nowfound

AI · alternatives · 2026

24 alternatives to Conduct, open-source guardrails for LLM and MCP tool calls

Runtime governance for AI agents. Allow, warn, or block every model and tool call before it commits. Hash-chained audit for every decision. Compliance packs for SOC 2, HIPAA, PCI DSS, EU AI Act, SR 11-7, and FDA CSA. Apache 2.0. - sseshachala/conductai

Conduct is an open-source runtime governance tool for AI agents and language models. It intercepts and controls model and tool calls, allowing administrators to permit, warn, or block actions before execution. The… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    AI enforces API Industry-Standards

    2024 · apigovernance.dev · its alternatives →

  2. 2
    Phinq▲82

    Stops AI agents before they break something

    Aug 2026 · phinq.co · its alternatives →

  3. 3

    The complete Chiaro methodology for SOC 2 readiness and audit. Controls, criteria, evidence standards, and every judgment call, published so you can check it. - Chiaro-HQ/methodology

    Aug 2026 · github.com · its alternatives →

  4. 4

    AI powered healthcare bots, integrate & embed with ease

    2024 · quickblox.com · its alternatives →

  5. 5
    DSALTA▲48

    AI Agents for SOC2/ISO27001/GDPR — Vanta & Drata alternative

    Nov 2025 · dsalta.com · its alternatives →

  6. 6

    The modern standard in AML compliance through AI agents

    2023 · flagright.com · its alternatives →

  7. 7

    Open Source Reliability Harness: Make your agents follow rules. One line of code to‎ ‎enforce, trace, and improve. ‎ ‎ - GitHub - open-bias/open-bias: Open Source Reliability Harness: Make your agents follow rules. One line of code to‎ ‎enforce, trace, and improve. ‎ ‎

    Apr 2026 · github.com · its alternatives →

  8. 8AF

    We’ve built an AI risk assessment tool designed specifically for GenAI/LLM applications. It's still early, but we’d love your feedback. Here’s what it does: 1. it performs comprehensive AI risk assessments by analyzing your codebase against different AI regulation/framework or even internal policies. It identifies potential issues and suggests fixes directly through one click PRs. 2. the first framework the platform supports is OWASP Top 10 for LLM Applications 2025, upcoming framework will be ISO 42001 as well as custom policy documents. 3. we're a small, early stage team, so the…

    2025 · gettavo.com · its alternatives →

  9. 9

    The audit layer for regulated AI agents

    May 2026 · ai.goderash.com · its alternatives →

  10. 10

    An information-flow policy engine for LLM agents.

    23d ago · openappa.com · its alternatives →

  11. 11

    We're excited to launch compliant-llm: an open-source toolkit that helps infosec and compliance teams audit AI agents against regulatory frameworks like NIST AI RMF, ISO 42001, and OWASP Top 10. Infosec and compliance teams are now responsible for tracking security and compliance risks of a growing number of AI agents across external and internal apps and third-party vendors. compliant-llm gives you a way to: - Define and run comprehensive red-teaming tests for AI agents - Maps test outcomes to compliance frameworks like NIST AI RMF - Generate detailed audit logs and documentation -…

    2025 · github.com · its alternatives →

  12. 12

    Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of duties, and cryptographically signed, offline-verifiable audit logs. - makerchecker/MakerChecker

    Jul 2026 · github.com · its alternatives →

  13. 13FL

    Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…

    2025 · its alternatives →

  14. 14

    I started using Claude Code (claude --dangerously-skip-permissions) and Codex (codex --yolo) and realized I had no reliable way to know what they actually did. The agent's own output tells you a story, but it's the agent's story. logira records exec, file, and network events at the OS level via eBPF, scoped per run. Events are saved locally in JSONL and SQLite. It ships with default detection rules for credential access, persistence changes, suspicious exec patterns, and more. Observe-only – it never blocks. https://github.com/melonattacker/logira

    Mar 2026 · github.com · its alternatives →

  15. 15

    Hi, Wanted to share something I've been working on for over a year. AuditBadger is a compliance management platform that uses AI to write policies (there are underlying "templates" with basic requirements), rewrite controls (or trust service criterions) to match the company context, help figure out your own controls, does initial risk assessment, and business continuity planning (which at least gives you an example of how the process should look like). Fun fact - I wanted to share this a year ago, but then I spotted something similar here. The most common comment was about lacking the SOC 2…

    Jul 2026 · auditbadger.com · its alternatives →

  16. 16

    AI-Powered Compliance Audits for HIPAA, GDPR & EU AI Act

    Feb 2026 · auditguard.org · its alternatives →

  17. 17

    Automated SOC2/HIPAA ledgers & LLM governance in one click.

    Mar 2026 · aitrustos.app · its alternatives →

  18. 18

    AI audit reports for SOX, SOC 2, and ISO 27001

    Jun 2026 · compliance.cyberglobal.ai · its alternatives →

  19. 19

    Observal is self-hosted registry for your coding agent extensions with a built in insight engine. Setup Observal, define the scope and share your Skills, MCPs and Agents with your peers. - Observal/Observal

    Jul 2026 · github.com · its alternatives →

  20. 20

    AI firewall for LLM calls, MCP tools, and agentic workflows

    Jul 2026 · argusai-tau.vercel.app · its alternatives →

  21. 21
  22. 22

    We’re building an open-source tool that makes it easy to expose secure, LLM-optimized APIs on top of your structured data—without manually designing endpoints or worrying about compliance. AI agents and LLM-powered applications need structured access to data, but traditional APIs and databases weren’t built with AI workloads in mind. Our tool automatically generates APIs that: - Filter out PII & sensitive data to comply with GDPR, CPRA, SOC 2, and other regulations. - Provide traceability & auditing, so AI apps aren’t black boxes, and security teams stay in control. - Optimize for AI…

    2025 · github.com · its alternatives →

  23. 23

    Discover secure AI from Bastio AI Security. Govern Shadow AI and ensure EU AI Act compliance with our enterprise platform. Start your AI security audit today.

    2013 · bastio.com · its alternatives →

  24. 24

    AI audit, EU AI ACT, Assessment, OWASP LLM 2025,NIST AI RMF

    Jan 2026 · aiaudittool.net · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →