Alternatives to Agent Vault

Open-source OS-level runtime security that keeps real API keys and PII out of compromised OpenClaw and Hermes Agent processes.

Identity control plane that brokers short-lived, policy-scoped credentials for AI agents, MCP servers, and non-human workloads.

Open-source CLI that red-teams AI agent prompts and audits MCP servers with real attack payloads.

ECC is an open-source agent harness operating layer that gives Claude Code, Codex, Cursor, OpenCode and Kimi shared skills, memory,

Pipelock is an open-source agent firewall that mediates MCP, HTTP and WebSocket traffic and signs offline-verifiable receipts.

Unbound is an Agent Access Security Broker that governs what AI coding agents can run, reach, and touch across your org.

Open-source agent audit and replay: hash-chained records, signed exports, self-hosted on your own Docker Compose stack.

Adrian is open-source runtime security that reads an AI agent's chain of thought and blocks malicious plans before they execute.

Free, open-source utility that removes refusal behaviour from open-weight language models so they follow your instructions.

Open-source red-team toolkit for AI agent prompt injection, jailbreak, and goal hijacking testing

Agent enablement platform that versions, scans and evaluates the skills your coding agents run.

Agentic law platform that encodes legal rules into verifiable AI agents for banks, asset managers, and insurers.

Runtime security layer that inspects what goes into your AI agents and controls what comes out

ElevenAgents Guardrails puts real-time safety checks on ElevenLabs voice agents — prompt-injection blocking, reply screening, and custom policy enforcement

Traccia is an AI agent control plane that traces, costs, evaluates and enforces policy on agents you already run.

Arcade AI is the MCP authorization runtime that governs, executes, and audits every action your AI agents take.

Runtime authorization for AI agents — allow, deny, redact, or hold every action before it executes

Cycles is runtime authority for AI agents: it denies overspending tool calls before they execute, self-hosted under Apache 2.0.

Contextual security guardrails that inspect and block risky tool calls from AI agents and MCP servers.

Salt Security maps the full agentic path — AI agents, MCP servers, and APIs — so you know what they can reach.

agentsh enforces syscall-level policy for AI coding agents — file, network, and process control that holds no matter what the prompt says.

Zenity secures long-horizon AI agents at the decision point — inventory, least-agency guardrails, and runtime defense across the platforms your agents already

Kontext is runtime authorization for AI agents — it hooks every Claude Code, Codex, and Cowork tool call before it runs, with no gateway in

Task-level authorization for AI agents: approve the purpose once, every tool call is scoped to it.

Plurai turns a plain-language policy into sub-100ms SLM evals and guardrails for AI agents.

Mindgard is AI red teaming that reconnoiters, exploits, and retests vulnerabilities in production AI agents and models.

Rogue by Qualifire red teams AI agents and enforces real-time LLM guardrails with purpose-built SLM judges.

Alice red-teams AI models and agents before launch, then runs custom guardrails in production to keep them safe.

Enterprise AI security platform that discovers agents and MCP servers, red-teams them, and enforces policy inline at the gateway.

Pre-execution action authorization for AI agents — a deterministic, signed gate on every tool call before it runs.