Pre-execution skill and MCP scanning
Scans AI agent skills and MCP servers before the agent loads them, using ATR rules to detect prompt injection, tool poisoning, malicious MCP content, and supply-chain threats.
Panguard AI
Freemium
Panguard AI é uma plataforma de segurança de código aberto para agentes de IA que verifica skills e servidores MCP antes da execução e protege as ações dos agentes em runtime, com controles auto-hospedados e evidências de conformidade assinadas para desenvolvedores, fornecedores de IA e equipes reguladas.
O que é Panguard AI?
Panguard AI is an open-source security platform for AI agents. Its core job is to scan skills and MCP servers before they run, then protect agent actions at runtime using the ATR rulebook, which the site positions as an agent-era counterpart to shared detection standards such as CVE and Sigma.
The product is aimed at developers and regulated teams that need practical controls and evidence, not just alerts. The site says the community edition is MIT-licensed, self-hosted, zero-telemetry, and free forever, while paid plans add signed compliance evidence reporting, enterprise deployment options, and support for on-prem, VPC, and airgapped environments.
O que Panguard AI pode fazer?
Runtime guard behavior
Runs protections at runtime as agents act, so detections are not limited to a one-time preflight review.
Multiple security layers
Describes an optional deceive-and-respond layer in the pricing page, alongside protect and detect, for broader security workflows.
Evidence and compliance outputs
Produces signed, audit-ready evidence in PDF and JSON, with SHA-256 and Merkle-tree signing and framework mappings for compliance review.
Rule-based detection and updates
Uses an ATR rulebook that is local-first and deterministic, with rule updates distributed through the Threat Cloud and community rule contributions.
CLI-first deployment and operations
Provides command-line workflows such as scan, audit, guard, and status, with one-command installation and self-hosted operation.
Casos de uso
“Pre-deployment review of agent skills”
Before deploying a skill or MCP server, a developer can scan it for prompt injection, tool poisoning, or other rule-based threats and review the findings before the agent loads it.
“Ongoing runtime protection”
Teams that want continuous protection can run the guard and status workflows to monitor agent activity after rollout instead of relying only on one-time audits.
“Audit and compliance evidence”
Regulated organizations can use the signed PDF or JSON outputs, framework mappings, and evidence packs to support security reviews and compliance discussions.
“Self-hosted deployment with local control”
Organizations that prefer local control can use the self-hosted community edition, which the site says runs offline and has zero telemetry.
“Enterprise security operations”
Enterprise teams can use the on-prem, VPC, or airgap options and connect the platform to SSO and SIEM workflows for larger deployments.
Perguntas frequentes
What does Panguard AI do?
Panguard AI is built to scan AI agent skills and MCP servers before they run, then protect agent actions at runtime. The source also describes a free open-source community edition and a paid Enterprise add-on for teams that need signed compliance evidence reporting.
Is there a free version?
The pricing page says Community is available today at $0 forever, with MIT-licensed open-source access. Paid offerings include a $25K one-time Founding Pilot and sales-led Enterprise plans starting at $150K+ per year.
How is it set up and operated?
The site says you can install with one command and that the Community edition is self-hosted, zero telemetry, and runs offline. The pricing page also lists pga CLI commands for scan, audit, guard, and status.
What outputs does it generate?
The product pages say Panguard AI can scan skills and MCP servers, protect agent actions at runtime, and emit signed, audit-ready evidence. The pricing and enterprise pages also describe PDF and JSON outputs, SHA-256 and Merkle-tree signing, and compliance mapping.
Is it meant for teams and regulated environments?
The pricing page says Enterprise & up includes on-prem, airgap, SSO, and SIEM support, while the enterprise specification adds SAML SSO, SCIM, SIEM webhook, and audit-log export. Community is self-hosted and runs on-device.
Informações rápidas
- Category
- AI agent security
- Source domain
- panguard.ai
- License
- MIT / open source for Community
- Deployment
- Self-hosted; enterprise options include on-prem, VPC, and airgap
- Primary users
- Developers, AI vendors, regulated teams, and enterprises
- Command-line workflow
- scan, audit, guard, status
Análise de tráfego de Panguard AI
Os dados de tráfego são apenas para referência.
- Classificação do domínio
- 1
Alternativas ao Panguard AI
Penligent
penligent.ai
Penligent é uma plataforma de testes de intrusão assistida por AI para equipes de segurança, pentesters e red teams. Automatiza descoberta, validação, reprodução de exploits e relatórios baseados em evidências em aplicações web, APIs, lógica de negócio e agentes de AI.
Kastra
kastra.ai
Kastra é uma infraestrutura de autorização para sistemas de IA que verifica prompts, chamadas de ferramentas, comandos shell, solicitações de API e ações no navegador antes da execução. Ajuda as equipes a aplicar políticas, manter trilhas de auditoria assinadas e governar fluxos de trabalho de IA locais e empresariais.
Agentinel
agentinel.habitwala.in
Agentinel é uma camada de segurança local para agentes autônomos de programação: verifica solicitações de instalação antes da execução e bloqueia pacotes npm suspeitos usando um banco de dados OSV offline e heurísticas, sem chamadas à nuvem.
BetterClaw
www.betterclaw.io
BetterClaw é uma ferramenta sem código para criar, implantar e gerenciar agentes de IA por meio de uma interface visual, com suporte a BYOK e controles de segurança integrados. Foi criada para equipes que querem executar fluxos de trabalho agendados entre ferramentas conectadas sem manter uma infraestrutura.
Heym
heym.run
Heym é uma plataforma de automação de fluxos de trabalho de IA, com código-fonte disponível e hospedagem própria, para criar e executar fluxos agênticos com um editor visual. Ela ajuda equipes de automação, plataforma e IA a orquestrar agentes, RAG, aprovações e rastreamento de execução na infraestrutura que controlam.
Craft Agents
agents.craft.do
Craft Agents é uma aplicação desktop de código aberto para trabalhar com agentes de IA, conectando modelos, APIs, servidores MCP, ficheiros locais e um navegador integrado.