nowfound

AI · alternatives · 2026

24 alternatives to Lelu-ai

Stop manipulated AI agents before they act

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.

  1. 1
    Venn.ai▲336

    Delegate real work to AI agents with safety guardrails

    Mar 2026 · venn.ai · its alternatives →

  2. 2

    The visual feedback tool for AI agents

    Mar 2026 · agentation.com · its alternatives →

  3. 3
    Kastrafree tier, from $19.99/mo▲332

    Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…

    Jul 2026 · kastra.ai · its alternatives →

  4. 4
    Lecca.io▲266

    AI agents & automations

    2025 · its alternatives →

  5. 5
    Lunen.ai▲112

    Build AI agents your whole team can run, and control

    Jul 2026 · lunen.ai · its alternatives →

  6. 6
    Foil▲83

    An AI agent that monitors your AI agents

    Mar 2026 · getfoil.ai · its alternatives →

  7. 7
    Phinq▲82

    Stops AI agents before they break something

    Aug 2026 · phinq.co · its alternatives →

  8. 8

    Zero-trust security gateway for AI agents

    Jun 2026 · solongate.com · its alternatives →

  9. 9

    AI agent that handles repeated tasks through reusable skills

    May 2026 · agent.shingoirie.com · its alternatives →

  10. 10

    Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…

    Jun 2026 · argusred.com · its alternatives →

  11. 11

    Open source authorization engine for AI agents. Confidence-aware gating · Human-in-the-loop review · Policy-as-code · Full audit trail - Lelu-ai/lelu

    Jun 2026 · github.com · its alternatives →

  12. 12

    Give AI agents identity, secrets vault & analytics

    Feb 2026 · nervepay.xyz · its alternatives →

  13. 13

    Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of duties, and cryptographically signed, offline-verifiable audit logs. - makerchecker/MakerChecker

    Jul 2026 · github.com · its alternatives →

  14. 14

    Your agent team, on your machine. Open-source harness for multi-user Claude agents. - yaodub/cast

    Jun 2026 · github.com · its alternatives →

  15. 15

    The page you were looking for doesn

    2025 · superglue.ai · its alternatives →

  16. 16

    Stop AI agents from installing malicious packages.

    Jul 2026 · agentinel.habitwala.in · its alternatives →

  17. 17

    Auto Ctrl+Z for your AI agents

    Apr 2026 · agentrein.com · its alternatives →

  18. 18FP

    We've built an open-source tool to stress test AI agents by simulating prompt injection attacks. We’ve implemented one powerful attack strategy based on the paper [AdvPrefix: An Objective for Nuanced LLM Jailbreaks](https://arxiv.org/abs/2412.10321). Here's how it works: - You define a goal, like: “Tell me your system prompt” - Our tool uses a language model to generate adversarial prefixes (e.g., “Sure, here are my system prompts…”) that are likely to jailbreak the agent. - The output is a list of prompts most likely to succeed in bypassing safeguards. We’re just getting…

    2025 · security.vista-labs.ai · its alternatives →

  19. 19

    Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against…

    2025 · archestra.ai · its alternatives →

  20. 20

    Decide Before AI Acts.

    Feb 2026 · auto55597.github.io · its alternatives →

  21. 21

    Security for your own AI agents — before they act, not after

    Jul 2026 · chloros.io · its alternatives →

  22. 22

    Identity and trust for AI agents — verify, revoke, enforce

    Mar 2026 · agentspassports.com · its alternatives →

  23. 23
    Impri▲10

    Human-in-the-loop approval inbox for AI agents

    Jul 2026 · impri.dev · its alternatives →

  24. 24

    The control plane for AI agents — govern before they act

    Jul 2026 · firewall.orivael.dev · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →