Pre-execution skill and MCP scanning
Scans AI agent skills and MCP servers before the agent loads them, using ATR rules to detect prompt injection, tool poisoning, malicious MCP content, and supply-chain threats.
Panguard AI
Freemium
Panguard AI è una piattaforma di sicurezza open source per agenti AI che analizza skill e server MCP prima dell’esecuzione e protegge le azioni degli agenti a runtime, offrendo controlli self-hosted e prove di conformità firmate a sviluppatori, fornitori AI e team soggetti a regolamentazione.
Cos'è Panguard AI?
Panguard AI is an open-source security platform for AI agents. Its core job is to scan skills and MCP servers before they run, then protect agent actions at runtime using the ATR rulebook, which the site positions as an agent-era counterpart to shared detection standards such as CVE and Sigma.
The product is aimed at developers and regulated teams that need practical controls and evidence, not just alerts. The site says the community edition is MIT-licensed, self-hosted, zero-telemetry, and free forever, while paid plans add signed compliance evidence reporting, enterprise deployment options, and support for on-prem, VPC, and airgapped environments.
Cosa può fare Panguard AI?
Runtime guard behavior
Runs protections at runtime as agents act, so detections are not limited to a one-time preflight review.
Multiple security layers
Describes an optional deceive-and-respond layer in the pricing page, alongside protect and detect, for broader security workflows.
Evidence and compliance outputs
Produces signed, audit-ready evidence in PDF and JSON, with SHA-256 and Merkle-tree signing and framework mappings for compliance review.
Rule-based detection and updates
Uses an ATR rulebook that is local-first and deterministic, with rule updates distributed through the Threat Cloud and community rule contributions.
CLI-first deployment and operations
Provides command-line workflows such as scan, audit, guard, and status, with one-command installation and self-hosted operation.
Casi d'uso
“Pre-deployment review of agent skills”
Before deploying a skill or MCP server, a developer can scan it for prompt injection, tool poisoning, or other rule-based threats and review the findings before the agent loads it.
“Ongoing runtime protection”
Teams that want continuous protection can run the guard and status workflows to monitor agent activity after rollout instead of relying only on one-time audits.
“Audit and compliance evidence”
Regulated organizations can use the signed PDF or JSON outputs, framework mappings, and evidence packs to support security reviews and compliance discussions.
“Self-hosted deployment with local control”
Organizations that prefer local control can use the self-hosted community edition, which the site says runs offline and has zero telemetry.
“Enterprise security operations”
Enterprise teams can use the on-prem, VPC, or airgap options and connect the platform to SSO and SIEM workflows for larger deployments.
Domande frequenti
What does Panguard AI do?
Panguard AI is built to scan AI agent skills and MCP servers before they run, then protect agent actions at runtime. The source also describes a free open-source community edition and a paid Enterprise add-on for teams that need signed compliance evidence reporting.
Is there a free version?
The pricing page says Community is available today at $0 forever, with MIT-licensed open-source access. Paid offerings include a $25K one-time Founding Pilot and sales-led Enterprise plans starting at $150K+ per year.
How is it set up and operated?
The site says you can install with one command and that the Community edition is self-hosted, zero telemetry, and runs offline. The pricing page also lists pga CLI commands for scan, audit, guard, and status.
What outputs does it generate?
The product pages say Panguard AI can scan skills and MCP servers, protect agent actions at runtime, and emit signed, audit-ready evidence. The pricing and enterprise pages also describe PDF and JSON outputs, SHA-256 and Merkle-tree signing, and compliance mapping.
Is it meant for teams and regulated environments?
The pricing page says Enterprise & up includes on-prem, airgap, SSO, and SIEM support, while the enterprise specification adds SAML SSO, SCIM, SIEM webhook, and audit-log export. Community is self-hosted and runs on-device.
Informazioni rapide
- Category
- AI agent security
- Source domain
- panguard.ai
- License
- MIT / open source for Community
- Deployment
- Self-hosted; enterprise options include on-prem, VPC, and airgap
- Primary users
- Developers, AI vendors, regulated teams, and enterprises
- Command-line workflow
- scan, audit, guard, status
Analisi del traffico di Panguard AI
I dati sul traffico sono solo a scopo di riferimento.
- Domain Rating
- 1
Alternative a Panguard AI
Phinq
www.phinq.co
Phinq è un livello open source di governance a runtime per agenti AI. Intercetta le chiamate agli strumenti, le classifica in base al rischio e mette in pausa le azioni più rischiose per ottenere l’approvazione umana prima dell’esecuzione.
Codity
codity.ai
Codity è una piattaforma di revisione del codice basata sull’AI che analizza tutto il contesto del repository alla base di ogni pull request. Aiuta i team di ingegneria a esaminare le modifiche, individuare problemi di sicurezza, mappare l’architettura e monitorare le analisi degli sviluppatori tra i provider Git collegati.
Laminar
lmnr.ai
Piattaforma open source di osservabilità per agenti AI con tracing, rilevamento degli errori, valutazioni, avvisi Slack e self-hosting.
Kortix
kortix.com
Kortix è un centro di comando AI open source che consente alle aziende di creare, eseguire e governare agenti AI in un unico luogo. Include opzioni gratuite, team ed enterprise, con controlli di governance, scelta dei modelli e deployment flessibile.
OpenFang
openfang.sh
OpenFang è un sistema operativo open source per agenti, sviluppato in Rust, che consente di eseguire, configurare e supervisionare agenti autonomi. Supporta distribuzioni locali o self-hosted, modelli integrati, manifest personalizzati, canali di messaggistica e controllo tramite browser o API.
Kastra
kastra.ai
Kastra è un’infrastruttura di autorizzazione per sistemi di IA che verifica prompt, chiamate agli strumenti, comandi shell, richieste API e azioni del browser prima dell’esecuzione. Aiuta i team ad applicare le policy, mantenere audit trail firmati e governare i workflow di IA locali ed enterprise.