| What it does | Content authorization for AI agents
| Autonomous AI Agent Defense, Sandboxing & Zero-Leak Studio
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Not given
| Freemium
|
|---|
| Pricing | Local: free with CLI, SDK, local proxy, and MCP wrapper. Founding Team: $499 per month after a 30-day pilot, including guided setup, hosted approvals, team dashboard, verified ledger sync, and direct support.
| Community Core: Free (open-source CLI tools). Pro Individual: $15/month (includes native macOS & Windows GUI, cloud backup, priority endpoints). Team Cluster: $99/month base (for 5-50 developers). Enterprise Governance: Custom annual contract.
|
|---|
| Key features | - Exact payload binding and hash verification
- Policy engine with Cedar and Rego support
- Local enforcement proxy and CLI
- Hosted approvals dashboard and team coordination
- Verifiable action ledger with audit trail
- Model Context Protocol wrapper
- Support for GitHub, Slack, Linear, Jira and cloud platforms
- Runtime integration with Anthropic, OpenAI and Cursor
- Credential-free playground and examples
- ActionPass signed authorization artifact
| - Native kernel sandboxing on Linux, macOS, and Windows
- Bubblewrap and Landlock on Linux
- Apple Seatbelt sandbox on macOS
- AppContainer isolation on Windows
- Real-time kernel telemetry in VS Code, Cursor, and Windsurf
- 1-click secret redaction with QuickFix
- Strict CIDR egress filtering
- Anti-exfiltration hooks for /proc and SSH keys
- Database wire proxy with virtual schema masking
- 96.7% token compaction with JIT disclosure
|
|---|
| What makes it different | - Payload approval bound to exact hash, not summary—changes after approval are automatically rejected
- Local enforcement with credential-free operation before team coordination layer
- 30-day pilot model with no long-term commitment required
- Open-source ActionPass artifact and verifier for transparency
- Adapter-side verification prevents tool execution after payload tampering
| - Zero-leak defense with OS-level kernel sandboxing across all three operating systems
- 96.7% token compaction reduces LLM context and billing costs
- 100% air-gapped offline-first architecture with zero telemetry
- Automated secret detection and redaction in real-time
- Free open-source Community Core with optional paid Pro and Enterprise tiers
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 1 ● no change since last check | 2 ▲ +2 (up) since last check |
|---|
| Trust Flow (Majestic) | 0 | 3 |
|---|
| Citation Flow (Majestic) | 28 | 21 |
|---|
| Referring domains (Majestic) | 61 | 16 |
|---|
Axtary