by HOL
Local, open-source policy layer that reviews a coding agent's commands, file reads, package installs and MCP calls before they run — allowing, asking or blocking each action.
Best for: Developers running coding agents who want a human checkpoint before an agent touches files, packages or credentials
Pricing: Open Source
Limitation: Review prompts add friction by design — every flagged action waits on you
by CVEngine
Free, self-hosted attack-surface platform that discovers everything a domain exposes, matches exploited CVEs against what it actually runs, and triages each finding with AI plus read-only validation.
Best for: Security teams and owners who want to find and prioritise their own internet-exposed weaknesses
Pricing: Open Source
Limitation: Only for systems you own or are authorised to test
by Plango
Native macOS security suite for developers running AI coding agents: restricts agent access to sensitive files and secrets, watches network activity, scans skills and projects, all judged by a local AI security model
Best for: Developers running AI coding agents on a Mac who want agent access under control
Pricing: Freemium
Limitation: Mac only — Apple silicon, macOS 15 or newer, and at least 16 GB of memory
by Trend Micro
AI-driven XDR platform with Trend Companion assistant and Cybertron AI across endpoint, cloud, and email.
Best for: Security
Pricing: Paid
Limitation: Pricing not published
by Tumeryk
Enterprise platform that scores and governs AI agents, copilots, and models in real time.
Best for: Tumeryk delivers enterprise-grade trust and security for agentic and conversational AI.
Pricing: Paid
Limitation: Enterprise-only focus; no self-serve free tier
by Varonis
AI-powered data security platform discovering, classifying, and protecting sensitive data everywhere.
Best for: Security
Pricing: Paid
Limitation: Pricing not published