
Open-agent harness security and optimization for Claude Code, Codex, Cursor, OpenCode.
By Tanmay Verma, Founder · Last verified 06 Jul 2026
In short
ECC — Open-agent harness security and optimization for Claude Code, Codex, Cursor, OpenCode. Best for Developers using coding agents who need security and policy enforcement, Teams using Claude Code, Codex, Cursor, or OpenCode who want cross-harness portability, Engineering organizations seeking to automate repo workflows via GitHub App. Free to start; paid plans from $19/mo.
See what real users actually say. We scan live discussions, reviews and complaints across the web and hand you an honest verdict — in under a minute.
3 free scans · no card needed · downloadable report
ECC is the most comprehensive open-agent system for teams using Claude Code, Codex, Cursor, or OpenCode. Its three-layer architecture — OSS toolkit, AgentShield security, and ECC 2.0 control plane — delivers real cross-harness portability and policy enforcement. The free tier is generous for public repos, but Pro pricing at $19/seat is reasonable for private repo automation. Best for advanced teams; beginners may find the setup heavy.
Compare with: ECC vs OpenHands, ECC vs Draftbit, ECC vs Poolside AI
Last verified: July 2026
Across the latest 4 updates: 1 feature update, 1 launch, 1 pricing change and 1 news mention.
ECC launches official Discord community for discussions and support.
Stable release: 261 skills, orch-* orchestrator, control-pane substrate with session adapters, MCP inventory, worktree-lifecycle service.
Public repos stay free; Pro uses active-seat billing, pooled usage, metered overage; enterprise rollout emphasized.
Landing, pricing, security pages updated to reflect ECC stack; community stats and quick start flows tightened.
How likely is ECC to still be operational in 12 months? Based on 4 signals — momentum (how recently it shipped), wrapper dependency, revenue model, and web presence.
Last calculated: July 2026
How we score →ECC is an open-source agent harness system that secures and optimizes coding agents across Claude Code, Codex, Cursor, and OpenCode. Designed for developers and engineering teams, it provides a free MIT-licensed OSS toolkit with 261 skills and 64 agents, plus a GitHub App for repo-native automation. The system includes three layers: the distribution layer (OSS repo), the protection layer (AgentShield with 102 security rules), and the control-plane layer (ECC 2.0 for observability and cross-harness orchestration). AgentShield scans every agent session, catching config vulnerabilities and enforcing policy. The GitHub App turns repository history into reusable skills and defaults, and can trigger PR reviews via comments like "/ecc-tools analyze". ECC 2.0, shipped stable, offers session visibility, token optimization, and cross-harness operations above the underlying tools. Pricing is freemium: the OSS layer and public-repo GitHub App are free; Pro at $19/seat/month adds private-repo analysis, PR-triggered audits, and AgentShield-backed scanning; Enterprise contacts sales for SSO, custom policies, and dedicated support. While the depth of configuration may overwhelm casual users, ECC uniquely combines security, portability, and automation for teams relying on multiple coding agents.
ECC stands out as the only open-source agent harness that explicitly targets multiple coding agent platforms. Unlike single-harness tools, ECC gives you portable skills and agents that work across Claude Code, Codex, Cursor, and OpenCode. That means you can standardize conventions and security policies even if your team switches agents. The 261 skills and 64 agents are a genuine advantage — you get test-driven development workflows, code reviewer agents, and OWASP Top 10 security checks out of the box. AgentShield is a clever addition, scanning every session for config vulnerabilities. For teams that already use GitHub, the GitHub App integration is seamless: comment "/ecc-tools analyze" on a PR and get a generated pull request with pattern inspection. ECC 2.0 adds a control plane for session visibility and token optimization, which is useful for teams juggling multiple agent sessions. Where it bites: the setup is not trivial. You need to install via npm and configure profiles (core, developer, security, or full). Beginners or solo developers using a single agent may find ECC overkill. Also, support is limited to Discord community for free users; Pro gets priority email. Compared to alternatives like Continue.dev or LangChain, ECC is more focused on agent security and cross-harness portability than on model routing or prompt chaining. If you're a team using multiple coding agents and need governance, ECC is worth the setup. If you're a solo developer on one agent, skip it.
Free, no signup — tell us your goal and get tools matched to your budget & existing stack.
Project the real annual outlay, including the implied monthly cost when only an annual tier is published.
Vendor list price only. Add-on usage, seat overages, and contract minimums are surfaced under Hidden costs & gotchas.
Common stack mates teams adopt alongside ECC, with the specific reason each pairing earns its keep.
Open platform for autonomous cloud coding agents that fix bugs, review PRs, and migrate code asynchronously.
Enterprise open-weight foundation models and agents for high-consequence software engineering.
Used ECC? Help shape our editorial sentiment research.