AI · alternatives · 2026
24 alternatives to Conduct, open-source guardrails for LLM and MCP tool calls
Runtime governance for AI agents. Allow, warn, or block every model and tool call before it commits. Hash-chained audit for every decision. Compliance packs for SOC 2, HIPAA, PCI DSS, EU AI Act, SR 11-7, and FDA CSA. Apache 2.0. - sseshachala/conductai
Conduct is an open-source runtime governance tool for AI agents and language models. It intercepts and controls model and tool calls, allowing administrators to permit, warn, or block actions before execution. The… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

- 2

- 3

The complete Chiaro methodology for SOC 2 readiness and audit. Controls, criteria, evidence standards, and every judgment call, published so you can check it. - Chiaro-HQ/methodology
Aug 2026 · github.com · its alternatives →
- 4

AI powered healthcare bots, integrate & embed with ease
2024 · quickblox.com · its alternatives →
- 5
DSALTA▲48AI Agents for SOC2/ISO27001/GDPR — Vanta & Drata alternative
Nov 2025 · dsalta.com · its alternatives →
- 6

The modern standard in AML compliance through AI agents
2023 · flagright.com · its alternatives →
- 7

Open Source Reliability Harness: Make your agents follow rules. One line of code to enforce, trace, and improve. - GitHub - open-bias/open-bias: Open Source Reliability Harness: Make your agents follow rules. One line of code to enforce, trace, and improve.
Apr 2026 · github.com · its alternatives →
- 8AF
We’ve built an AI risk assessment tool designed specifically for GenAI/LLM applications. It's still early, but we’d love your feedback. Here’s what it does: 1. it performs comprehensive AI risk assessments by analyzing your codebase against different AI regulation/framework or even internal policies. It identifies potential issues and suggests fixes directly through one click PRs. 2. the first framework the platform supports is OWASP Top 10 for LLM Applications 2025, upcoming framework will be ISO 42001 as well as custom policy documents. 3. we're a small, early stage team, so the…
2025 · gettavo.com · its alternatives →
- 9

- 10

An information-flow policy engine for LLM agents.
23d ago · openappa.com · its alternatives →
- 11

We're excited to launch compliant-llm: an open-source toolkit that helps infosec and compliance teams audit AI agents against regulatory frameworks like NIST AI RMF, ISO 42001, and OWASP Top 10. Infosec and compliance teams are now responsible for tracking security and compliance risks of a growing number of AI agents across external and internal apps and third-party vendors. compliant-llm gives you a way to: - Define and run comprehensive red-teaming tests for AI agents - Maps test outcomes to compliance frameworks like NIST AI RMF - Generate detailed audit logs and documentation -…
2025 · github.com · its alternatives →
- 12

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of duties, and cryptographically signed, offline-verifiable audit logs. - makerchecker/MakerChecker
Jul 2026 · github.com · its alternatives →
- 13FL
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
2025 · its alternatives →
- 14

I started using Claude Code (claude --dangerously-skip-permissions) and Codex (codex --yolo) and realized I had no reliable way to know what they actually did. The agent's own output tells you a story, but it's the agent's story. logira records exec, file, and network events at the OS level via eBPF, scoped per run. Events are saved locally in JSONL and SQLite. It ships with default detection rules for credential access, persistence changes, suspicious exec patterns, and more. Observe-only – it never blocks. https://github.com/melonattacker/logira
Mar 2026 · github.com · its alternatives →
- 15
AuditBadger▲19Hi, Wanted to share something I've been working on for over a year. AuditBadger is a compliance management platform that uses AI to write policies (there are underlying "templates" with basic requirements), rewrite controls (or trust service criterions) to match the company context, help figure out your own controls, does initial risk assessment, and business continuity planning (which at least gives you an example of how the process should look like). Fun fact - I wanted to share this a year ago, but then I spotted something similar here. The most common comment was about lacking the SOC 2…
Jul 2026 · auditbadger.com · its alternatives →
- 16

AI-Powered Compliance Audits for HIPAA, GDPR & EU AI Act
Feb 2026 · auditguard.org · its alternatives →
- 17

Automated SOC2/HIPAA ledgers & LLM governance in one click.
Mar 2026 · aitrustos.app · its alternatives →
- 18

AI audit reports for SOX, SOC 2, and ISO 27001
Jun 2026 · compliance.cyberglobal.ai · its alternatives →
- 19

Observal is self-hosted registry for your coding agent extensions with a built in insight engine. Setup Observal, define the scope and share your Skills, MCPs and Agents with your peers. - Observal/Observal
Jul 2026 · github.com · its alternatives →
- 20
ArgusAI ▲7AI firewall for LLM calls, MCP tools, and agentic workflows
Jul 2026 · argusai-tau.vercel.app · its alternatives →
- 21

- 22

We’re building an open-source tool that makes it easy to expose secure, LLM-optimized APIs on top of your structured data—without manually designing endpoints or worrying about compliance. AI agents and LLM-powered applications need structured access to data, but traditional APIs and databases weren’t built with AI workloads in mind. Our tool automatically generates APIs that: - Filter out PII & sensitive data to comply with GDPR, CPRA, SOC 2, and other regulations. - Provide traceability & auditing, so AI apps aren’t black boxes, and security teams stay in control. - Optimize for AI…
2025 · github.com · its alternatives →
- 23

Discover secure AI from Bastio AI Security. Govern Shadow AI and ensure EU AI Act compliance with our enterprise platform. Start your AI security audit today.
2013 · bastio.com · its alternatives →
- 24

AI audit, EU AI ACT, Assessment, OWASP LLM 2025,NIST AI RMF
Jan 2026 · aiaudittool.net · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →