| What it does | An approval layer for unattended AI agents that halts risky actions for human approval before execution
| Execution governance for consequential AI-agent operations
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Self-hosted: Free (MIT licensed). Hosted Indie: $49/mo (2 seats, monthly governed-action ceiling, 30-day retention, email support). Hosted Team: $199/mo (10 seats, higher governed-action ceiling, 90-day retention, org-scoped rate limits, priority support).
| Free engine (MIT/Apache-2.0 open source). Team tier: €1,900/month including 25 writing seats and 50,000 governed actions per month; overage €0.02 per action above 50k monthly. Enterprise: from €90,000/year. Design partner program: €18,000 for 90 days (credited against first annual contract). Add-ons
|
|---|
| Key features | - Intercepts risky agent actions before execution
- Works with Claude Code, Codex, Hermes, OpenClaw, and MCP
- Policy-based risk scoring and decision making
- Remote approvals from phone or browser
- Signed audit ledger with replayable records
- Calibrated interruptions that reduce false positives
- Enforcement liveness monitoring via synthetic probes
- Self-hosted (MIT licensed) or managed hosting options
- Approvals inbox with decision ledger and policies
- Agent defense documentation with assumptions and shields
| - Authority revalidation at dispatch time against live conditions
- Approval binding to canonical intent with single-use, time-bound enforcement
- Sequence and prerequisite policy enforcement at plan time and runtime
- Effect identity matching to prevent duplicate actions across runs
- HMAC-signed, hash-chained, and Ed25519-anchored evidence
- Cross-session capacity ledger for aggregate exposure control
- Verifiers in five languages for independent offline verification
- MCP server support for integration with Claude Code, Cursor, and other agents
- Air-gapped deployment with documented key ceremony on Enterprise
- Deterministic Rust enforcement engine with no models in the decision path
|
|---|
| What makes it different | - Only approval layer that protects unattended runs that walk away
- Signed ledger with replayable audit records and explicit signature verification
- Self-hosted with no infrastructure lock-in or vendor dependency
- Learns from your approvals to reduce interruptions automatically
- Honest about enforcement boundaries across different integrations
| - Authority is revalidated at the moment of execution, not just at approval time
- Signed, verifiable evidence allows third-party audit without trusting the vendor
- Deterministic enforcement with no AI models influencing the gate decision
- Pricing on governed actions, not seats, aligned with consequence not headcount
- Refusals and verification are never metered or charged
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 8 ▲ +1 (up) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 3 | 0 |
|---|
| Citation Flow (Majestic) | 30 | 0 |
|---|
| Referring domains (Majestic) | 88 | 0 |
|---|
DashClaw
Rigorix