Alternatives to asqav

Self-hosted AI agent governance with an access map, Cedar policy gates and a signed audit ledger for Claude Code, Codex and Gemini CLI

AgentSeal red-teams AI agents and audits MCP servers with 380+ adversarial attack probes from one CLI.

An approval layer that freezes high-risk AI coding agent actions until a human signs off, then writes a signed audit record.

MIT-licensed agent audit and replay you run on your own Docker Compose stack, with a hash-chained ledger and signed evidence exports.

Pre-execution action authorization for AI agents — a deterministic, signed gate on every tool call before it runs.

QueryPie AI governs enterprise AI agents with an MCP gateway, access control, and audit logs.

CTGT constrains any LLM to your written policy at inference time using deterministic policy graphs and an attestable audit trail.

Norm Ai encodes legal rules into verifiable AI agents for compliance review, DDQs, and RFPs at regulated institutions.

Runtime security layer that inspects what goes into your AI agents and controls what comes out

ElevenAgents Guardrails adds real-time safety checks to voice agents — prompt-injection blocking, reply screening, and custom policy

agentsh enforces syscall-level policy for AI coding agents — file, network, and process control that holds no matter the prompt.

Traccia traces, costs, evaluates and enforces policy on AI agents — an AI agent control plane you point at agents you already run.

ECC is the open-source agent harness operating layer that gives Claude Code, Codex, Cursor and Kimi shared skills, memory, planning and

Exogram is a permanent AI memory vault that gives ChatGPT, Claude and Gemini one shared, encrypted context graph.

Arcade AI is the MCP authorization runtime that governs every action your AI agents take.

Runtime authorization for AI agents — allow, deny, redact, or hold every action before it executes

Pre-execution budget enforcement for AI agents — Cycles denies overspending and risky tool calls before they run.

Open-source agent firewall that mediates MCP, HTTP and WebSocket traffic and signs offline-verifiable action receipts.

Agentic AI security and MCP discovery that maps what AI agents can actually reach — from prompt to API to data.

Kontext delivers runtime authorization for AI agents — allow-or-deny on every tool call before it executes.

Open-source credential broker and MITM proxy that keeps real API keys out of AI agents.

Unbound is an Agent Access Security Broker that governs what AI coding agents can run, reach, and touch.

Aembit brokers short-lived, policy-scoped credentials for AI agents and MCP servers through an identity control plane.

Task-scoped authorization for AI agents: approve the purpose once, every tool call is verified against it

Mindgard is AI red teaming that reconnoiters, exploits, and retests vulnerabilities in production AI agents and models.

Real-time guardrails, evals and red teaming for text-based LLM agents, running on small language model judges.

Alice red-teams AI models and agents, then enforces custom guardrails with runtime AI safety policies.

Enterprise AI security platform that discovers agents and MCP servers, red-teams them, and enforces policy inline at the gateway.

AI governance platform that discovers shadow AI, tests models and agents, and enforces policy at runtime with Guardian Agents.

WORLD3's RouterLink and TapClaw: one API for 114 models plus always-on AI agents on BNB Chain.