Alternatives
Products that do what Knox By QORIS does
Intercept AI agent actions before they execute — not after
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9BO
We’re open-sourcing a simple way to add “canary tools” to AI agents via MCP honeypots. These are functions your agent should never call during normal operation. If a canary is invoked, you get a high-fidelity signal of prompt-injection, tool hijacking, or lateralization—no heuristics, no extra model calls. What it is: - Go framework exposing decoy tools over MCP that look legitimate (names/params/descriptions), return safe dummy output, and emit telemetry when invoked. - Runs alongside your real tools; ship events to stdout/webhook or your pipeline (Prometheus/Grafana,…
Sep 2025
- 10
- 11
Security for your own AI agents — before they act, not after
Jul 2026 · chloros.io
- 12
A pre-execution guard that stops your coding agent running destructive commands. One shell file, no dependencies. - vandith1/agent-guard
21d ago · github.com
- 13
- 14
- 15
- 16
- 17AL
AGENTS.lock keeps AI agent skills, instructions, and MCP servers in sync across Claude, Codex, Gemini, and Copilot CLIs using a single TOML lockfile as the source of truth. Instead of manually copying skills and configs between tools, you declare everything once in AGENTS.lock and run `al sync`. GitHub: https://github.com/luml-ai/AGENTS.lock
Jan 2026 · github.com
- 18
- 19
- 20AT
In light of recent news about an agent deleting a production database, I thought now would be a good time to share this. As the use of AI tools in production is becoming more common, sadly so will the high profile incidents like the one mentioned. Fewshell is a terminal agent specifically designed to avoid this. There is no setting to enable command auto-approval. This is by-design, so that the user never has to second-guess or worry about accidentally having it enabled. Originally my intention was to build an AI mobile terminal to make typing shell commands easy. But with so many…
Apr 2026 · github.com
- 21
- 22
- 23
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →