AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
🐊 Policy Controller for Kubernetes
ClawLess — A serverless browser-based runtime for Claw AI Agents powered by WebContainers
Runtime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.
The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.
Deterministic safety solutions for probabilistic AI agents
Harness-oriented agent system framework for production-grade LLM agent applications
Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.
Plug IaC governance into any IaC pipeline. Evaluate plans with Tirith, protect sensitive values, enforce centralised policies, and surface actionable results before infrastructure changes are applied.
Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.
AgentGuard: Zero-Trust Security Foundation for AI Agents
API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
Open Source policy enforcement proxy: Make your agents follow rules.
Agent Execution Partnership AEE is an open-source control plane that ensures every AI agent action is authorized before it runs, observable while it runs, and verifiable after it completes.
Runtime enforcement boundary for AI agents: a local sidecar that gates every outbound call against Cedar policies you own. Deterministic, call-level, no model on the hot path
fct 0.1.2 — Rust compiler/runtime for FACET specification v2.1.3 (NADL)
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
Agent wallet infrastructure — encrypted keys, policy enforcement, credential proxy, auth platform. Self-hostable, multi-tenant, open source.
A fast JSONLogic rules engine: one Rust core with official bindings for Node.js, Python, Go, Java, .NET, PHP, and the browser (WASM), plus a React visual debugger.