AI · alternatives · 2026
24 alternatives to Cerberus
Cursor for AI hacking that can't go out of scope
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 2 we have checked on their own sites, 2 of them free or with a free tier.
- 1
Kastrafree tier, from $19.99/mo▲332Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…
Jul 2026 · kastra.ai · its alternatives →
- 2
Lunen.ai▲112Build AI agents your whole team can run, and control
Jul 2026 · lunen.ai · its alternatives →
- 3
- 4
AI code security review that runs entirely on your Mac
Apr 2026 · its alternatives →
- 5
VELA▲74Securely execute AI-generated & untrusted code
Jun 2026 · vela-secure.vercel.app · its alternatives →
- 6
Just watched this video by ThePrimeagen (https://www.youtube.com/watch?v=efwDZw7l2Nk) about attackers jailbreaking Claude to run cyber attacks. The core issue: AI agents need isolation. We built ERA to fix this – local microVM-based sandboxing for AI-generated code with hardware-level security. Think containers, but safer. Such attacks wouldn't touch your host if running in ERA. GitHub: https://github.com/BinSquare/ERA Quick start: https://github.com/BinSquare/ERA/tree/main/era-agent/tutoria... Would love your…
Nov 2025 · github.com · its alternatives →
- 7
We build runtime security for AI agents. The playground started as an internal tool that we used to test our own guardrails. But we kept finding the same types of vulnerabilities because we think about attacks a certain way. At some point you need people who don't think like you. So we open-sourced it. Each challenge is a live agent with real tools and a published system prompt. Whenever a challenge is over, the full winning conversation transcript and guardrail logs get documented publicly. Building the general-purpose agent itself was probably the most fun part. Getting it to reliably use…
Mar 2026 · github.com · its alternatives →
- 8
You can't hack data, that doesn't exist.
2023 · eighttoseven.com · its alternatives →
- 9
SafeClawfree tier, from $20/mo▲7Security-first hosting for AI agents
Feb 2026 · safeclaw.tech · its alternatives →
- 10
Find AI vulnerabilities before hackers do
Mar 2026 · promptbrake.com · its alternatives →
- 11
Hey HN After one too many customer firedrills regarding hallucinating or insecure AI models, we built a system to catch these issues before they reached production. The Arthur Engine has been running in Fortune 100 to AI Native Start-Ups over the past two years, putting security controls around more than 10 billion tokens in production every month. We're now opening up this service to developers, enabling you to leverage enterprise-grade solutions to provide guardrails and evals as a service, all for free. Get it on Github (https://github.com/arthur-ai/arthur-engine) to…
2025 · github.com · its alternatives →
- 12
ClawDash ▲2Ultra secure OpenClaw instance in seconds
Feb 2026 · cowork.antlab.tools · its alternatives →
- 13
Avery▲16Create a deterministic agent that runs on your hardware
Jul 2026 · avery.software · its alternatives →
- 14
Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…
Jan 2026 · github.com · its alternatives →
- 15
- 16
- 17
Security for AI-generated code, while it’s being written
Mar 2026 · github.com · its alternatives →
- 18
- 19
HackFast▲3Making cybersecurity easier, faster and smarter for everyone
2025 · hackfast.co · its alternatives →
- 20
Certus▲7Liability insurance for AI agents. One line of code
Mar 2026 · getcertus.org · its alternatives →
- 21GC
As I started to use Claude Code to do more random tasks I realized I could basically build any CLI tool and it would use it. So I built one that controls the browser and open-sourced it. It should work with Codex or any other CLI-based agent! I have a long term idea where the models are all local and then the tool is privacy preserving because it's easy to remove PII from text, but I'd definitely not recommend using this for anything important just yet. You'll need a Gemini key until I (or someone else) figure out how to distill a local version out of that part of the pipeline. Github link:…
2025 · cli-agents.click · its alternatives →
- 22
RiskKernel is an open-source, self-hosted reliability runtime for AI agents: deterministic cost, loop, and time budgets with a kill switch, crash-resumable runs, and human-approval gates. Your keys, your infra, no telemetry. Point it at the agents you already run with one environment variable.
Jun 2026 · riskkernel.com · its alternatives →
- 23
ModelRed▲10Hi everyone, We built ModelRed to test AI models and apps for security issues. Ran 4,182 attack probes against 9 leading models to see what would break. Leaderboard: https://modelred.ai (no signup, just check it out) Claude scored 9.5/10 but still failed on medical/financial prompts. Mistral Large scored 3.3/10. The gap between best and worst is huge. We test for prompt injections, data leaks, jailbreaks, risky tool calls, domain specific hacks, basically everything that goes wrong when your LLM has access to real data and APIs. The platform runs these tests…
Nov 2025 · modelred.ai · its alternatives →
- 24
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →