LLM Guardrails, Security and Sandboxes

llm-fw inspects model requests for developers and teams using AI tools, SDKs and agents. It blocks suspected prompt injection and removes outgoing secrets before forwarding approved traffic to the model endpoint.

PentAGI automates authorized penetration testing for security engineers, researchers and red teams. Its specialized AI agents turn a target and a plain-language goal into testing work you can follow through a web interface.

CascadeFlow is a library for developers who need to control AI agent spending and behavior during a run. It works inside the application, assessing model calls, tool calls and sub-agent handoffs before deciding how execution should continue.

AI Infra Guard is a self-hosted AI security testing platform for developers and security teams checking agent workflows, model responses and AI infrastructure. It combines vulnerability scans and adversarial prompt tests in a web interface.

Rivet AgentOS is a runtime for developers building applications where AI agents need a working environment for code and tools. It runs inside an existing backend process, with WebAssembly isolation instead of a separate virtual machine for each agent.

LLMLingua is a Python library for developers building LLM applications that need to fit lengthy input into a model's context window or reduce token costs. It uses smaller models to remove less useful text before the prompt reaches the answering model.

PasteGuard is a privacy proxy for teams that use AI with customer records, client files or project secrets. It runs locally or on your own server and checks requests before they reach a model provider.

OpenShell is a self-hosted runtime for teams that need autonomous AI agents to work with files and APIs under explicit access limits. It runs agents in isolated sandboxes and enforces policies at the kernel level.

LeanCTX helps developers control the information their AI coding tools receive. It runs locally between those tools and project files or command output, while your existing application keeps control of the model and workflow.

All-in-One Sandbox gives AI agents a place to browse websites, execute code and work with files. It's for developers building agents that need these tools together, with a shared filesystem instead of separate environments for each task.

Sandcastle is a TypeScript library for developers building automated coding workflows in scripts, CI pipelines, or custom tools. It coordinates sandboxed AI coding agents and manages where their Git changes land.

Agno is a framework and runtime for developers building customer-facing or internal AI agents. It combines agent development, service hosting and a web interface for managing runs on infrastructure you control.

Presidio is a self-hosted framework for developers and organizations that need to remove personally identifiable information (PII) from data. It detects sensitive details such as names, credit card numbers and phone numbers, then applies configurable de-identification.

sandboxd is an AI app builder for teams hosting coding agents, playgrounds or app previews on their own server. It turns prompts into running apps, each with an isolated workspace and its own preview URL.

AX is a self-hosted AI agent orchestrator for teams running autonomous tasks on Kubernetes. It manages agents that retain state and need access to models, repositories and tools while they work.

Gondolin is a local sandbox for developers whose AI agents execute generated code. It separates that code from the host while letting developers control access to files, network destinations and API credentials.

NVIDIA NemoClaw is a self-hosted stack for people who want to run AI agents with controls over network access and credentials. It supports OpenClaw, Hermes and LangChain Deep Agents Code inside NVIDIA OpenShell sandboxes.

Giskard Hub is an AI agent testing platform available hosted or on-premise for organizations that need testing within their own environment. Developers can also run its open-source Python library locally, but the library's LLM judges and attack generators require a model provider and API key, with integrations for OpenAI and Anthropic. Local execution doesn't make those evaluations offline.

Reverse Skill gives AI coding agents workflows for reverse engineering, authorized penetration testing and CTF challenges. It's for security researchers who want their agent to select an analysis method and work with the tools available on their machine.

ai-jail is a sandbox for developers who want to limit the damage an AI coding agent can cause through mistaken commands. It targets accidental changes outside a project, and doesn't provide a security boundary against malware or hostile code.

ToolHive runs and manages Model Context Protocol (MCP) servers for developers and platform teams that want control over the tools their AI clients can access. It supports individual desktop use and shared deployments on your own infrastructure.

DarkMoon runs autonomous penetration tests for security teams, DevSecOps engineers and red teamers. It discovers a target's technology stack, assigns specialist AI agents and tests vulnerabilities across connected systems.

Docker MCP Gateway connects AI applications to tools and data through a shared gateway. It's for developers who want coding assistants to use the same server configuration while local tool servers run in isolated Docker containers.

Dory is a native macOS app for developers who want containers, Linux machines and coding agent environments on their own Mac. It provides a local runtime managed through both a graphical app and a CLI.

Adrian is a runtime security tool for teams whose AI agents can use tools or act on external systems. It checks planned actions against the agent's intended task and can intervene before an unsafe action runs.

ClawLess is a browser app and SDK for developers who want AI agents to write and execute code in an isolated workspace. Execution runs in your browser without a backend server, but model requests go to Anthropic, OpenAI or Google through API keys, so AI tasks need online services.

E2B provides isolated execution environments for developers building coding assistants, computer-use agents and background jobs. You supply the model and agent logic; it supplies the machine where the agent works.

Portkey Gateway routes application requests across model providers through an OpenAI-compatible API. It's for developers who need shared routing and failure controls when working with multiple AI backends.

Lethe is a local document de-identification app for people who work with confidential contracts, client records or deal documents and want to use AI without sharing the names involved. It replaces names with consistent placeholders, then restores them in AI-generated replies, including summaries and translations.

Stakpak is an open source AI agent for developers and DevOps teams managing production apps on their own machines or servers. It works interactively in a terminal or runs continuously to investigate problems, take corrective action and ask for human help.

MCP Gateway & Registry gives platform teams a shared catalog and access gateway for the tools their AI agents and coding assistants use. It addresses scattered server connections, credentials and access policies across an organization.

Semantica is a Python toolkit for teams building AI systems that need shared context, traceable decisions and policy checks. It connects facts and decisions to their evidence in queryable knowledge graphs.

Opik is an LLM observability and evaluation platform for teams building AI agents and retrieval-based applications. It helps developers inspect failures and compare behavior across development, testing and production.

Agentgateway is an open-source proxy for platform teams connecting applications and agents to models, tools and other agents. It brings routing and access controls together across AI protocols and ordinary service traffic.