and enforce real-time safeguards against threats and misuse, while AI Governance supports security standards and regulatory requirements with opt-in coverage and policy controls defined in natural language. AI Orchestration reduces friction when setting up agents and MCPs and helps optimize for cost, accuracy, and latency. AI ROI measures adoption, sets goals, and tracks outcomes across departments. The Onyx Guardian Agent acts as a supervisory AI that continuously identifies risks and remediates issues across the platform, helping organizations manage large numbers of agents at scale. -
9
CloudEagle.ai
CloudEagle.ai
CloudEagle.ai is an AI-powered SaaS Management, AI Governance, and SaaS Security platform that gives enterprises one command center to discover, secure, govern, and optimize their entire SaaS and AI stack, including AI usage control and both human and non-human identities. CloudEagle governs applications, identities, and non-human identities (service accounts, bots, API keys, AI agents) continuously, rationalizing redundant tools and tracking security posture against frameworks like NIST 800. Onboarding takes 30 minutes; savings and governance start day one. To date: $50B+ in spend processed, $3B+ saved. With 500+ integrations, CloudEagle eliminates shadow SaaS and AI, enforces AI usage policies, and secures non-human identities. Slack-enabled, no-code workflows automate onboarding/offboarding, access reviews, license harvesting, and just-in-time access, while an autonomous agent triggers renewals and routes approvals through Slack, Jira, or ServiceNow.Starting Price: $2000/month -
10
Enkrypt AI
Anaconda
Enkrypt AI is an agentic AI security and compliance platform designed to protect AI applications, models, agents, and their interactions throughout deployment. The platform combines continuous red teaming, real-time guardrails, monitoring, and policy enforcement to help organizations identify and mitigate AI security, safety, compliance, and brand risks. Enkrypt AI dynamically tests AI systems with use-case-specific attacks to uncover issues such as prompt injection, jailbreaking, data leakage, hallucinations, bias, harmful content, model drift, and unsafe agent actions. Real-time guardrails analyze AI interactions and block threats as they occur while adapting to changing prompts and emerging risks. Its compliance capabilities translate internal policies and external regulations into automated controls while producing evidence that organizations can use for audits and governance. -
11
Opal Zero
Opal Security
Opal Zero is a just-in-time access governance platform for AI agents that inventories every agent, maps it to an accountable owner, decides each access request, and enforces the decision in the MCP gateway already in place. It gives organizations one inventory across identity providers and AI platforms such as Okta, Entra, Anthropic, OpenAI, Bedrock AgentCore, and Cursor, showing what every agent can access and who owns it. Risk Center surfaces access that is off-purpose, unowned, or standing and routes issues to the appropriate owner with an inline fix. Paladin evaluates requests using policy and context, identifies the least-privileged path, respects owner boundaries, and shows the reasoning behind each decision. Policy Insights uses real agent behavior to identify unused access and opportunities to improve access policy instead of relying on one-off remediation. Gateway Enforcement writes approved decisions as scoped, time-bound policy into existing gateways. -
12
Maetra
Maetra
Maetra is an AI governance and compliance control plane for teams operating tool-using AI agents. Discover inventories agents and capabilities; Comply maps systems to applicable frameworks and keeps reusable evidence current; Govern evaluates consequential actions against versioned policies and routes human approval when required. Secure scans prompts, messages, model outputs, and tool calls for prompt injection, data exposure, unsafe actions, and policy violations. Task Guard detects task drift, scope changes, and mismatched effects. Interaction Guard protects supported browser-AI prompts and files, while Audit preserves linked decision, approval, runtime, and change evidence. Teams can adopt modules separately or together through the web app, REST APIs, SDKs, and MCP. A 14-day no-card trial is available, with paid plans from $20/month.Starting Price: $20/month -
13
JetStream Security
JetStream
JetStream Security is a security-first AI governance platform designed to give enterprises full visibility, control, and accountability over their AI systems by turning them from opaque, fragmented tools into managed, traceable infrastructure. It acts as a centralized control plane that connects identity, runtime governance, observability, and financial oversight into a single system, allowing organizations to “see every AI action, tie actions to accountable owners, [and] keep workflows inside approved boundaries” while enforcing policy at runtime. It introduces agentic identity, binding human, agentic, and non-human identities to specific actions and access permissions, ensuring every invocation, tool call, or workflow can be traced and governed through least-privilege access principles. Through continuous runtime governance, JetStream compares live AI behavior against approved blueprints, using immutable logging and real-time observability to detect drift. -
14
asqav
asqav
asqav is an AI governance and security platform designed to make AI agents audit-ready by providing real-time monitoring, enforcement, and verifiable proof of every action taken by an agent. It introduces a lightweight SDK that allows developers to integrate governance directly into their agents in just a few lines of code, enabling continuous oversight across the full lifecycle of AI operations. It includes behavioral monitoring to detect issues such as drift, rate limits, and scope violations, along with advanced threat detection that identifies prompt injections, exposure of sensitive data, toxic outputs, and other risks. It enforces policy through configurable “policy gates,” which apply per-agent rules, preflight checks, and dynamic approvals before actions are executed, ensuring that agents operate within defined boundaries. asqav also provides automated incident response capabilities, including the ability to suspend, quarantine, or escalate risky agents.Starting Price: $39 per month -
15
systemprompt.io
SystemPrompt
SystemPrompt is a self-hostable AI governance and runtime platform for organizations connecting AI clients, model providers, and tools. It provides a shared gateway and control plane for managing user and agent access, model routing, tool permissions, credentials, and policy checks. Requests and tool actions can be recorded in the organization's environment for audit and usage review. The platform supports connections to Anthropic, OpenAI, Google Gemini, and Groq, and uses the Model Context Protocol (MCP) to expose authorized tools to compatible clients. Teams can extend the runtime with agents, workflows, skills, and business-specific services, and deploy it through a binary, containers, or managed cloud tenants. SystemPrompt is intended for technical and security teams governing AI workloads. Local evaluation is free; production use and cloud hosting require commercial terms. -
16
NVIDIA Open Agent Safety Platform is an open reference design for continuously monitoring and governing AI agent behavior, helping organizations keep agents isolated, observable, auditable, and within defined operational boundaries. It combines runtime governance, continuous threat detection, and hardware-isolated policy enforcement to secure enterprise AI agents from testing through deployment. NVIDIA OpenShell provides an open-source runtime that separates how agents execute from how they reach data, tools, and external systems, using sandboxed execution and deterministic, zero-trust policy enforcement to control what agents can see, do, and interact with. Policies are enforced outside the agent process, helping limit the impact of unexpected behavior. NVIDIA Sentry adds an independent security layer that observes agent requests and responses, establishes verifiable agent identities, continuously governs access to data, tools, APIs, and services, and can quarantine agents.
-
17
Akto
Akto
Akto is an open source API security in CI/CD platform. Key features of Akto include: 1. API Discovery 2. API Security Testing 3. Sensitive Data Exposure 4. API Security Posture Management 5. Authentication and Authorization 6. API Security in DevSecOps Akto helps developers and security teams secure APIs in their CI/CD by continuously discovering and testing APIs for vulnerabilities. Akto's pricing is transparent on website. Free tier is available. You can deploy both self-hosted and in cloud. It takes only few mins to deploy and see results. Akto can integrate with multiple traffic sources - Burpsuite, AWS, postman, GCP, gateways, etc. -
18
WitnessAI
WitnessAI
WitnessAI is building the guardrails that make AI safe, productive, and usable. Our platform allows enterprises to innovate and enjoy the power of generative AI, without losing control, privacy, or security. Monitor and audit AI activity and risk with full visibility into applications and usage. Enforce consistent, acceptable use policy on data, topics, and usage. Secure your chatbots, data, and employee activity from misuse and attacks. WitnessAI is building a team of experts, engineers, and problem solvers from around the world. Our goal is to create an industry-leading AI security platform that unlocks AI’s potential while minimizing its risk. WitnessAI is a set of security microservices that can be deployed on-premise in your environment, in a cloud sandbox, or in your VPC, to ensure that your data and activity telemetry are separated from other customers. Unlike other AI governance solutions, WitnessAI provides regulatory segregation of your information. -
19
Darktrace / SECURE AI
Darktrace
Darktrace / SECURE AI is an AI security solution that brings every AI interaction across an organization into a single view, helping teams understand intent, assess risk, protect sensitive data, and support policy alignment. It monitors prompts, sessions, and responses in real time across enterprise GenAI tools such as Microsoft Copilot and ChatGPT Enterprise, low-code environments including Microsoft Copilot Studio, high-code platforms such as Amazon Bedrock and SageMaker, SaaS applications, and SASE. Behavioral analytics distinguish normal, business-aligned activity from significant or risky deviations, detecting conversational prompt attacks, malicious chaining, and unsafe actions without relying only on historical attack patterns. Darktrace learns directly from the environment it protects, allowing it to identify novel and AI-related threats on first encounter. -
20
Cortex Agentic Endpoint Security
Palo Alto Networks
Palo Alto Networks Cortex Agentic Endpoint Security (AES) is an AI-native endpoint security platform designed to protect enterprise devices from risks associated with autonomous AI agents and modern software applications. The platform continuously discovers AI agents, local models, browser extensions, IDE plugins, Model Context Protocol (MCP) servers, and other software components operating on endpoints. Its context-aware risk analysis evaluates software dependencies, permissions, behaviors, and potential security exposures to help organizations prioritize threats. Cortex AES provides automated governance policies and security guardrails that control agent interactions and restrict potentially unsafe software. Its real-time prevention capabilities block malicious agent actions, prompt injection attacks, unauthorized data access, and risky software execution before they cause damage. -
21
MintMCP
MintMCP
MintMCP is an enterprise-grade Model Context Protocol (MCP) gateway and governance platform that provides centralized security, observability, authentication, and compliance controls for AI tools and agents connecting to internal data, systems, and services. It lets organizations deploy, monitor, and govern MCP infrastructure at scale, giving real-time visibility into every MCP tool call, enforcing role-based access control and enterprise authentication, and maintaining complete audit trails that meet regulatory and compliance needs. Built as a proxy gateway, MintMCP consolidates connections from AI assistants like ChatGPT, Claude, Cursor, and others to MCP servers and tools, enabling unified monitoring, blocking of risky behavior, secure credential management, and fine-grained policy enforcement without requiring each tool to implement security individually. -
22
Preloop
Preloop
Preloop is the open source AI agent control plane for agents that take real actions. It combines an MCP firewall for tool access, an AI model gateway for cost, safety, and attribution, policy-as-code with human approvals, runtime session observability, and audit trails in a single self-hostable platform. AI agents can deploy code, change infrastructure, move money, touch production data, and burn model spend in seconds, so Preloop helps teams control what agents can do, how much they spend, and which actions require human approval. It works with OpenClaw, Hermes, Claude Code, Codex CLI, Cursor, Gemini CLI, Windsurf, Cline, OpenCode, and any MCP-compatible agent or managed runtime. Access rules can inspect arguments and context, not just tool names, with CEL expressions for fine-grained conditions. Teams can start with observability, then layer in approvals and deny rules without SDKs or invasive app changes.Starting Price: $290 per month -
23
Lunar.dev
Lunar.dev
Lunar.dev is an AI gateway and API consumption management platform that gives engineering teams a single, unified control plane to monitor, govern, secure, and optimize all outbound API and AI agent traffic, including calls to large language models, Model Context Protocol tools, and third-party services, across distributed applications and workflows. It provides real-time visibility into usage, latency, errors, and costs so teams can observe every model, API, and agent interaction live, and apply policy enforcement such as role-based access control, rate limiting, quotas, and cost guards to maintain security and compliance while preventing overuse or unexpected bills. Lunar.dev's AI Gateway centralizes control of outbound API traffic with identity-aware routing, traffic inspection, data redaction, and governance, while its MCPX gateway consolidates multiple MCP servers under one secure endpoint with full observability and permission management for AI tools.Starting Price: Free -
24
Unity AI Gateway
Databricks
Unity AI Gateway provides centralized governance, observability, and spend controls across enterprise AI systems, helping organizations manage agents, tools, models, MCPs, and AI frameworks from a single governed layer. It applies consistent governance across Databricks-hosted AI, external models, coding agents, agent harnesses, and other AI services without locking teams into a single provider or stack. Identity-aware policies control what agents can access, which actions they can take, and which tools they can use, while built-in, custom, and third-party guardrails enforce safety and compliance across prompts, responses, and interactions. It captures prompts, traces, tool calls, payload logs, audit logs, token usage, and policy decisions to monitor behavior, investigate incidents, and support compliance. Centralized cost controls track consumption across users, teams, applications, agents, and providers, with budgets, rate limits, and hard spend caps. -
25
Credo AI
Credo AI
Standardize your AI governance efforts across diverse stakeholders, ensure regulatory readiness of your governance processes, and measure and manage your AI risks and compliance. Go from fragmented teams and processes to a centralized repository of trusted governance that makes it easy to ensure all of your AI/ML projects are being governed effectively. Stay up-to-date with the latest regulations and standards with AI Policy Packs that meet current and emerging regulations. Credo AI is an intelligence layer that sits on top of your AI infrastructure and translates technical artifacts into actionable risk & compliance insights for product leaders, data scientists, and governance teams. Credo AI is an intelligence layer that sits on top of your technical and business infrastructure and translates technical artifacts into risk and compliance scores. -
26
Pillar Security
Pillar Security
Pillar Security is a unified AI security platform for securing the agentic workforce across the entire AI lifecycle, from development to deployment and runtime protection. It connects business context across discovery, testing, and protection so security intelligence compounds across AI applications, agents, models, prompts, frameworks, tools, MCP servers, skills, coding agents, SaaS, cloud, code, and endpoints. Pillar helps organizations discover and manage AI assets everywhere, including shadow AI and unapproved systems, assess supply chain and posture risks, map agentic attack surfaces, and validate the vulnerabilities that actually matter. Its AI Security Posture Management capabilities analyze connected agents, tools, permissions, data sources, prompts, models, and supply chain components to expose risky paths, policy violations, misconfigurations, coding agent risks, and blast radius when a single component is compromised. -
27
FairNow
FairNow
FairNow equips organizations with all the AI governance tools they need to ensure global compliance and manage AI risk. Loved by CPOs, CAIOs, risk management, and legal professionals, FairNow's features are simplified, centralized, and empowering for the entire team. FairNow’s platform continuously monitors AI models to ensure that every model is fair, compliant, and audit-ready. Top features include: - Intelligent AI Risk Assessments: Conduct real-time assessments of AI models, using their deployment locations to highlight possible reputational, financial, and operational risks. - Hallucination Detection: Proactively detect errors and unexpected answers. - Automated Bias Evaluations: Automate bias evaluations and mitigate algorithmic bias as it happens. Plus: - AI Inventory - Centralized Policy Center - Roles and Controls FairNow’s AI governance platform helps organizations build, buy, and deploy AI with complete confidence. -
28
The MCP Census
MCP Census
The MCP Census is a web-based evidence-checking service for developers and teams that use Model Context Protocol (MCP) servers. It compares server listings with public signals such as repository identity and status, package availability, hosted endpoint health, registry records, and vulnerability advisories. Users can look up a server or submit an MCP configuration and receive PASS, REVIEW, BLOCK, or UNKNOWN results under a versioned policy, with reasons and supporting evidence. The service is accessible through a website, REST API, and remote MCP server, and can be used in agent workflows and CI checks for configuration changes. Setup guides connect it to coding agents and developer tools. MCP Census is an initial public-evidence gate, not a malware scanner, penetration test, or guarantee that a server is safe to run.Starting Price: $0 -
29
TokenTally
Nelio Tech LLC
TokenTally is a self-hosted AI governance platform for organizations managing employee use of generative AI tools. It provides a central control layer for approved AI services, with tools to set access policies and spending budgets, improve prompts, and monitor usage and costs. Administrators can oversee how teams use AI providers and apply organization-wide rules, while employees work with permitted tools through the managed environment. The product is intended for company owners and operations leaders, IT and security teams responsible for evaluation and deployment, and IT service providers managing client environments. TokenTally is installed on an organization's own infrastructure, and its plans are organized by employee capacity, with tiers for smaller deployments through enterprise use. It can support businesses seeking centralized visibility and control over AI adoption, expenditure, and company-data handling.Starting Price: $249 -
30
Tuning Engines
CerebrixOS
Tuning Engines is a unified AI control and governance layer for teams building production intelligence across models, agents, tools, and fine-tuned systems. It brings together the full AI lifecycle in one governed platform: inference, model routing, fallback policies, fine-tuning jobs, datasets, evaluations, model imports and exports, custom models, agents, MCP servers, reusable skills, guardrails, AGT YAML policies, data capture, runtime traces, usage analytics, API keys, billing, team roles, and integrations. Developers get OpenAI-compatible APIs, Anthropic-compatible routes, CLI workflows, MCP access, coding-agent integrations, and resource catalogs for models, agents, tools, and skills. Teams can connect Claude Code, OpenCode, Aider, Cline, Roo, Continue.dev, Cursor, VS Code, Windsurf, and other AI workflows through a single governed platform. -
31
Barndoor.ai
Barndoor.ai
Barndoor is a data and access management layer designed to secure how artificial intelligence systems interact with enterprise data and infrastructure. It acts as a centralized control plane that governs AI agents and applications, allowing organizations to define policies, enforce access rules automatically, and maintain full visibility over how AI tools operate across business systems. Instead of relying only on traditional identity-based permissions, Barndoor introduces context-aware governance, enabling administrators to control what actions an AI agent can perform based on factors such as the user operating the agent, the system being accessed, the type of data involved, and the specific task being attempted. It evaluates every AI request in real time and enforces policies before an action is executed, preventing unsafe or unauthorized operations from reaching internal systems or modifying sensitive information.Starting Price: $500 per month -
32
Warestack
Warestack
Warestack is an agentic AI–powered release protection platform that installs directly into your GitHub organization and enforces custom, context-aware guardrails across every stage of your development workflow. Users write protection rules in plain English, such as requiring approvals for non-hotfix PRs or blocking Friday deployments, and Warestack automatically flags or blocks risky operations, traces events like pull requests, issues, deployments, and workflow runs in real time, and centralizes visibility in a unified dashboard. It integrates seamlessly with tools like GitHub, Slack, and Linear to deliver smart alerts and notifications, while offering one-click audit logs and reports to support SOC-2 and compliance needs. Warestack scales effortlessly across teams and repositories with scoped rule application, role-based enforcement, and a transparent open source rule engine named Watchflow that powers its policy creation.Starting Price: $49 per month -
33
Snapper
Snapper
Snapper is an AI agent security platform designed to provide end-to-end governance and protection for organizations deploying AI agents across applications, networks, and systems. It delivers runtime enforcement by evaluating every agent action, including tool calls, API requests, and data access, before execution through a policy-driven rule engine with multiple enforcement layers. It offers unified visibility into AI usage by monitoring network traffic, browser activity, DNS, and processes to detect unauthorized tools and “shadow AI,” while also intercepting outbound LLM requests through SDK wrappers and a network proxy to evaluate, redact, and log sensitive data in real time. Snapper includes advanced threat detection capabilities that identify prompt injection, exploit chains, anomalous behavior, and multi-step attack patterns using behavioral baselines, kill chain tracking, and composite trust scoring. -
34
Coder
Coder
Coder is the AI software development company leading the future of autonomous coding. We empower teams to build software faster, more securely, and at scale through the collaboration of AI coding agents and human developers. Our mission is to make agentic AI a safe, trusted, and integral part of every software development lifecycle. Coder’s self-hosted Cloud Development Environment (CDE) is the foundation for deploying agentic AI in the enterprise. It provides a secure, standardized, and governed workspace to deploy autonomous coding agents alongside human developers, accelerating innovation while maintaining control and compliance. Coder's isolated, policy-driven environments improve productivity, cut cloud costs, and reduce data risks. Developers transition to AI at their own pace using their own tools. Platform and security teams can govern, audit, and manage a great developer experience at scale. -
35
AAES Govern
AAES
AAES Govern is pre-launch, self-hosted software for enterprise AI agent requests routed through configured credential paths. It checks permissions, required human approvals and spending limits, reserves evaluated amounts before authorization, and records signed decisions for offline integrity checks. An agent's direct credentials or alternate route can bypass enforcement; observation-only integrations cannot block activity. Customer-run evaluation is available through a paid USD 40,000 three-month design partnership covering AAES Govern and the separate AAES Operate product; production rates are unpublished. Managed Govern hosting is planned, not offered. The separately released Apache-2.0 aaesverify CLI checks exported-record integrity against a separately trusted public key; it cannot establish complete capture, input truth, or downstream execution. AAES has no production customer results or independent certification.Starting Price: $40,000/3 months -
36
AgentShelf
AgentShelf, Inc.
AgentShelf Platform is a no-code environment for building, deploying, and governing focused AI agents for business workflows. Teams can give each agent approved context, tools, model access, permissions, and a dedicated workspace, then deploy experiences to websites, internal workspaces, products, or external applications. The platform includes reusable agent patterns, widgets, SDKs and APIs, usage and cost visibility, budget policies, activity traces, and public/private access boundaries. It supports use cases such as website visitor qualification, customer support triage, CRM follow-up, research, knowledge retrieval, and recurring reporting.Starting Price: $100/month -
37
Openlayer
Openlayer
Openlayer is an enterprise AI governance platform that helps organizations discover, test, monitor, secure, and control AI systems from development through production. The platform brings AI evaluation, observability, governance, guardrails, compliance, gateway enforcement, and cost controls together in one place. Teams can evaluate LLMs, agents, RAG applications, and traditional ML systems using 175+ out-of-the-box evaluations across quality, safety, security, performance, cost, fairness, and compliance. In production, Openlayer provides end-to-end tracing and continuous monitoring of AI behavior, including prompts, responses, tool calls, agent workflows, latency, and cost. Real-time guardrails can detect and block issues such as prompt injection, jailbreak attempts, PII or PHI exposure, and other unsafe behavior before it reaches a model or end user. Openlayer Governance connects organizational AI policies to technical controls. Teams can maintain an AI inventory, assign own -
38
OpenBox
OpenBox
OpenBox is an enterprise-grade AI governance platform designed to make AI systems transparent, auditable, and safe to deploy at scale by enforcing real-time oversight across every agent action and system interaction. It provides a unified governance layer that connects identity, policy, risk, and compliance into a single runtime system, eliminating the fragmentation typically found across multiple tools and enabling organizations to standardize control over AI behavior. It integrates directly into existing AI workflows through a lightweight SDK, requiring no architectural changes, and immediately delivers full visibility into how AI agents operate, make decisions, and interact with other systems. OpenBox monitors and evaluates every action before execution, applying policy enforcement and regulatory checks in real time to prevent non-compliant or risky behavior rather than reacting after errors occur.Starting Price: Free -
39
TAWA GUARD
Tawa Guard
TAWA GUARD is an AI security service for applications that use large language models and AI agents. It evaluates prompts, documents, emails, web pages and tool outputs before they reach a model, returning an allow, flag or block decision according to configured policies. Its API and documented developer integrations let teams add content checks to agent workflows. An administrative dashboard records decisions and explains why content was allowed or blocked, and security events can be exported to SIEM platforms such as Splunk, IBM QRadar, Microsoft Sentinel and Elastic. The service is designed for teams building or operating internal or customer-facing AI assistants and agents that process user-supplied or external content. A free Developer tier is available with an allowance of up to 5 million Tawa Units per month; a self-hosted Enterprise deployment is available by arrangement.Starting Price: £0/month -
40
OneTrust AI Governance
OneTrust
OneTrust AI Governance is AI governance tool built to protect the ROI of AI by translating AI risk into enforceable controls, helping teams govern well and move fast. It aligns enterprise governance with technical reality so organizations can scale AI faster, reduce risk, and maintain trust as AI systems evolve in production. It helps teams catalog AI systems and assess risk by tracking models, datasets, agents, and vendors in a central inventory, assigning ownership and lifecycle status, and understanding component dependencies. It standardizes AI risk identification using global frameworks such as the EU AI Act, NIST, and ISO 42001, with automated workflows for risk tiering by use case, system, or component, plus mapped risk and control frameworks for ongoing compliance. OneTrust streamlines approvals, attestations, scoping, evidence collection, and audit-ready reporting through configurable intake and approval workflows. -
41
Singulr
Singulr
Singulr is an enterprise AI governance and security platform that provides a unified control plane to help organizations discover, secure, and optimize AI adoption at scale. It addresses the growing gap between rapid AI usage and limited governance by delivering complete visibility into all AI systems in use, including homegrown applications, embedded AI, public tools, and shadow AI that often remains invisible to security teams. It continuously discovers and inventories AI assets across the organization, creating a real-time map of agents, models, and services, while assessing their risk through contextual analysis of data handling, model lineage, vulnerabilities, and compliance implications. Through its Singulr Pulse intelligence layer, it evaluates millions of AI systems, assigns risk scores, and supports automated onboarding workflows that reduce approval cycles from weeks to hours without compromising security. -
42
elsai Foundry
elsai
elsai Foundry is a governance-first platform to design, deploy, and operate AI agents for regulated enterprise workflows. It embeds compliance guardrails, PHI/PII redaction, prompt management, and real-time ARMS observability into every workflow. Its architecture spans multi-agent orchestration, policy and approvals enforcement, human-in-the-loop controls, domain intelligence, and pre-built agents across healthcare, life sciences, insurance, procurement, and supply chain. -
43
Lasso Security
Lasso Security
Lasso is an AI security platform designed to help enterprises securely adopt, govern, and protect AI agents and applications throughout their lifecycle. The platform provides capabilities for AI discovery, risk assessment, automated red teaming, runtime protection, and AI detection and response within a unified solution. Organizations can inventory AI assets, map models and system prompts, monitor policy compliance, and gain visibility into AI usage across the enterprise. Lasso focuses on intent-based security, analyzing the behavior and objectives of AI systems rather than relying solely on traditional rule-based approaches. Its platform helps organizations address risks such as prompt injection, model vulnerabilities, unauthorized AI usage, and evolving threats targeting agentic systems. By combining governance, security monitoring, and proactive protection, Lasso enables enterprises to scale AI adoption while maintaining strong security and compliance standards. -
44
Eyrane
Eyrane
Eyrane is an AI agent security platform in development for security and engineering teams responsible for agents and automated workflows. It is designed to help organizations discover agents, models, tools, MCP servers, identities, credentials, permissions, and connected systems, then map the access paths between them. The platform is intended to apply runtime policies that allow, require review of, or block agent actions according to identity, permissions, tools, and data sensitivity. Eyrane also describes testing agent behavior against prompt injection, tool misuse, privilege abuse, data exfiltration, and MCP-related scenarios. Its proposed use cases include agent inventory and access review, runtime oversight, MCP security, and AI red teaming. Eyrane is designed for security and engineering teams deploying AI agents across business applications and workflows. -
45
Tangerin AI
Tangerin AI
Tangerin AI is the independent AI governance platform that discovers, assesses, governs and verifies AI use across the entire company, from any vendor. Headquartered in Brazil and operating globally, serving customers in Portuguese, English and Spanish. It answers what most companies cannot: which AI tools, IT-approved or not (Shadow AI), are used, by whom, at what data risk, and with what evidence for an auditor. Collected via a lightweight endpoint agent (Windows, macOS, Linux) or agentless ingestion of NGFW, SSE and SIEM logs. Every signal resolves against a proprietary catalog of thousands of AI tools, recording data risk, processing country, retention policy and training use. Each tool is scoped as allowed, restricted or prohibited by policy; employees digitally sign the AI usage policy; compliance covers 20+ frameworks - NIST AI RMF, SOC 2, LGPD, ISO 42001, EU AI Act and more. Never collects conversation content, prompts or files.Starting Price: R$ 497/month -
46
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
47
Klique
Klique
Klique is an enterprise AI control plane that helps organizations manage AI models, applications, agents, and computing resources through a unified platform. The software combines intelligent model routing, AI service governance, and GPU orchestration to optimize performance, infrastructure utilization, and operational costs. Its smart routing engine directs AI requests to appropriate models based on cost, latency, data sensitivity, and organizational policies. Centralized governance capabilities include token budgets, usage quotas, role-based permissions, single sign-on, and audit logging across AI services. Klique also supports GPU resource pooling, fractional GPU sharing, workload scheduling, and automated allocation of computing resources across cloud and on-premises infrastructure. The platform integrates with Kubernetes, cloud providers, AI model APIs, and developer tools while supporting self-hosted, hybrid, and air-gapped deployments. -
48
Cisco AI Defense
Cisco
Cisco AI Defense is a comprehensive security solution designed to enable enterprises to safely develop, deploy, and utilize AI applications. It addresses critical security challenges such as shadow AI—unauthorized use of third-party generative AI apps—and application security by providing full visibility into AI assets and enforcing controls to prevent data leakage and mitigate threats. Key components include AI Access, which offers control over third-party AI applications; AI Model and Application Validation, which conducts automated vulnerability assessments; AI Runtime Protection, which implements real-time guardrails against adversarial attacks; and AI Cloud Visibility, which inventories AI models and data sources across distributed environments. Leveraging Cisco's network-layer visibility and continuous threat intelligence updates, AI Defense ensures robust protection against evolving AI-related risks. -
49
Obot MCP Gateway
Obot
Obot is an open-source AI infrastructure platform and Model Context Protocol (MCP) gateway that gives organizations a centralized control plane for discovering, onboarding, managing, securing, and scaling MCP servers, services that connect large language models and AI agents to enterprise systems, tools, and data. It bundles an MCP gateway, catalog, admin console, and optional built-in chat interface into a modern interface that integrates with identity providers (e.g., Okta, Google, GitHub) to enforce access control, authentication, and governance policies across MCP endpoints, ensuring secure, compliant AI interactions. Obot lets IT teams host local or remote MCP servers, proxy access through a secure gateway, define fine-grained user permissions, log and audit usage, and generate connection URLs for LLM clients such as Claude Desktop, Cursor, VS Code, or custom agents.Starting Price: Free -
50
F5 AI Guardrails is a runtime AI security solution designed to protect AI models, applications, agents, and connected data throughout deployment and operation. The platform helps organizations defend against adversarial threats such as prompt injection, jailbreak attacks, harmful outputs, and unauthorized AI behavior. It provides real-time monitoring and enforcement of security policies to prevent data leakage, compliance violations, and misuse of AI systems. Organizations can implement predefined guardrails or create customized policies tailored to specific business requirements and AI use cases. The platform also delivers observability, auditing, and governance capabilities that help organizations maintain visibility into AI interactions and regulatory compliance. By combining threat protection, data security, and AI governance, F5 AI Guardrails helps enterprises operate AI systems more safely and responsibly.
